Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5eca7963-e94b-3343-b5f1-91c68245fe90.roa
File:                     5eca7963-e94b-3343-b5f1-91c68245fe90.roa (raw, json)
Hash identifier:          75HRCX8CdmU219yaOe/pTkaAaCyEITtvw4QOLqRKtIk=
Subject key identifier:   14:21:AC:B4:72:39:07:DC:99:46:72:38:A4:30:AC:5B:6E:55:A9:51
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A62840FA5852856A4EB0B2880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5eca7963-e94b-3343-b5f1-91c68245fe90.roa
Signing time:             Wed 02 Jul 2025 12:36:04 +0000
ROA not before:           Wed 02 Jul 2025 12:36:04 +0000
ROA not after:            Tue 30 Sep 2025 12:36:04 +0000
asID:                     396545
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:84:0f:a5:85:28:56:a4:eb:0b:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  2 12:36:04 2025 GMT
            Not After : Sep 30 12:36:04 2025 GMT
        Subject: CN=02b422d9-fb7d-4693-a613-d04555798f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:27:ce:c8:3e:a4:4c:7c:9e:07:7e:ac:07:
                    88:47:33:c0:ce:33:b1:44:09:db:3b:fb:65:4f:fd:
                    05:d2:e3:cb:47:83:24:3a:f5:9c:4c:b9:8c:77:fc:
                    bb:9a:57:46:a8:9d:ff:d3:a6:c7:10:4a:ba:89:ed:
                    d7:9e:d3:36:ca:a6:2d:69:74:10:41:c1:38:65:d1:
                    a6:95:02:e5:e0:66:84:54:85:df:0f:f6:44:38:30:
                    63:ff:d8:9d:51:b5:e5:f0:3e:45:5d:06:cb:04:81:
                    37:b0:1d:46:b9:5a:8d:08:c2:39:a2:96:d8:03:4b:
                    08:3d:bc:bf:bc:13:fc:16:2f:a7:01:2d:52:8a:70:
                    83:5f:d5:a2:6b:8d:be:59:57:57:bb:fa:86:30:b1:
                    5b:79:ec:31:34:d1:f7:96:c0:2c:79:a4:e4:cf:c8:
                    7f:68:9a:54:39:23:15:5f:9e:db:13:80:10:fc:08:
                    7a:a0:00:0e:5e:d2:89:0e:df:42:8e:8f:44:d3:a4:
                    1a:5e:4d:15:ce:27:d6:fe:79:44:a6:dd:75:e1:68:
                    f8:52:84:22:fc:03:1e:e2:67:b4:01:27:ac:3f:f4:
                    26:c6:f7:a8:73:c6:54:3d:ce:91:b3:62:50:ed:d2:
                    92:83:dd:d4:b8:dd:0e:63:d8:81:99:4e:e3:c5:fe:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:21:AC:B4:72:39:07:DC:99:46:72:38:A4:30:AC:5B:6E:55:A9:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5eca7963-e94b-3343-b5f1-91c68245fe90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:87:92:6e:c6:14:cc:21:98:fd:7b:ea:06:03:36:23:0c:
         37:bb:79:fc:98:b8:6c:ce:6d:b8:71:7c:1a:95:44:f2:bd:fa:
         7e:aa:b3:9b:a9:b2:ff:60:04:40:cd:99:1d:36:e0:ea:ce:55:
         8d:59:c2:1e:46:06:22:74:f1:07:ef:9c:0d:84:9a:3d:2c:ad:
         e3:dd:7c:b2:8d:2a:e6:7d:0d:e6:18:40:6c:56:32:8d:50:dc:
         ab:4e:2f:79:25:30:87:12:7f:fe:25:71:2b:c6:7b:08:0e:a8:
         ca:33:88:d0:04:0b:62:7f:1e:f7:cb:86:f3:fb:e0:9f:a6:0b:
         d3:47:58:27:5b:e5:cc:06:2a:82:40:6f:b5:e9:49:05:85:48:
         62:07:4b:72:7f:b3:12:b7:73:d2:18:aa:2f:53:6c:fa:98:d0:
         6a:a5:d0:d2:43:b5:3a:16:78:c0:af:42:b2:8d:72:93:29:a0:
         d9:8b:3e:bc:23:26:21:ba:41:c1:fb:61:25:70:7d:66:0a:d5:
         2e:24:c8:92:d7:e4:16:67:13:9b:f1:07:d9:d2:99:a9:f2:40:
         55:39:b6:79:98:ac:2c:25:71:16:14:88:7b:ab:7f:89:a3:8b:
         2c:bf:d7:bc:8c:91:f2:e5:48:18:9d:3a:c0:41:57:cf:45:23:
         45:4d:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:47:54 2025 by rpki-client