Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e286f83-c975-3f78-a885-b93318591a66.roa
File:                     6e286f83-c975-3f78-a885-b93318591a66.roa (raw, json)
Hash identifier:          O+4UJanET6Nku64gGd+5wKYkOJy+khpAA2gP5QPrDGc=
Subject key identifier:   B1:78:BA:5A:A5:63:82:0C:CE:A7:09:D2:E3:53:E3:25:13:A7:5C:9E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A62840DA06136AB20C2A71200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e286f83-c975-3f78-a885-b93318591a66.roa
Signing time:             Wed 02 Jul 2025 12:36:03 +0000
ROA not before:           Wed 02 Jul 2025 12:36:03 +0000
ROA not after:            Tue 30 Sep 2025 12:36:03 +0000
asID:                     396616
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:84:0d:a0:61:36:ab:20:c2:a7:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  2 12:36:03 2025 GMT
            Not After : Sep 30 12:36:03 2025 GMT
        Subject: CN=5b100cf0-7bc3-4e69-a326-47109aa4165d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d5:2c:81:15:40:f7:be:4c:ef:b8:0a:ae:98:
                    dc:74:33:34:16:87:77:41:c4:0b:ed:56:96:65:24:
                    49:f3:5d:34:e7:45:64:8b:28:aa:e1:17:13:fb:4d:
                    7d:ef:ba:b6:6d:da:b8:7e:15:56:b5:c8:4f:70:3e:
                    40:85:f5:dd:97:d2:34:2a:43:9a:34:59:9e:c0:db:
                    97:d7:78:a3:dd:81:5a:fd:2b:61:05:fd:c7:1d:00:
                    56:27:c5:52:c4:db:71:2e:2f:70:ca:e9:e3:be:14:
                    20:74:3c:78:74:28:f6:41:1f:94:0a:25:6a:84:70:
                    ac:f1:c5:f7:e4:6d:ae:1b:48:71:b1:1d:39:d4:5e:
                    6d:47:eb:d2:4a:37:fd:5e:77:e3:6f:f7:e0:38:4d:
                    81:49:6b:c4:a5:50:55:f3:b5:ed:8f:34:fb:72:b6:
                    ec:66:cf:3f:62:32:ae:3f:54:9f:e6:74:fe:08:04:
                    d3:f9:7c:3f:4e:fa:e2:b6:4a:ce:c2:a5:31:aa:e1:
                    c2:27:13:b6:e8:a8:a5:9d:d6:98:2b:ac:71:bf:a0:
                    7c:cc:05:ba:f8:87:e8:08:43:e8:d4:95:0c:f8:be:
                    a2:9c:40:e7:9c:63:ee:b4:ab:0c:ca:2e:84:93:66:
                    4e:c7:5c:a2:77:48:0e:5c:48:77:01:0e:91:04:b7:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:BA:5A:A5:63:82:0C:CE:A7:09:D2:E3:53:E3:25:13:A7:5C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e286f83-c975-3f78-a885-b93318591a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:87:ea:55:b9:13:ef:eb:bb:bc:7b:22:23:d3:c8:4c:75:
         02:82:68:85:c7:03:e8:9e:15:f9:43:40:eb:3d:04:8a:17:45:
         43:13:f5:79:de:8e:84:0c:4c:2c:9c:7f:18:b6:e6:ad:44:d8:
         03:b4:47:85:b2:ca:2d:f3:f0:34:63:9a:8c:4f:d3:f6:f9:6a:
         73:ee:e3:dd:e1:c6:d6:58:87:68:61:25:44:e8:fc:86:b4:1d:
         d5:d8:e3:a8:1f:98:c0:a5:e5:8c:2a:a5:2a:3e:61:b1:bd:9f:
         95:8c:29:35:c0:4e:96:d4:e9:f9:4e:f5:74:5a:35:e9:65:b0:
         db:e9:49:2b:8b:0b:cc:62:dd:91:9d:e3:ad:ea:33:a8:e1:de:
         3e:62:57:cb:5c:8a:b0:a4:4a:f0:09:16:10:7e:51:d3:c2:59:
         f0:79:36:1a:46:b3:9c:60:8a:c3:58:f6:4b:58:50:7c:6b:63:
         a6:d2:bf:42:08:7b:73:bf:3d:bc:f8:c1:11:14:8b:4c:05:79:
         23:fc:2c:09:51:dd:08:bd:03:c9:d0:cb:2f:bf:6a:26:e9:0d:
         59:1e:cd:04:84:ad:fb:5a:4f:3d:f5:2e:27:03:b5:16:79:da:
         36:65:8e:b0:16:78:39:5f:2f:d3:a7:34:9f:b5:e5:0a:7f:5f:
         38:e7:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:43:17 2025 by rpki-client