Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa
File:                     c94d6964-346a-351b-80d6-bc38161ce464.roa (raw, json)
Hash identifier:          y+Vh1P2Oa8y9cbjyPph1F/GLf8IgSctEF36sb1/SRT0=
Subject key identifier:   E1:65:E8:91:9D:05:AB:8D:B1:8A:E5:81:5D:38:4A:30:01:80:DE:B4
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A628409C8FE3D042693105680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa
Signing time:             Wed 02 Jul 2025 12:36:01 +0000
ROA not before:           Wed 02 Jul 2025 12:36:01 +0000
ROA not after:            Tue 30 Sep 2025 12:36:01 +0000
asID:                     396602
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:84:09:c8:fe:3d:04:26:93:10:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  2 12:36:01 2025 GMT
            Not After : Sep 30 12:36:01 2025 GMT
        Subject: CN=5f1d5264-9bcf-4217-8ee8-7400a0c3dc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:e9:f4:53:28:76:df:d9:30:80:64:30:e2:
                    2c:fc:90:31:cd:5d:71:17:56:61:44:9e:97:1b:e6:
                    8a:e5:b3:72:98:db:85:14:22:8f:79:e5:6a:09:2e:
                    c6:4a:51:c5:61:1f:6e:97:a9:73:60:b1:22:8a:b5:
                    8f:17:3b:5d:c4:ec:7e:b3:fa:49:bc:5d:ff:66:ec:
                    58:17:c1:cf:21:48:3a:95:a6:06:aa:a1:ff:5b:8a:
                    a7:a8:33:c3:35:1d:c2:9a:d8:7c:73:97:d7:a4:4f:
                    de:86:48:e7:75:53:f5:6b:2a:90:7d:b3:97:b6:77:
                    3c:77:b9:01:18:71:43:2c:c8:69:41:ae:8f:55:68:
                    09:f2:b9:18:fb:b1:c9:1a:88:c0:98:2e:14:4e:f9:
                    6d:16:2e:3f:68:52:cb:37:33:b5:86:7e:2c:f2:27:
                    ee:40:20:e0:c8:4c:b1:c8:93:c1:d2:31:0a:e1:f4:
                    6b:c2:9f:33:1d:86:15:c9:72:ee:c0:dd:24:ca:3e:
                    62:e3:e3:a3:ff:8b:b8:36:4f:0b:1e:cf:dd:92:d1:
                    8f:65:0b:31:37:16:4c:db:5a:98:73:ab:82:b4:96:
                    1c:62:0d:30:a0:1c:fd:41:f5:6a:c7:2e:e6:2b:c6:
                    c0:59:4f:ac:f0:c2:01:cb:00:d6:61:51:c2:58:2d:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:65:E8:91:9D:05:AB:8D:B1:8A:E5:81:5D:38:4A:30:01:80:DE:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:43:bd:d1:8c:20:37:ea:aa:ba:31:88:dc:0d:5f:7b:41:e4:
         32:73:b8:7d:a9:31:d8:bf:ab:46:07:ad:17:96:d4:01:46:7b:
         a6:fa:86:7e:2a:14:68:35:f2:58:3f:ec:9f:d5:7b:9c:77:d1:
         90:bd:28:55:dc:42:b7:da:6f:25:c7:00:f0:e1:29:4d:f3:23:
         08:6a:fb:b1:8b:62:02:9e:66:80:f6:f0:e1:bd:ac:61:09:12:
         75:9e:f0:0e:8e:64:75:5f:0f:2e:7c:d5:75:d2:01:e1:d0:04:
         2f:ca:b7:28:35:11:65:a1:87:f2:9f:81:bc:fc:7e:ba:fa:e6:
         b6:8a:19:58:b6:e0:6c:38:41:db:36:5d:21:73:81:89:37:98:
         b7:01:8f:6b:68:16:44:de:f2:ff:5d:f8:76:06:73:9e:d2:9a:
         88:3a:26:75:6a:e9:4b:c1:60:21:e3:2e:9b:21:e0:58:be:9e:
         dc:50:a5:67:29:74:6f:b7:4c:b1:39:05:87:39:12:1c:4e:c2:
         0c:32:6e:cd:ab:8b:ab:ee:44:da:d4:3c:30:98:12:3c:e8:58:
         00:dd:3b:87:3c:24:61:09:81:b6:a6:a6:ac:35:f1:60:13:65:
         17:10:23:8e:4b:43:58:bd:c8:d6:4c:e0:2c:2e:8e:58:37:41:
         8d:ce:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:38:49 2025 by rpki-client