Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fa03e6e-8a82-3927-8f17-1361c8076d89.roa
File:                     6fa03e6e-8a82-3927-8f17-1361c8076d89.roa (raw, json)
Hash identifier:          KJOkCyF5ytBu2XcXefN8NtrkGhy7IyhCAUtjfUqrR34=
Subject key identifier:   3D:8C:DE:51:54:0F:58:A3:A8:82:CB:75:0F:31:A8:C7:8F:E9:76:59
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A78DCCFF51641D2EEBC0FCB00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fa03e6e-8a82-3927-8f17-1361c8076d89.roa
Signing time:             Thu 10 Jul 2025 12:42:40 +0000
ROA not before:           Thu 10 Jul 2025 12:42:40 +0000
ROA not after:            Wed 08 Oct 2025 12:42:40 +0000
asID:                     36618
IP address blocks:        198.41.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:dc:cf:f5:16:41:d2:ee:bc:0f:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 10 12:42:40 2025 GMT
            Not After : Oct  8 12:42:40 2025 GMT
        Subject: CN=5600349d-05f8-4c94-bf1c-e30324311a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:9e:a5:70:31:98:fa:57:96:39:bf:e2:76:
                    ed:72:fb:b3:da:6d:76:e3:41:95:3d:b9:c5:b5:2a:
                    ab:8b:0b:0d:ed:0c:98:d1:6c:48:34:f9:21:73:f4:
                    53:78:dd:c2:93:3b:ab:15:7f:03:8e:99:7d:c5:46:
                    70:ca:e3:f0:b5:fe:b9:27:4e:57:68:10:53:5b:be:
                    79:b2:2b:db:23:4b:2d:43:95:4e:ec:9d:aa:89:60:
                    2b:6f:a4:2c:5d:3a:9b:0c:88:1c:32:4d:6d:3e:82:
                    98:09:27:8a:16:ec:1a:81:af:7e:30:a7:00:a2:4f:
                    8b:4f:18:64:17:16:4a:6b:90:b1:39:a9:d9:4d:ec:
                    29:75:28:7d:2b:c2:9f:80:f9:ff:87:a2:ea:26:57:
                    18:28:26:66:ae:e5:48:aa:13:b8:b2:e1:79:9f:a3:
                    a0:01:8c:c8:85:0f:8e:b3:3b:a6:d5:4a:62:b0:7b:
                    46:4c:bb:54:db:d3:58:29:81:dd:f7:56:52:c9:e3:
                    cc:44:8b:02:3d:c8:58:61:0b:55:6b:11:cd:bd:5c:
                    4d:71:25:08:ae:9e:35:12:3d:c2:fe:64:3c:ef:4e:
                    07:bd:54:65:86:07:2b:2b:5b:a6:29:49:a2:76:59:
                    cc:2e:0c:52:76:1b:e8:ce:ab:5f:8a:ff:ac:26:88:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8C:DE:51:54:0F:58:A3:A8:82:CB:75:0F:31:A8:C7:8F:E9:76:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fa03e6e-8a82-3927-8f17-1361c8076d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:75:f3:92:9e:cc:d0:6c:5b:c9:b3:c6:67:45:f5:c4:97:e3:
         13:26:87:d2:d2:05:ac:ec:ce:fb:a7:8d:be:8e:50:be:9a:f7:
         c4:ba:11:d7:e8:8d:83:de:07:de:43:7d:b9:73:1f:ce:54:60:
         f7:a0:23:e9:87:5e:79:77:83:dd:06:18:a5:d0:ab:c0:8f:1a:
         a4:b1:60:51:6f:ec:b8:77:a3:bd:ce:36:5f:9b:99:92:04:92:
         70:c1:70:02:ca:2b:e6:ea:c0:3c:ca:92:7c:25:24:0b:85:f0:
         df:07:9f:46:82:78:75:1b:5b:f5:6a:b8:5e:12:1d:8e:0f:fb:
         db:fe:72:a0:a4:91:89:9f:37:74:14:24:4b:26:19:4d:d0:7e:
         a4:3f:da:2c:b3:29:4c:65:7e:14:01:bc:63:c4:fa:7a:6f:a1:
         06:01:16:e6:84:60:c1:94:49:e3:65:64:a2:8b:3e:e2:1e:39:
         2e:5b:c8:fe:15:58:8c:14:ff:5b:62:e5:7e:de:fa:57:52:bb:
         7b:bd:63:07:0d:1f:6c:6a:42:ff:1d:95:38:a1:7c:bb:30:ac:
         51:71:41:56:9f:5c:f7:b9:0a:d3:93:57:73:f3:00:01:10:3b:
         32:36:9e:82:ce:45:a5:be:e6:bd:25:2d:91:65:ad:44:8b:46:
         ac:ae:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:41:17 2025 by rpki-client