Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/98bde158-b1d7-365d-ae30-4ecd92327008.roa
File:                     98bde158-b1d7-365d-ae30-4ecd92327008.roa (raw, json)
Hash identifier:          AW7nFBzNpAHmr6VWqM4mvcNGDdwJ7FdMVBKJRHnDuwE=
Subject key identifier:   BE:7A:BB:32:5E:02:0B:9D:9B:7C:BC:44:78:0C:3B:5A:89:59:64:A5
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584A4970673D1286EB8F706BB4F0
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/98bde158-b1d7-365d-ae30-4ecd92327008.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     14413
IP address blocks:        108.174.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:67:3d:12:86:eb:8f:70:6b:b4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=c7bf2efe-17e2-43d3-a089-42f777f63fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:b0:95:d8:c8:7c:06:7f:46:0a:13:24:8c:
                    1d:13:93:47:3f:61:1a:57:f8:2f:08:e3:b2:93:cc:
                    2f:c4:40:e1:dd:5f:45:97:1e:42:3d:d1:6b:67:9a:
                    98:14:15:27:50:05:28:0e:64:34:0d:90:7b:01:bc:
                    25:bf:fe:13:03:82:6a:16:c8:c7:6f:3a:ce:ce:e0:
                    c7:f8:90:d0:88:04:e0:47:e3:ee:90:06:e6:3c:38:
                    fc:af:8a:5a:b8:6c:22:3a:28:d5:6a:ce:89:ec:a0:
                    c4:82:17:c1:64:44:86:01:29:68:ff:57:0e:5d:f3:
                    67:18:8b:2a:e1:7e:20:d8:6b:22:73:dd:33:78:4f:
                    6f:f4:00:18:eb:a4:18:ce:23:d9:b0:07:5e:92:30:
                    d1:bd:c1:2d:c8:1d:a4:50:8c:6b:ef:11:e8:3c:c6:
                    d1:5d:08:4c:00:95:73:03:cc:b0:8a:c8:6f:a1:fa:
                    2d:18:cb:b5:fa:7d:d2:ea:d5:49:12:aa:95:c7:52:
                    26:f8:c7:79:eb:50:08:42:47:2d:f2:fa:a0:a2:53:
                    92:fc:2c:16:62:0f:f5:0e:66:6a:1b:bb:1b:c8:7f:
                    41:b6:ba:94:c9:4d:61:70:36:c8:1a:fc:e3:21:03:
                    eb:e6:c2:a8:8d:47:53:44:8e:05:78:e8:01:79:c1:
                    07:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7A:BB:32:5E:02:0B:9D:9B:7C:BC:44:78:0C:3B:5A:89:59:64:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/98bde158-b1d7-365d-ae30-4ecd92327008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:40:a7:a7:81:13:16:11:c7:e0:d6:1e:59:24:e5:ea:5c:
         7a:68:65:7d:22:29:3f:61:09:8d:36:e6:49:6e:19:0a:c9:d2:
         83:e7:89:eb:49:87:7c:32:3c:15:a2:fd:6b:f8:65:4c:63:25:
         53:68:92:e7:2d:cd:71:ae:5a:0a:fc:c7:64:4b:f4:8f:05:21:
         1b:cb:0f:d5:70:aa:0b:15:b9:56:a6:e5:ee:dc:d2:2c:b6:17:
         23:4c:35:6b:fa:13:3a:4b:5b:43:e2:a2:42:60:44:ea:fa:d1:
         31:06:5c:df:ca:3f:95:b7:26:b1:1b:e4:bb:78:8b:fc:65:9a:
         00:b4:c1:4b:8c:3e:f8:bc:86:58:64:11:64:62:1d:17:ee:39:
         60:e8:b1:60:86:c2:75:96:5c:e9:9c:dc:7b:ce:e4:c9:b2:cc:
         1f:a0:3a:06:4a:4c:87:e1:12:7c:1e:f9:17:f1:e0:4a:14:f1:
         07:2c:02:d6:78:49:38:f0:2b:d2:70:e8:d6:31:60:14:cb:f9:
         51:10:5b:37:61:3b:6d:18:95:fe:5b:bc:17:26:8b:fc:91:15:
         b3:cb:7d:60:71:3f:35:5b:d2:9d:79:00:1a:da:bc:2e:20:a2:
         c6:2c:d2:7b:50:13:82:38:01:de:f2:23:aa:8d:29:e5:d4:d5:
         b6:a5:39:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:37:27 2025 by rpki-client