Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa
File:                     0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa (raw, json)
Hash identifier:          0POtsz9kRpqpSiDYvOh8LHBdW9DeeRIyCFDpIVN5Ru8=
Subject key identifier:   2D:F5:AB:B6:D4:EA:A7:A1:30:22:E3:91:8D:DC:6B:D1:05:0F:F1:3B
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584A5FC5D857BBBDFC11A8F802CE
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        198.145.132.0/22 maxlen: 22
                          198.145.136.0/22 maxlen: 22
                          198.145.140.0/22 maxlen: 22
                          198.145.225.0/24 maxlen: 24
                          198.145.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:d8:57:bb:bd:fc:11:a8:f8:02:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=b6bbd7be-5b43-4803-b246-271bd4d79090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9c:3a:f5:79:00:db:f4:17:3d:fc:2c:2c:b9:
                    5b:20:1a:b1:22:54:e2:e8:2f:47:2f:47:20:b6:96:
                    a2:7c:90:75:60:57:7e:51:b0:e6:c0:f8:3b:b4:12:
                    b7:31:f4:a8:44:33:73:00:b1:d6:8d:6d:c1:9f:76:
                    d1:23:52:0f:b0:ce:ff:53:9f:c1:a7:1f:ea:5c:8a:
                    f7:99:8e:37:be:4f:52:ee:7f:83:7e:13:f2:e0:ba:
                    5f:aa:25:68:97:e9:af:33:27:cf:09:9d:3d:c4:0a:
                    4a:45:9b:3e:1f:4b:f0:fd:78:b6:4b:46:2b:43:11:
                    24:94:39:f5:7e:81:2a:ff:fd:d3:81:31:b9:cf:81:
                    93:b8:12:ef:ba:a5:1f:bf:a3:95:be:3c:22:0a:99:
                    70:49:cb:15:7f:3b:b0:7e:85:85:e0:14:bc:ea:bf:
                    0f:f0:c2:24:9b:61:92:e7:aa:f3:19:30:ba:64:88:
                    8b:3e:d1:82:15:8b:58:0b:8f:e8:66:59:35:65:0a:
                    c4:26:a8:e5:89:0e:c5:3f:57:bf:ab:a0:c1:ca:1d:
                    d8:a6:ad:01:36:21:bb:e6:32:cf:6f:ab:81:35:eb:
                    40:60:de:ce:8a:6f:74:fe:51:4a:3c:00:7e:c3:d3:
                    f2:42:5d:64:6e:a4:a5:80:82:83:4b:0a:be:e0:41:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F5:AB:B6:D4:EA:A7:A1:30:22:E3:91:8D:DC:6B:D1:05:0F:F1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.132.0-198.145.143.255
                  198.145.225.0-198.145.226.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7c:93:f8:33:46:f2:87:8b:57:15:67:20:29:40:32:e7:5c:
         67:44:ac:4f:76:b1:13:f8:cf:40:cb:62:82:88:44:6f:75:01:
         a1:cc:ef:1d:29:b9:a7:8d:8c:8a:91:b7:65:8f:56:2d:83:85:
         43:eb:e5:e7:7e:70:e2:99:9c:fb:b6:fc:73:20:af:7c:2c:cb:
         aa:3d:0d:d7:84:61:c1:2f:a3:5c:11:b2:13:2f:a9:fe:df:ce:
         8a:b9:7f:b5:9a:1c:f8:47:8c:40:c8:c4:5f:22:04:3c:4a:e7:
         80:69:a9:f6:70:b9:6c:e4:74:2f:f1:ae:3c:a0:8d:70:e4:08:
         f5:b6:15:bb:0a:9e:c7:8a:63:3c:97:17:6f:9c:d9:6a:9b:fc:
         d0:dc:c0:d3:f5:c3:e7:e0:b3:96:c9:7f:83:bc:8b:d0:64:bf:
         d6:a2:34:8e:8b:c6:bd:ec:26:f2:34:7c:13:d3:6c:46:36:c6:
         5e:04:9d:c8:d1:e1:f8:fc:45:28:45:c8:a3:64:4f:33:83:31:
         32:c6:80:4d:22:1e:c1:62:5a:96:44:d3:1f:62:32:4e:31:0d:
         85:7e:77:e1:bd:c1:bb:d0:ed:1c:01:17:07:e6:60:07:f7:e2:
         91:ff:03:cb:23:18:e5:27:8c:24:ee:14:a6:65:8a:2f:81:f1:
         02:05:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:50 2025 by rpki-client