Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/dc96a274-5611-3fda-8fc1-af5a0b0f7f4b.roa
File:                     dc96a274-5611-3fda-8fc1-af5a0b0f7f4b.roa (raw, json)
Hash identifier:          7YYK18kGaEF0qD6rMmesxCI/R6S+ox38FwO9lrPWAXI=
Subject key identifier:   0A:60:AC:B5:F9:03:EF:D3:C3:BA:CB:43:44:40:3E:1F:83:2E:DF:56
Certificate issuer:       /CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
Certificate serial:       010D0C9F4328584B64CCA0E868188302959FE000
Authority key identifier: 13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/dc96a274-5611-3fda-8fc1-af5a0b0f7f4b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14325
IP address blocks:        198.7.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a0:e8:68:18:83:02:95:9f:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a1614cf8-86cd-43a3-9eec-cbf8a2313f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:2c:e8:07:21:51:b2:a6:ea:84:24:4e:02:
                    ce:99:0f:73:a9:46:0e:0a:17:97:fe:4d:66:5b:7c:
                    ea:34:52:cf:75:28:92:76:86:8c:1f:82:37:e2:0a:
                    aa:3f:ab:02:6d:e9:15:b4:fa:fc:49:c6:12:a2:62:
                    97:be:20:91:50:54:e9:af:06:6b:0d:d5:d8:46:98:
                    58:ee:b1:bf:22:14:42:3b:5e:14:67:6f:9f:15:b9:
                    3a:10:ab:4f:4a:a1:a8:a6:3e:80:ff:fb:f1:ea:f3:
                    6a:25:8f:74:05:cc:17:76:4a:a0:bb:10:ca:1b:05:
                    53:10:31:3c:41:23:3d:9c:ba:7a:eb:02:c8:31:86:
                    eb:3b:42:73:6d:1f:13:a9:9c:d8:99:bd:78:89:b8:
                    97:07:3c:6d:6e:c5:39:d3:fd:f7:43:86:ed:38:32:
                    24:6b:20:ee:5c:6b:4b:4d:8f:6d:09:2d:71:58:f0:
                    0f:7f:b9:7b:8d:a2:19:de:6a:a3:e5:f3:b9:41:0b:
                    d3:07:b2:c8:74:49:41:c0:3d:3c:4b:91:78:97:dc:
                    b4:47:7a:82:01:4d:0e:e5:3c:f5:ed:15:e6:15:a1:
                    a8:4d:d6:b6:f6:6c:67:25:26:70:8d:a4:0b:6c:d2:
                    12:a2:6d:ce:aa:f7:d9:8f:30:b6:cd:6c:ff:69:d5:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:60:AC:B5:F9:03:EF:D3:C3:BA:CB:43:44:40:3E:1F:83:2E:DF:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/dc96a274-5611-3fda-8fc1-af5a0b0f7f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.7.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:43:25:f0:a6:7e:1a:eb:63:4f:b7:71:07:64:cb:57:2f:0c:
         bc:8d:00:2c:6e:43:b3:96:fd:71:c6:9f:95:ac:5c:a2:02:33:
         27:39:25:2a:74:7d:c0:9d:35:89:fb:3e:f4:27:b5:5b:c0:4c:
         f1:5a:61:1e:54:3b:88:76:52:a0:15:bd:10:aa:32:97:71:b0:
         2f:5d:28:c4:4a:bf:95:7a:75:e0:f9:e4:6f:bd:ae:bc:94:bf:
         4b:3e:8a:8e:58:a8:e0:95:aa:f7:f9:43:4a:b1:c4:11:90:6d:
         7c:23:38:f1:1d:fb:3f:90:53:b2:5e:e8:47:e9:ff:bb:6f:1c:
         23:f0:f3:7e:e7:84:ba:52:15:da:26:99:7d:f1:43:fd:0f:e5:
         26:21:f5:b6:d7:6c:2e:25:db:53:0b:5f:98:b2:0d:4b:71:14:
         9e:81:6a:27:68:bd:af:9f:c7:8a:d5:e0:81:6a:d3:c3:e5:8c:
         39:6b:ed:70:c6:01:4c:10:60:da:6d:ed:95:cc:64:57:1c:6b:
         a7:57:18:64:d7:cf:8c:4d:0e:38:ac:5a:45:f7:3e:a6:66:6c:
         13:0a:86:ac:22:04:0c:a0:0d:71:b6:ed:98:21:81:d1:48:77:
         16:df:e5:99:dc:6f:79:52:f2:df:c6:d5:a3:bd:75:e8:4c:e0:
         b0:96:d6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:28:53 2025 by rpki-client