Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
File:                     d14790e7-dd79-381f-8bae-9db9eff096c1.roa (raw, json)
Hash identifier:          khTdp8Ye2MyJXTQabSShQ4L+JDBtSG95pVNGz0pMzk0=
Subject key identifier:   99:EA:7C:8D:88:9C:F2:CC:96:E4:9B:EB:43:54:ED:AA:94:8C:EB:BA
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F4328584B531DEC71F9BD3650599A8BE0
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     62494
IP address blocks:        198.60.109.0/24 maxlen: 24
                          198.60.110.0/24 maxlen: 24
                          198.60.113.0/24 maxlen: 24
                          198.60.114.0/24 maxlen: 24
                          2607:24c0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:53:1d:ec:71:f9:bd:36:50:59:9a:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=f5b9b26b-7488-43e8-94d4-b4680a6394f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:27:e1:58:f8:6c:f0:47:85:59:38:a0:71:
                    02:85:8c:26:e2:6e:41:cf:71:af:e8:9c:14:e7:ec:
                    cf:43:e1:e2:65:4a:0b:a2:18:b4:89:4d:fe:82:b7:
                    f6:8b:7a:73:b7:4c:9c:e2:8f:f1:42:5a:f1:72:49:
                    5f:b1:0c:b1:8b:cc:ec:97:dd:90:8c:99:b3:32:a9:
                    68:d4:df:d8:81:02:84:c2:d1:e5:f2:71:f4:8d:72:
                    08:00:e4:e1:2c:d4:c9:1e:2c:bd:56:b0:79:d1:57:
                    9f:de:be:f1:7f:b0:c5:71:44:2d:da:0d:fe:9b:13:
                    99:43:63:06:76:be:b4:87:38:ec:5a:c5:13:be:07:
                    c9:07:42:52:31:25:6f:cd:63:b3:45:e9:6e:62:23:
                    5e:71:69:75:be:09:e3:e2:67:2e:75:68:96:37:1a:
                    2c:58:72:5f:d0:fa:b1:ee:51:21:ea:ea:46:cb:7d:
                    ad:68:b8:b4:50:07:2f:5b:b3:d8:ba:86:f4:39:c6:
                    ac:d3:69:cb:35:f8:9e:4c:7f:15:2a:73:34:b2:ed:
                    4c:c3:1b:86:5e:1e:a0:92:da:45:8c:bb:a6:09:4d:
                    aa:dc:52:37:a3:3f:c0:79:e6:90:d7:f7:35:75:5b:
                    8f:fc:75:f4:6d:c0:e6:77:fa:f2:11:2a:21:f2:b0:
                    44:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:7C:8D:88:9C:F2:CC:96:E4:9B:EB:43:54:ED:AA:94:8C:EB:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.109.0-198.60.110.255
                  198.60.113.0-198.60.114.255
                IPv6:
                  2607:24c0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:14:62:d0:16:ad:0b:cc:e3:cb:9c:89:c3:cf:d1:2b:2e:
         0c:a5:4b:ef:07:e0:1f:de:a2:21:5f:99:12:14:20:a4:be:1d:
         29:05:36:bd:e3:d2:ab:1e:64:35:da:73:d2:45:8d:35:04:f0:
         ce:7a:d3:6c:be:5f:c2:0d:30:d5:5a:ef:cb:17:de:92:b5:48:
         bc:77:2a:d0:f4:42:27:29:7a:49:f7:16:59:f2:83:49:df:e5:
         ba:0e:f7:75:8c:2c:0e:57:53:a4:ab:ea:df:f0:b0:32:89:da:
         64:44:b9:16:03:0c:30:0b:24:db:31:6e:a7:a5:af:69:a0:f3:
         3e:d1:dd:30:91:f2:91:45:8b:29:ba:3a:0a:12:42:b1:4d:a6:
         e9:8e:75:cc:cc:ed:a4:82:59:21:17:1e:90:78:c2:d8:72:2d:
         2d:e2:d7:c4:c7:6e:b6:dc:95:3c:ab:cc:94:ef:64:4e:ce:20:
         11:0e:e6:61:46:74:9a:a1:19:cc:64:ac:3b:d1:27:88:c9:cd:
         f3:c0:0f:e8:b5:86:00:7f:70:17:5f:0a:48:87:5b:c1:b7:91:
         7c:89:36:3b:45:c1:76:4c:56:2d:20:f3:0e:10:3b:7c:55:57:
         9e:4a:b6:d9:af:0b:6d:4e:63:b4:66:d5:8d:38:22:d5:aa:9f:
         ea:10:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:32:04 2025 by rpki-client