Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b4cb8fd-f347-30e7-97cb-a5869681a1ab.roa
File:                     1b4cb8fd-f347-30e7-97cb-a5869681a1ab.roa (raw, json)
Hash identifier:          rqjiAdUzpg1ZtjZTVOCJqk5HU6wtljQHXoJM6arSllw=
Subject key identifier:   9E:14:E1:79:4E:F2:67:92:3E:B0:6A:5E:5D:E5:78:9A:CA:F1:36:57
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A62840CF5945A7F67298B26A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b4cb8fd-f347-30e7-97cb-a5869681a1ab.roa
Signing time:             Wed 02 Jul 2025 12:36:03 +0000
ROA not before:           Wed 02 Jul 2025 12:36:03 +0000
ROA not after:            Tue 30 Sep 2025 12:36:03 +0000
asID:                     396827
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:84:0c:f5:94:5a:7f:67:29:8b:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  2 12:36:03 2025 GMT
            Not After : Sep 30 12:36:03 2025 GMT
        Subject: CN=5c90621e-300b-4405-837f-bd191cb3d6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:3e:4a:36:72:30:ba:09:f6:6f:df:eb:a4:
                    6c:ec:92:05:72:81:a4:6d:4a:01:91:92:eb:9b:ed:
                    c9:9d:a8:f8:8e:cc:55:31:e5:6a:a7:29:1a:a2:fe:
                    cd:f2:e2:0f:c9:a4:b5:46:88:c7:13:ed:17:3e:1d:
                    42:9e:8c:2f:a6:f8:d7:a9:82:94:59:97:de:37:00:
                    78:86:d9:d0:f6:15:89:e0:05:61:41:95:48:56:4c:
                    55:cf:fd:4d:a2:5c:0b:7e:b5:d5:d8:a5:ec:a3:55:
                    dd:e0:c6:e3:5e:d1:4d:fa:c1:68:9a:c2:e9:73:9c:
                    ff:ae:4c:14:b4:4b:6e:55:99:b3:bc:b3:e7:bd:37:
                    4e:d0:3d:3b:3a:39:05:65:72:a3:17:7c:ab:54:7f:
                    04:3e:43:1b:97:cb:02:2a:a8:3e:0d:4e:4c:3e:a6:
                    1c:db:76:6f:16:99:e2:7d:10:f1:2e:8a:8f:8d:78:
                    c3:4c:e4:96:03:0e:5e:0c:e6:70:77:0e:92:74:83:
                    d9:d4:0f:8f:14:c7:2d:99:d6:9e:da:6b:ed:a4:5d:
                    12:e7:35:df:ee:8c:70:90:3f:2a:3f:c9:14:4d:8e:
                    3f:c0:38:98:a0:af:37:5b:c9:c3:bf:3f:55:3d:d6:
                    b9:60:fc:b0:ee:6e:b9:f9:16:05:60:09:d4:39:3b:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:14:E1:79:4E:F2:67:92:3E:B0:6A:5E:5D:E5:78:9A:CA:F1:36:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b4cb8fd-f347-30e7-97cb-a5869681a1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:eb:54:42:6f:ed:e7:e3:57:96:74:04:37:53:6d:d4:d7:
         bb:df:c1:42:c7:c5:42:11:f5:48:e1:7b:b4:47:b4:4f:d6:73:
         0d:2c:e9:0c:7c:45:2e:9a:1a:a7:a1:89:c9:e1:1d:39:ed:41:
         b4:73:b0:a9:7e:e6:cf:af:f3:a9:8f:3f:52:e4:c6:4b:04:6b:
         19:a5:d4:36:6b:17:87:19:a4:ba:c8:56:b7:ca:be:d7:1e:5f:
         b4:80:da:85:24:52:ea:36:07:b1:2e:cc:fc:91:46:d0:8c:e5:
         38:f1:62:88:0e:1f:1a:a2:ec:21:e8:4c:a3:27:24:e6:5d:15:
         51:5f:24:10:a7:f9:b9:17:63:7b:42:eb:26:9b:e5:6a:5b:95:
         59:d5:f6:9e:6c:34:ab:1c:7b:58:db:cc:73:13:dd:6a:fb:91:
         b5:01:24:ee:de:d0:66:44:66:f5:65:bd:dd:a4:af:40:3b:eb:
         87:b0:77:f1:13:33:b9:72:22:7b:47:c9:dd:bd:b5:28:79:a2:
         44:ea:6a:35:f8:61:37:c4:93:85:b4:1b:ca:6c:01:fe:2d:53:
         9a:1d:dd:84:38:88:6a:b8:75:a4:50:d0:05:9e:d0:5f:94:ae:
         5a:17:b8:9f:86:a7:1b:e6:fb:4d:7e:04:db:79:49:46:2d:4a:
         fd:95:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:37:54 2025 by rpki-client