Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/ad56ed04-b8a7-3dcb-aadf-3ee1d5541952.roa
File:                     ad56ed04-b8a7-3dcb-aadf-3ee1d5541952.roa (raw, json)
Hash identifier:          edlQCFp1nrUlnPVxwgkSCXsHY335rBBCol+mT5wi8ig=
Subject key identifier:   8D:73:D8:3A:C3:80:82:1D:F2:5F:E7:B4:90:12:8F:B5:BD:3A:DB:11
Certificate issuer:       /CN=6c19ecdd-eda4-4041-9b92-0ac7a99fc631
Certificate serial:       010D0C9F4328584B4D11D972360D94B729DAF900
Authority key identifier: E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/ad56ed04-b8a7-3dcb-aadf-3ee1d5541952.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     399844
IP address blocks:        198.169.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d9:72:36:0d:94:b7:29:da:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c19ecdd-eda4-4041-9b92-0ac7a99fc631
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=4d02a802-2305-4ecd-8891-3d77dbeb645c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7f:90:43:70:53:12:cc:7d:0f:4c:ef:a5:73:
                    4e:4e:8e:be:a6:38:14:0e:45:d9:16:f7:0f:eb:40:
                    2c:dd:d1:6f:fd:48:34:5e:25:0f:b3:34:63:2b:5a:
                    4c:c4:a4:53:66:a0:10:b5:21:25:2f:27:af:8a:1e:
                    32:12:8b:61:f0:e4:2f:af:7b:2c:75:84:cc:b7:5d:
                    06:d4:bb:aa:48:d1:4c:4f:ff:b5:d7:9b:e1:a8:21:
                    9b:c5:5a:a7:2b:2b:fb:17:3b:1e:69:0b:e5:60:77:
                    7c:a5:ec:fe:c2:9a:40:e2:15:ac:5a:17:ba:bf:99:
                    65:37:5d:58:1f:98:ea:24:50:95:da:cc:fd:a1:06:
                    4f:9d:3c:ca:2d:4a:a3:f9:44:9b:e8:27:2e:77:25:
                    55:94:cf:e0:04:67:ef:38:ac:a6:d9:d2:35:71:69:
                    08:27:93:5a:0e:e6:08:bc:7a:3c:1b:dc:ac:a2:fc:
                    f0:c0:f7:bd:42:b7:9e:f4:78:11:f7:79:69:e7:a0:
                    1c:ac:0e:0f:86:2f:09:aa:f5:e0:fd:52:37:d6:c4:
                    4d:2a:b1:20:f9:45:0d:e2:56:ba:95:71:02:a9:3c:
                    26:71:59:3a:4f:14:e5:8f:4e:ae:94:0a:e2:05:54:
                    84:e7:02:6b:b0:2a:88:09:60:88:fb:70:1c:e3:4f:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:D8:3A:C3:80:82:1D:F2:5F:E7:B4:90:12:8F:B5:BD:3A:DB:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/ad56ed04-b8a7-3dcb-aadf-3ee1d5541952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.crl

            X509v3 Authority Key Identifier:
                keyid:E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:d4:03:bb:c7:07:d0:25:d3:26:95:39:16:6c:51:6b:57:
         39:ff:db:1c:24:3b:43:30:eb:03:69:e0:32:f7:15:b4:cf:d0:
         07:a3:ec:89:dd:af:8c:b0:39:cf:84:35:ea:2b:49:1a:b2:af:
         4c:8c:0b:87:cc:c8:68:8d:74:7c:f5:28:f3:85:b8:1d:b0:d9:
         d1:15:2f:82:39:0d:f2:51:c4:da:d1:bb:06:b3:81:f1:a5:38:
         a0:62:04:90:f1:20:0d:a0:1f:3c:20:bb:20:88:93:08:49:c4:
         75:e2:a0:df:07:16:98:03:9b:8d:d3:0e:15:61:9b:e7:d7:51:
         0c:3e:ff:3b:55:8a:31:a0:2d:c1:92:e1:1c:c3:38:05:a9:ff:
         03:d4:51:e4:aa:aa:18:67:48:69:76:c2:89:0a:9f:7d:ec:fc:
         b6:94:b8:27:26:c2:89:f3:ed:42:78:df:c9:40:f6:38:65:59:
         a5:17:15:aa:f1:ce:24:ed:4b:6e:7a:0e:5d:b1:1e:85:37:2f:
         7f:c2:3e:0e:ee:80:c2:06:c2:22:65:0a:90:86:a1:d7:c1:08:
         ba:da:e7:b5:21:21:d1:ed:66:78:b0:1c:54:2c:4f:10:f1:cf:
         bb:5c:de:2a:bc:c4:cf:7d:f8:8e:48:14:c0:1b:80:3d:65:e9:
         77:6c:ae:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:14 2025 by rpki-client