Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b25fdfb4-a681-38c9-94f5-3875e3a880ce.roa
File:                     b25fdfb4-a681-38c9-94f5-3875e3a880ce.roa (raw, json)
Hash identifier:          Q9kb2K7EBq7Vc/n1QoQ/CgRPVWFAyjyZ1JRIom9ygUQ=
Subject key identifier:   4D:31:87:DD:DF:F3:3F:38:0D:F3:6E:41:AA:4D:CE:83:1C:39:A2:3C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A628411B134724028B696B680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b25fdfb4-a681-38c9-94f5-3875e3a880ce.roa
Signing time:             Wed 02 Jul 2025 12:36:05 +0000
ROA not before:           Wed 02 Jul 2025 12:36:05 +0000
ROA not after:            Tue 30 Sep 2025 12:36:05 +0000
asID:                     396583
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:84:11:b1:34:72:40:28:b6:96:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  2 12:36:05 2025 GMT
            Not After : Sep 30 12:36:05 2025 GMT
        Subject: CN=0bd7431c-ed0b-4f1b-bd25-ba4705f4caa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:dd:24:2e:dc:27:c4:5f:52:4e:2f:b4:13:
                    e7:b9:01:77:72:15:53:a3:8f:f1:28:8c:0a:43:4f:
                    07:df:5e:63:90:9a:f1:cd:6f:fb:d1:62:a9:16:80:
                    07:ee:da:28:65:4f:ff:e9:77:3a:2f:1d:a7:00:57:
                    61:e6:d3:bd:58:9a:b6:f0:70:65:a4:43:3d:ee:00:
                    32:de:96:35:dc:41:fe:0e:d7:7a:dd:22:2f:9b:e0:
                    72:4d:6c:81:1d:45:40:6e:19:f0:9a:0c:bc:79:43:
                    4a:bd:62:6e:f8:6d:2c:ae:39:31:d9:9c:84:0b:25:
                    f3:14:bd:77:a4:4f:43:d1:c6:c8:fb:ad:50:29:8e:
                    c0:c3:9d:e0:59:79:de:1f:8f:f4:2e:8a:22:aa:38:
                    a5:53:69:3b:f7:2a:0a:6a:a8:1d:e9:72:cb:de:06:
                    ce:3f:ab:5e:9d:ad:09:35:2a:90:46:0f:c6:ef:d7:
                    32:f7:ab:94:3a:05:6c:d3:c9:85:35:d2:ab:ee:0b:
                    a4:35:31:14:91:8b:bb:22:f4:2a:79:fb:09:35:90:
                    db:1f:ae:b7:db:e2:a6:cf:95:51:34:c1:51:3c:94:
                    38:6c:3c:c6:8a:2c:57:28:88:9a:eb:b5:ab:fd:56:
                    12:3a:28:f9:cb:3a:9f:84:8c:09:7d:71:5d:ad:1c:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:31:87:DD:DF:F3:3F:38:0D:F3:6E:41:AA:4D:CE:83:1C:39:A2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b25fdfb4-a681-38c9-94f5-3875e3a880ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:46:76:ab:65:51:2e:3f:c8:e6:c5:50:bf:ce:9e:00:10:
         94:b2:5b:40:b5:e0:67:74:82:f0:7c:24:13:37:ef:38:83:6f:
         9a:9e:a3:0b:6a:e6:c1:ca:74:4d:0d:e2:f7:85:39:b9:04:a2:
         b0:04:7b:c6:9d:f6:2a:28:fe:08:ee:ab:4c:bd:1f:21:17:0c:
         6e:d1:6c:b1:fb:0a:77:51:38:49:83:68:f0:f2:f6:53:4f:92:
         6f:e3:d7:20:e8:5c:19:3d:c9:9d:dc:fb:35:03:ab:0b:c5:ba:
         d6:cc:f5:a4:7e:45:46:29:fe:ae:7f:df:36:8c:31:ca:8b:84:
         70:3a:ba:49:30:43:3d:a9:a8:af:1d:3b:9f:fc:39:c4:9c:48:
         bd:c2:da:0f:60:83:e8:6e:8c:9f:ff:af:aa:5c:a1:1c:9f:af:
         4e:6c:10:86:bb:b1:00:3e:78:9a:a4:58:69:c8:62:28:5c:6a:
         66:f3:a9:ee:69:d9:8c:12:9f:6b:ba:1e:af:37:bf:60:98:e1:
         ef:c1:89:06:95:d1:2a:95:28:fa:39:9c:2f:7b:34:2a:43:c3:
         57:9b:cf:27:68:64:c6:18:06:b6:c4:44:3b:a7:d4:03:33:cb:
         03:bf:be:95:e3:dc:16:2b:86:e5:97:ea:e2:a4:67:1a:40:37:
         3c:49:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:41:22 2025 by rpki-client