Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d5f41184-c58d-31cb-97fe-a6f6497d8017.roa
File:                     d5f41184-c58d-31cb-97fe-a6f6497d8017.roa (raw, json)
Hash identifier:          c0/uJ16q4JcvT1YyYBSQnUUueo/K+csUeBbTV8CUr3o=
Subject key identifier:   20:04:75:54:7B:0D:03:C8:6C:83:2E:71:CF:A2:BA:E9:E0:88:6E:17
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A92063262C569AE9C91FB4AB0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d5f41184-c58d-31cb-97fe-a6f6497d8017.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     150436
IP address blocks:        98.96.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:32:62:c5:69:ae:9c:91:fb:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=3d4b59ca-4f08-43a8-814b-a347f421315b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:f7:d8:49:4c:ab:45:0d:26:43:0b:12:98:
                    29:65:7e:a2:b3:23:fb:c7:b5:ed:15:ae:85:20:ff:
                    e2:f0:ff:24:07:de:e1:48:0f:c5:26:37:61:a3:c7:
                    62:9f:cf:9a:16:c1:53:d2:84:f4:3f:ca:dd:64:42:
                    a2:80:17:d5:d2:a6:c7:ca:21:c3:f9:af:bd:bb:3c:
                    f5:00:fa:82:4c:d6:32:bd:08:fc:7c:a0:f5:8d:a4:
                    6c:6b:d3:cc:f3:bd:48:b3:64:10:90:9c:c7:2b:f4:
                    71:54:bc:89:50:24:f2:83:dc:72:46:86:8d:e3:dc:
                    37:37:06:a0:ba:93:09:9b:df:ef:4c:6d:11:81:3d:
                    0b:3d:37:df:d9:ef:ba:8c:3f:6d:bd:cc:69:36:de:
                    0f:29:17:77:71:b4:59:35:54:ee:f3:de:9b:32:bb:
                    44:ae:3a:8d:04:3c:6b:84:55:9b:05:4d:d4:53:a7:
                    b8:63:99:4a:34:05:90:28:c2:5a:d3:15:91:a7:25:
                    89:b7:08:14:22:97:b4:a0:b8:d5:f2:74:73:b1:2e:
                    78:8a:52:a2:0b:c0:11:a4:27:c1:23:9d:fd:33:12:
                    c5:31:1f:0f:f2:bf:37:51:9a:c2:38:9b:fd:12:3c:
                    cb:b3:1d:45:1e:41:c1:5a:b7:e2:74:26:09:8e:ef:
                    12:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:04:75:54:7B:0D:03:C8:6C:83:2E:71:CF:A2:BA:E9:E0:88:6E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d5f41184-c58d-31cb-97fe-a6f6497d8017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.96.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:52:44:e0:a2:b6:f8:d4:c5:fb:fb:d2:f7:cf:26:1f:56:
         48:1a:21:3e:5d:82:50:8f:73:85:07:65:17:14:7d:4e:28:17:
         26:48:d8:a1:ad:fb:07:4f:91:a2:5c:73:d2:76:c8:c9:96:09:
         a9:f0:16:61:f1:6c:55:95:e2:74:2b:64:a8:71:bd:8c:f1:bc:
         03:52:e8:8e:95:33:c3:f1:a9:bf:f3:3d:6b:00:13:b3:00:c7:
         0a:b5:c3:ad:90:da:9b:32:2b:46:7e:42:66:f6:32:a1:a6:ed:
         69:cb:15:b7:80:a1:6a:b3:78:15:85:4c:69:14:00:c4:d0:6e:
         e1:c8:c6:ea:a0:27:5f:34:f2:52:bb:64:c4:16:55:44:98:d6:
         58:23:14:06:ed:10:5a:2b:63:f0:a0:43:f1:ff:44:47:7c:94:
         cf:9b:1b:c6:2d:e7:62:68:c4:b3:77:2a:04:41:bf:b9:da:33:
         fb:cf:05:18:c6:1a:42:45:87:63:3c:02:55:95:f5:8e:31:1f:
         99:b3:d4:5e:39:08:9b:65:d0:56:0c:51:e6:5f:a4:91:7c:a1:
         0b:75:93:ec:f1:6b:72:e6:e1:6b:cb:61:51:e0:95:2c:8e:60:
         33:c0:f1:27:c8:f7:67:2d:ff:44:82:d2:34:43:83:43:3d:10:
         88:ae:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:33 2025 by rpki-client