Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
File:                     98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa (raw, json)
Hash identifier:          REF1yh4NvTQ03/m6DvylDpBbSlTK/euPVnz8LHfNqZA=
Subject key identifier:   A9:EA:8B:B7:D5:5B:A3:0A:3C:25:56:FF:04:56:2A:85:BF:39:1B:43
Certificate issuer:       /CN=7fd18149-017f-4551-ae16-4dcabee6b650
Certificate serial:       010D0C9F4328584B4D11E1A5C4DB7E47FB1F8A80
Authority key identifier: 42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     394791
IP address blocks:        204.10.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:e1:a5:c4:db:7e:47:fb:1f:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd18149-017f-4551-ae16-4dcabee6b650
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=07ee4179-bc47-460e-b610-a66d60b6278e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:4a:d3:ae:46:3f:fb:c5:da:8a:50:d6:20:
                    7a:ab:f2:66:a6:83:76:83:b5:39:f1:44:bf:63:f3:
                    b2:9a:fe:51:71:cb:24:f9:3d:96:63:26:16:46:04:
                    8c:91:cb:93:20:41:89:a7:43:1b:c5:f9:53:43:9d:
                    1f:9c:49:8f:22:7f:88:49:93:3c:0b:b5:12:b1:f8:
                    9a:a7:71:ab:9e:6d:ce:04:a8:ea:4c:b2:37:95:1b:
                    a4:11:e2:1d:cb:ca:2e:be:dc:6b:58:40:a1:12:cd:
                    d9:d4:a4:3f:44:af:1d:83:ed:94:a9:f6:93:90:65:
                    37:88:bd:9a:d3:8f:47:25:94:3d:11:1b:c9:a7:d0:
                    c4:bb:68:bb:54:28:08:2e:bb:17:93:de:f9:00:a9:
                    3e:a7:86:56:06:8b:78:3d:b2:10:1e:82:2e:ea:9f:
                    fe:2a:ff:81:b3:4a:cf:d9:54:ff:91:45:7a:a2:6a:
                    dc:d4:78:ed:bf:e2:32:fa:e1:a5:5b:70:b6:b6:bb:
                    5c:64:bd:2b:64:24:e2:50:58:bd:43:ce:9a:1f:5b:
                    fe:62:9a:00:08:47:e4:cb:03:ff:ce:f8:05:b5:b1:
                    a1:37:da:6b:f3:e3:9a:40:ec:63:99:75:e5:85:d5:
                    3d:5e:83:f3:3f:fb:1a:6f:9e:ff:95:5e:fd:b7:e7:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EA:8B:B7:D5:5B:A3:0A:3C:25:56:FF:04:56:2A:85:BF:39:1B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:57:03:67:d7:b1:9b:ea:78:3e:cd:91:4b:25:db:51:0a:
         46:1b:4c:68:48:a1:bb:63:b0:f0:e7:68:c8:50:d1:15:42:f3:
         27:7c:ed:2e:c5:07:f8:ab:10:62:b4:f9:36:6d:e0:97:4b:e6:
         5a:1b:9f:ca:73:6e:a2:35:a7:04:7e:d6:4e:e6:6b:35:45:d6:
         0b:26:28:d9:fa:02:1b:c8:1a:e0:bb:dc:8c:79:b9:e1:73:3f:
         95:a1:be:1d:ce:14:96:c5:fa:13:48:79:97:c0:76:2a:33:2f:
         3d:e9:ba:70:ed:15:eb:86:b0:88:c6:8d:77:67:53:b5:8b:53:
         93:c6:72:cd:df:b1:3b:c1:95:e1:bd:2f:69:ea:70:7c:95:c2:
         77:66:07:24:e9:05:18:28:8a:ad:60:40:de:70:f7:16:9d:8d:
         cf:36:9d:a7:97:d9:fa:17:d7:40:a1:07:4d:51:16:6e:21:ed:
         66:47:bd:95:29:f1:f6:19:d0:65:d9:80:db:8f:42:1b:ba:44:
         89:7e:e6:94:f4:7f:60:4e:29:41:9e:29:d4:d2:0b:11:54:1f:
         34:dd:20:f8:ca:e2:6f:ff:d6:a2:b9:34:e7:e5:5d:77:60:31:
         bb:11:e2:9c:c6:8f:24:28:45:67:98:43:79:af:5b:dd:e3:85:
         cf:83:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:11 2025 by rpki-client