Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6ab68db7-9438-31a1-81d9-fb504cbece6b.roa
File:                     6ab68db7-9438-31a1-81d9-fb504cbece6b.roa (raw, json)
Hash identifier:          uQOAf7+Hrh6H2xu5fbRBJJY64IdeVAXRHENc7tRhZj4=
Subject key identifier:   45:85:26:1C:C9:A5:62:C3:42:A1:E3:55:50:EC:A9:DC:BE:55:B0:55
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584A3B7AF69C94CE3CC7D08A3780
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6ab68db7-9438-31a1-81d9-fb504cbece6b.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     9009
IP address blocks:        198.145.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f6:9c:94:ce:3c:c7:d0:8a:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=798a999e-ddf4-4e8a-979d-72179141ab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:67:d1:4b:bd:43:e9:ae:46:9b:36:0c:45:
                    f9:a9:e9:12:08:5d:d9:fc:52:1d:84:16:47:62:0c:
                    21:e7:4a:95:9e:b2:47:0f:2c:28:95:10:a5:ef:3d:
                    ce:23:a0:fd:53:b9:8a:7e:a3:91:16:65:b7:a5:68:
                    b6:22:40:b0:b4:39:95:e3:dc:5a:fe:a1:91:c3:0c:
                    94:03:0b:af:3f:07:dd:14:af:92:f8:bd:a5:f6:7b:
                    db:e3:fe:ca:80:73:54:79:21:85:66:b6:bc:1b:c3:
                    0e:cc:2e:11:73:41:9c:7e:a5:20:90:d6:d5:95:97:
                    af:05:b2:08:3a:2d:63:82:13:81:7f:8c:64:64:61:
                    0a:d9:a4:a6:d7:fd:b8:32:8b:02:3d:48:00:09:f8:
                    33:33:12:fc:12:0b:17:e6:33:1e:85:95:6f:43:20:
                    7c:73:7d:38:4a:89:21:4d:78:25:b8:3d:b0:a3:c8:
                    47:58:59:e1:d8:5f:73:5e:37:dd:72:2a:0f:7c:86:
                    8b:38:63:e3:5d:78:42:71:83:af:82:7a:0d:12:a8:
                    5d:8d:13:99:ed:0b:f4:c1:9a:d6:85:83:46:01:12:
                    8c:b2:c9:71:03:ac:6d:35:c8:cb:48:a8:5f:22:40:
                    06:63:91:4f:82:bf:af:a0:e0:a5:1d:79:61:12:18:
                    85:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:85:26:1C:C9:A5:62:C3:42:A1:E3:55:50:EC:A9:DC:BE:55:B0:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6ab68db7-9438-31a1-81d9-fb504cbece6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2a:cf:e0:be:86:ea:b7:6c:08:93:6f:33:c0:44:5b:0d:7a:
         78:c8:6b:a1:14:eb:8c:1b:fc:de:a7:6d:91:cb:20:66:81:e0:
         3f:6e:fd:79:c3:31:d1:a2:6c:7f:84:bd:35:be:43:1f:63:28:
         c1:d0:63:45:6a:47:91:01:36:3b:f0:fc:f8:98:00:6a:2f:b5:
         57:9a:fb:86:d5:bd:2c:a6:cc:5e:de:71:2f:ba:54:5c:90:94:
         8d:7e:b8:d3:09:e4:82:3b:86:69:a4:1e:29:ad:2b:b8:8e:c2:
         4b:5a:df:5e:e4:a0:ba:dd:8a:dc:e9:bf:98:11:59:18:4b:a1:
         37:ae:9d:a8:97:b8:f5:e1:83:2a:63:65:e5:fa:a6:af:00:1c:
         fe:6e:81:2f:75:dd:e9:d4:95:63:11:5e:e0:1b:90:96:f0:7d:
         a4:83:ad:4c:e2:aa:e3:fb:af:5c:dc:14:ff:a1:16:2d:e2:06:
         83:83:ce:99:89:30:25:1c:3b:bb:33:8a:7b:1b:29:e2:7c:c9:
         f6:51:42:e7:9a:fe:c7:8f:86:e1:ac:6c:11:dc:13:24:e8:ae:
         ca:81:c4:71:53:16:4f:00:c9:0c:9d:60:b1:4d:6f:fa:f1:df:
         4d:02:ca:e8:34:10:7a:4b:bb:d8:07:cb:2e:30:c1:8a:3a:77:
         d1:ba:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:16:46 2025 by rpki-client