Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/98aecc33-d70f-4323-a3ff-4c682daa583c/fb416215-18eb-307a-a6de-e8fc286794e9.roa
File:                     fb416215-18eb-307a-a6de-e8fc286794e9.roa (raw, json)
Hash identifier:          TKR6KyubUOvCu1CYthuPv5THTWkFgt6wyJFOCko30qE=
Subject key identifier:   3E:6F:E0:AB:72:69:55:07:1E:D0:0D:D3:D6:F4:D6:47:D7:DD:CF:B2
Certificate issuer:       /CN=98aecc33-d70f-4323-a3ff-4c682daa583c
Certificate serial:       010D0C9F4328584B0746BC518D015496D74AEE80
Authority key identifier: A9:31:DC:9C:D8:87:55:7D:0B:4A:C0:55:37:BC:55:81:CB:5A:07:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/98aecc33-d70f-4323-a3ff-4c682daa583c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/98aecc33-d70f-4323-a3ff-4c682daa583c/fb416215-18eb-307a-a6de-e8fc286794e9.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     21504
IP address blocks:        198.160.50.0/23 maxlen: 23
                          198.160.50.0/24 maxlen: 24
                          198.160.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/98aecc33-d70f-4323-a3ff-4c682daa583c/98aecc33-d70f-4323-a3ff-4c682daa583c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/98aecc33-d70f-4323-a3ff-4c682daa583c/98aecc33-d70f-4323-a3ff-4c682daa583c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/98aecc33-d70f-4323-a3ff-4c682daa583c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:bc:51:8d:01:54:96:d7:4a:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98aecc33-d70f-4323-a3ff-4c682daa583c
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=4cf449f2-f019-4800-a572-faaee97f19ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:96:b0:9c:3f:2d:3b:ee:9a:ee:1d:a1:e1:
                    8b:65:4d:84:9c:1e:d1:8f:5e:4f:5f:3e:73:83:ad:
                    c6:30:90:bc:77:14:60:56:6c:45:3a:96:98:2a:51:
                    6b:02:f7:b5:14:2e:9c:62:66:8f:be:10:fd:9b:c6:
                    a9:54:00:9d:e6:be:2e:a9:e4:a4:93:2e:c4:0c:76:
                    2c:e0:c1:17:b3:dc:f3:fd:2f:5e:ac:5b:d3:c5:3a:
                    ff:92:72:1a:e0:29:ec:1f:af:f0:23:29:0d:66:2f:
                    6c:be:ff:c6:1f:a8:47:ff:bd:83:3d:d1:3d:91:fc:
                    74:16:02:f1:d1:7c:2e:43:e8:4c:42:a8:c4:eb:c7:
                    95:a3:67:51:a2:5e:ff:e9:26:4d:85:51:cb:c5:64:
                    c3:3d:b4:07:ce:2c:a8:47:b4:59:f7:81:8f:6f:42:
                    fc:9b:54:1a:40:b0:1e:f2:48:5e:97:40:40:34:99:
                    69:0e:ca:ac:04:f5:d9:bc:0c:ab:5c:d8:96:6d:81:
                    e4:5c:95:bd:ad:bf:fc:59:9d:eb:ad:02:69:05:f4:
                    2a:29:cc:94:fb:3b:06:bb:57:63:e0:b7:4f:ad:bf:
                    39:a2:2d:a6:0a:c3:d4:ec:68:e9:db:cd:b8:b3:e2:
                    05:e5:91:ff:a8:9a:0b:e4:39:7b:bf:81:73:1b:24:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6F:E0:AB:72:69:55:07:1E:D0:0D:D3:D6:F4:D6:47:D7:DD:CF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/98aecc33-d70f-4323-a3ff-4c682daa583c/fb416215-18eb-307a-a6de-e8fc286794e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/98aecc33-d70f-4323-a3ff-4c682daa583c/98aecc33-d70f-4323-a3ff-4c682daa583c.crl

            X509v3 Authority Key Identifier:
                keyid:A9:31:DC:9C:D8:87:55:7D:0B:4A:C0:55:37:BC:55:81:CB:5A:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/98aecc33-d70f-4323-a3ff-4c682daa583c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:6d:fc:77:2c:8c:cf:58:65:e2:12:d3:dc:df:66:87:c4:
         3c:3f:e1:9b:05:f8:e7:6d:22:db:88:5a:8c:74:7f:f6:7c:85:
         95:e6:26:b8:c4:c2:ad:91:63:90:eb:24:72:c8:69:fe:bd:4c:
         a2:5f:64:76:64:44:60:8d:3c:c4:84:48:dc:8f:69:20:ed:f9:
         2e:0e:75:65:dd:45:4f:4b:9b:92:55:4e:64:c9:66:b7:8b:73:
         a9:7b:a7:87:53:71:13:97:ef:89:57:28:09:6a:32:e4:88:fc:
         56:7d:e0:41:b5:ef:f4:c3:d3:1a:69:6e:83:77:26:d7:ed:ed:
         85:ff:d1:b4:62:ae:46:ac:0b:ba:67:58:02:1b:de:75:9b:ce:
         75:73:ff:0b:a4:2b:a4:98:e5:3a:5b:e4:8d:95:ca:38:36:06:
         28:12:f5:29:df:d2:f7:fb:ee:36:24:26:17:6b:34:07:d8:e1:
         72:98:eb:ab:0f:4b:c6:53:ff:dc:29:f7:fd:7e:04:58:a8:39:
         a9:d0:ea:b5:0a:f9:07:3c:26:22:1d:9c:33:96:71:3c:01:8d:
         91:3a:82:99:a2:89:58:57:37:7e:a9:44:f2:9b:8c:0f:18:5f:
         9d:4b:18:1e:46:9a:b0:04:23:45:d4:ba:f0:05:e1:9e:28:56:
         ad:6b:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:18:57 2025 by rpki-client