Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98ef9a5e-0661-3688-a756-95ebb7e5b1b2.roa
File:                     98ef9a5e-0661-3688-a756-95ebb7e5b1b2.roa (raw, json)
Hash identifier:          K3NOf01QwJUBr647u/mvZCMGBFzc/EzpHA+SvtJB/Cg=
Subject key identifier:   4C:89:9C:7B:3C:06:8E:16:A5:2F:03:08:66:AC:4A:66:BB:2F:F5:A5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CACF2F3E9C13D1B6443C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98ef9a5e-0661-3688-a756-95ebb7e5b1b2.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     14618
IP address blocks:        192.177.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:ac:f2:f3:e9:c1:3d:1b:64:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=9af4fd6a-9972-403e-9f75-cc8a5bb305d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:79:4c:44:c8:e5:64:82:55:3e:44:c4:b3:
                    7f:e4:4b:fa:a5:4d:0b:3a:88:07:21:44:de:95:e0:
                    77:4c:7f:63:92:12:02:ba:ce:ad:e2:f2:76:b5:14:
                    a7:38:45:a3:e0:c0:07:6e:8f:4e:0c:0d:95:05:b6:
                    d8:17:1d:cd:e1:e9:ac:31:4e:6d:e2:c1:6f:7b:ef:
                    f4:81:1e:63:2c:21:af:08:2d:33:cb:7a:dd:38:7a:
                    c0:02:81:9c:ce:5c:47:1a:38:ba:a3:79:2e:3b:bd:
                    77:b9:91:20:4e:2a:62:fc:f5:f1:10:f7:5e:e3:8c:
                    81:34:66:88:8d:5d:dd:2e:6c:5d:ce:97:7d:82:18:
                    ce:27:15:0e:07:9b:3a:c8:3b:7e:31:46:5b:42:f1:
                    4b:51:4d:23:ee:09:47:d7:46:f4:ff:d9:df:6b:dd:
                    0d:53:3a:98:c5:4a:f9:fb:99:d2:2b:d8:1a:22:c4:
                    1a:c5:c7:e9:10:d7:b3:7e:bb:7a:db:84:1c:86:d6:
                    8b:e7:c2:9c:99:54:fb:75:c0:f3:5f:7d:40:f5:38:
                    07:c3:1c:b5:33:8c:0b:d0:09:07:4f:9f:b3:45:93:
                    b1:ab:4a:a1:c0:e1:a8:c4:de:40:b2:37:6a:e9:20:
                    55:92:21:0b:c8:d8:12:4f:50:74:65:ac:6f:ba:6c:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:89:9C:7B:3C:06:8E:16:A5:2F:03:08:66:AC:4A:66:BB:2F:F5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98ef9a5e-0661-3688-a756-95ebb7e5b1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:98:e7:33:85:b2:11:8a:7f:61:77:fe:f3:6a:f5:46:f0:68:
         d0:9a:fc:7e:d2:f6:56:0f:6e:d0:8b:79:c7:bb:94:4c:e6:f5:
         a5:d1:f3:2d:4f:cd:9b:6d:0e:75:ff:b3:4f:42:ab:78:a5:5e:
         b0:34:ef:94:0f:b5:2a:ce:8c:16:16:17:a8:32:aa:f2:2d:34:
         68:32:8f:6a:82:e8:b3:1d:86:a1:ea:10:24:b4:52:e3:a7:df:
         82:1f:fd:da:80:4d:c1:58:ea:69:3c:6b:07:6c:fd:6f:b0:00:
         96:68:fa:ad:04:fa:ab:ea:66:5d:b8:b6:4b:c8:ec:55:b2:16:
         77:fb:81:f8:8f:49:aa:ad:19:72:10:1c:3a:ec:1f:00:b8:0d:
         56:4a:91:6c:fa:54:e7:41:da:e6:f0:d5:cc:03:d2:2b:57:4d:
         d7:dd:df:66:85:77:9c:ec:6b:b2:c3:1c:ef:1c:06:b2:a2:71:
         2a:e1:c5:df:2e:3d:19:76:d7:c0:e0:75:e8:e0:ad:19:54:c2:
         80:7c:9d:6d:ec:ef:81:db:4b:70:78:44:18:63:6d:e1:3e:34:
         50:20:5e:b8:10:97:47:22:73:6a:f7:70:bd:aa:07:e4:e0:b6:
         8f:0e:88:14:a7:7f:80:f4:5e:89:b4:9a:06:a5:66:31:55:08:
         f8:f5:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:49 2025 by rpki-client