Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/02b155af-a5ea-3439-823e-69a59b8f01a8.roa
File:                     02b155af-a5ea-3439-823e-69a59b8f01a8.roa (raw, json)
Hash identifier:          T/3IJ3RYk9ZvsVSr1nmxBizk634f6oOySezduFYWxaE=
Subject key identifier:   85:50:7E:34:97:45:23:C0:3E:BA:3D:BF:6D:D7:C0:AE:E3:21:26:F6
Certificate issuer:       /CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
Certificate serial:       010D0C9F4328584B434C6C6F1D77E3007BFA4480
Authority key identifier: B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/02b155af-a5ea-3439-823e-69a59b8f01a8.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        198.204.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:6c:6f:1d:77:e3:00:7b:fa:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=6516cd59-0910-4cca-9834-6d0b821e55e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:3e:21:b5:0d:58:e6:85:55:12:ca:0d:3f:
                    eb:59:cb:4e:58:74:4c:ff:be:d4:a1:4c:cb:b0:a8:
                    a9:53:65:77:81:2a:3a:84:a9:55:9a:c6:06:a9:44:
                    06:f9:8c:27:ab:13:6d:9b:c0:65:52:57:90:2c:a7:
                    31:c4:8c:d8:14:f7:08:c6:b4:6d:08:c2:30:7c:2e:
                    83:95:d4:c3:38:b0:5e:d9:ab:4a:30:86:cd:f8:8a:
                    a4:89:22:94:78:20:1d:c8:3e:94:c0:08:91:aa:fe:
                    63:43:f2:47:e3:82:19:ed:fc:74:24:2b:d3:96:25:
                    f4:1d:c7:ab:07:c7:86:0f:80:50:4b:02:85:88:a1:
                    4e:f6:08:1d:e9:bd:46:29:b5:48:80:12:8d:52:49:
                    79:cd:ff:86:26:21:35:e8:67:e0:27:0b:63:2b:6f:
                    22:dc:96:0c:7f:bb:b2:49:d4:60:b7:8d:45:0f:bd:
                    5e:d6:49:2d:60:99:64:0c:a6:57:37:88:08:2c:43:
                    42:64:29:ca:84:26:91:98:e5:24:f4:9a:1e:fe:50:
                    ec:33:c8:ea:b4:ba:a7:22:7a:0d:ce:73:62:5b:77:
                    2f:3a:84:9a:a8:1b:f1:93:71:61:21:f7:b2:a8:32:
                    2d:84:73:18:14:6b:55:6c:c4:ce:67:fc:93:55:5d:
                    55:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:50:7E:34:97:45:23:C0:3E:BA:3D:BF:6D:D7:C0:AE:E3:21:26:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/02b155af-a5ea-3439-823e-69a59b8f01a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl

            X509v3 Authority Key Identifier:
                keyid:B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:47:f2:2d:db:86:6e:3d:d0:70:75:aa:a9:a1:11:1e:f1:b0:
         60:86:9f:30:5b:a8:99:96:5b:14:cc:e5:20:3a:d7:51:e4:e9:
         ec:6a:f2:09:48:b2:92:1b:78:84:87:f9:ee:9e:21:bb:7f:fe:
         38:be:f5:e6:2e:0c:59:a6:f1:0a:d4:07:cf:79:f2:2c:88:88:
         48:df:f3:ca:92:36:44:f9:14:2e:45:8d:68:d2:55:00:07:89:
         a0:0f:43:58:7c:30:93:f3:09:b3:c8:fc:9c:db:cb:21:1b:45:
         45:db:fa:81:47:e9:b6:00:5a:46:02:bb:10:cb:88:48:30:b4:
         d8:3a:5b:65:5c:dd:d2:fa:ce:85:da:0e:2b:aa:37:53:96:94:
         e4:5a:4a:27:65:a6:16:04:a3:ee:75:aa:05:b9:5e:db:94:38:
         55:16:d1:39:31:2e:f4:90:7d:40:60:a1:0a:9c:0c:01:8f:95:
         48:3c:fb:21:b2:a2:d5:6a:c7:2d:c9:40:df:d0:cc:23:df:33:
         cc:73:c7:a9:e5:fa:c4:78:40:d4:fa:20:b9:4a:cc:bc:45:3d:
         12:00:01:fb:d4:58:2c:e1:c9:ad:ac:62:0a:30:d8:8a:af:4e:
         11:6d:7a:05:54:19:61:d4:d9:e3:ee:dc:49:f5:70:bf:f6:8f:
         c0:43:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:09:10 2025 by rpki-client