Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa
File:                     bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa (raw, json)
Hash identifier:          YRvR9zcywX4+REDi7nS731Knnpq1Pi9w7GMjQVxvBSU=
Subject key identifier:   6D:E4:A8:ED:D7:6D:97:C2:F0:91:EB:BD:12:B0:35:51:EB:3B:2A:EC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A78DCD12981A2A2B46C8C9F60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa
Signing time:             Thu 10 Jul 2025 12:42:41 +0000
ROA not before:           Thu 10 Jul 2025 12:42:41 +0000
ROA not after:            Wed 08 Oct 2025 12:42:41 +0000
asID:                     397203
IP address blocks:        198.41.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:dc:d1:29:81:a2:a2:b4:6c:8c:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 10 12:42:41 2025 GMT
            Not After : Oct  8 12:42:41 2025 GMT
        Subject: CN=af8f69dd-a6a0-4931-8063-7a926dd86e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:c0:8a:ca:12:65:af:61:42:cf:97:7b:7f:
                    de:4d:5a:b3:3c:97:4b:22:95:a1:67:60:72:5a:35:
                    0f:9a:65:0f:b6:b6:a4:ba:a7:5e:f3:c0:65:a3:9f:
                    ca:87:56:73:26:73:78:9f:29:ca:60:19:c0:b1:49:
                    44:0b:20:c0:29:c5:d2:78:2b:53:84:3b:28:dc:40:
                    a7:0e:52:5f:7d:69:71:03:8c:90:17:d7:d1:6b:0e:
                    2c:c5:5d:72:4e:f1:62:81:35:fc:2d:d3:ac:8f:dd:
                    cc:45:37:78:5f:db:00:db:97:ef:33:ef:88:17:b6:
                    50:27:ba:86:1b:5a:ea:dd:e8:2c:ef:42:74:00:7c:
                    af:f8:6a:49:b2:35:f9:23:33:ee:74:e0:48:c2:cb:
                    60:6c:e9:89:ac:c0:a0:a2:d1:23:f1:9c:e5:90:b5:
                    98:21:8d:13:19:b2:5f:d6:9f:bf:2e:57:69:b2:fa:
                    11:f5:00:61:7c:6a:45:4a:92:36:d5:35:e9:03:39:
                    dc:95:9d:af:33:3b:f6:d0:7c:ea:56:de:62:6d:db:
                    ad:02:45:e2:a4:e5:7c:ff:80:3b:17:59:66:aa:4f:
                    5d:1d:32:10:c0:8b:4b:96:97:70:c9:e7:77:0b:7c:
                    c5:42:1a:00:59:ec:a8:0e:60:90:40:ba:2e:13:02:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E4:A8:ED:D7:6D:97:C2:F0:91:EB:BD:12:B0:35:51:EB:3B:2A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:15:e5:7b:34:93:2b:39:05:59:f2:6e:6b:74:0d:c7:1f:3d:
         1e:ab:7f:38:b1:a9:5b:0c:57:8c:78:87:95:65:6a:15:f1:70:
         80:88:20:af:8d:44:78:81:dd:7b:92:c9:aa:a4:1c:04:25:6d:
         eb:1e:75:b3:c2:63:8a:06:0f:5b:69:e5:7c:bb:6e:3b:20:84:
         9a:16:6f:41:47:74:10:80:59:c3:f2:b9:54:6d:42:aa:7a:77:
         11:11:a1:f4:0d:87:c6:35:38:cd:da:61:8b:21:38:58:a8:dc:
         be:26:19:3e:54:7e:4a:c8:9f:91:3a:f3:9d:22:d9:fe:2f:a4:
         b4:94:e1:af:7c:a6:b7:86:6f:50:6a:6e:68:c3:06:fc:b0:ab:
         9a:36:6f:60:b0:ce:3b:1a:07:f6:1f:87:8a:0a:9e:ce:cb:79:
         88:51:de:5b:9f:f2:18:fd:69:91:e1:74:e2:34:fd:30:6c:15:
         50:80:73:3c:2b:0a:a2:28:81:42:22:2b:5b:bf:d7:e8:8c:b3:
         4e:e3:d5:cf:6b:41:7f:80:7b:0f:d0:2e:c0:f5:ba:62:18:88:
         43:d2:3a:99:f5:12:61:a0:37:37:ca:64:6e:df:a4:fa:ec:12:
         c3:bd:ce:a1:cb:54:5a:ed:c9:00:f0:ab:38:b3:72:61:a1:a3:
         57:e7:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:39:24 2025 by rpki-client