Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/cc722534-f06a-3c05-ae2b-faf4f6bb4d98.roa
File:                     cc722534-f06a-3c05-ae2b-faf4f6bb4d98.roa (raw, json)
Hash identifier:          bbYV3Kosgsoy5tLaItecGcy7T4Y33h/GdKo/2eOdbkI=
Subject key identifier:   FE:31:FD:1B:11:28:75:92:8A:02:EA:20:86:D1:0C:E7:34:C2:F1:9E
Certificate issuer:       /CN=98dca76d-defd-4c39-98dc-808a0a0a97d8
Certificate serial:       010D0C9F4328584B236D550AA110CD59E7C3CD40
Authority key identifier: 1D:EA:79:FF:BF:40:CE:21:08:A7:B8:BF:32:2D:78:31:DA:D7:18:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/cc722534-f06a-3c05-ae2b-faf4f6bb4d98.roa
Signing time:             Tue 09 Sep 2025 15:01:17 +0000
ROA not before:           Tue 09 Sep 2025 15:01:17 +0000
ROA not after:            Mon 08 Dec 2025 16:01:17 +0000
asID:                     25834
IP address blocks:        148.59.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/98dca76d-defd-4c39-98dc-808a0a0a97d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/98dca76d-defd-4c39-98dc-808a0a0a97d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:6d:55:0a:a1:10:cd:59:e7:c3:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98dca76d-defd-4c39-98dc-808a0a0a97d8
        Validity
            Not Before: Sep  9 15:01:17 2025 GMT
            Not After : Dec  8 16:01:17 2025 GMT
        Subject: CN=99199c4a-e5ec-4f11-9347-d8414b5a78a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:73:aa:3b:c8:c0:7f:d0:45:13:3f:8c:2d:
                    a0:c1:08:4f:ae:25:c3:22:78:08:1b:84:2b:4c:23:
                    21:c7:29:81:5b:fc:18:d9:46:0f:df:3d:9a:2b:c1:
                    d4:ac:b6:55:82:e3:31:70:04:9b:10:72:20:9c:07:
                    be:7e:88:c3:cf:a3:5d:26:46:7b:1c:58:67:d5:7d:
                    1b:98:73:00:78:2e:17:b5:84:57:92:64:5c:97:03:
                    fb:e0:74:f3:d3:0f:ea:67:dc:66:18:cd:6c:2c:f9:
                    42:59:a5:a5:32:fe:d9:33:a1:d2:98:d4:db:ef:fa:
                    29:51:c0:cb:79:d5:b7:08:6e:fc:e7:d1:86:56:72:
                    cc:ee:f4:e1:8e:fb:66:70:4a:9d:b8:20:27:e4:78:
                    c0:ef:06:24:75:59:34:63:8b:49:a2:30:dc:7e:75:
                    12:14:06:6f:c8:25:34:73:3d:2b:78:d9:d7:a2:93:
                    1a:df:8e:54:6e:54:6f:ce:be:fb:d6:bf:5e:72:ad:
                    84:12:2f:f8:36:b4:42:82:4a:70:52:99:14:b1:7b:
                    6c:d2:4d:97:3f:dc:cb:5c:fe:31:39:83:f5:c2:1a:
                    fa:54:a1:80:94:63:31:3c:89:10:44:b4:b5:dc:51:
                    f0:b8:52:bc:5d:ef:45:42:1e:45:fa:3a:3f:8a:01:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:31:FD:1B:11:28:75:92:8A:02:EA:20:86:D1:0C:E7:34:C2:F1:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/cc722534-f06a-3c05-ae2b-faf4f6bb4d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8/98dca76d-defd-4c39-98dc-808a0a0a97d8.crl

            X509v3 Authority Key Identifier:
                keyid:1D:EA:79:FF:BF:40:CE:21:08:A7:B8:BF:32:2D:78:31:DA:D7:18:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/98dca76d-defd-4c39-98dc-808a0a0a97d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:01:a2:93:19:c0:90:42:86:8d:04:ac:9b:06:64:31:3d:9b:
         37:b4:ba:bb:c8:33:ca:07:79:9e:7f:fb:c2:69:38:64:98:c6:
         a2:23:a2:55:4e:01:19:bb:53:96:38:a5:84:d1:81:28:00:67:
         f5:ca:33:e6:0c:bd:dc:3c:c6:25:19:a1:81:5b:6c:13:13:45:
         09:fb:3f:e4:a0:7b:43:ac:b8:ff:26:43:08:39:8d:b2:a0:5b:
         a5:dc:4c:f0:bf:ac:16:69:2c:75:95:ef:9e:17:d5:e3:dd:e3:
         38:90:56:92:5a:c1:62:59:b2:50:d8:b6:cd:e7:a3:ce:a3:1d:
         fb:09:45:14:cd:b5:47:a9:81:30:c2:0b:0b:0e:c4:ae:b2:e1:
         4a:fe:a0:61:2b:22:ad:cc:94:8b:bb:d8:0b:ed:2e:e9:94:0d:
         82:e8:b2:85:73:0f:e0:60:03:9d:79:ec:3a:75:dd:8a:58:4a:
         74:79:b7:b7:48:55:c0:c0:b8:59:dd:7d:c4:ef:1c:4e:8a:45:
         5d:67:c5:f8:9a:57:55:bf:ca:9f:85:eb:e8:41:b9:09:db:73:
         65:2d:d8:0c:5b:5e:e3:63:0c:50:13:b4:29:38:67:bb:33:d8:
         a8:1c:1f:b5:78:e3:b3:00:f5:59:5a:f5:16:27:bb:34:e9:c8:
         4c:df:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:28 2025 by rpki-client