Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/f2f1e06f-1f8d-37cf-8e52-a5ceaae5c728.roa
File:                     f2f1e06f-1f8d-37cf-8e52-a5ceaae5c728.roa (raw, json)
Hash identifier:          lO5XkRDSo6hNJvZvEvcteh4BLz3Gskuqf7oxJD3COLU=
Subject key identifier:   46:A4:FA:41:F1:BE:E6:8C:43:A6:2E:9E:C5:43:34:31:6B:28:F8:1D
Certificate issuer:       /CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7
Certificate serial:       010D0C9F4328584AF521721282C7632FB11D5E40
Authority key identifier: 60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/f2f1e06f-1f8d-37cf-8e52-a5ceaae5c728.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        198.202.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:72:12:82:c7:63:2f:b1:1d:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=c49036c8-ac8d-4ee1-a7f7-725474960ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:11:e3:b1:d0:c5:bc:38:6f:c4:d9:10:27:
                    b1:00:6c:6f:5f:f3:d4:2d:86:db:f8:66:73:4b:cc:
                    ec:77:f4:0f:2c:de:22:97:36:02:2b:9e:ee:e5:e9:
                    01:bf:d0:7f:29:a4:4d:0b:bf:b4:2f:d5:0b:6d:c0:
                    55:84:a6:1e:e3:f0:00:c5:cf:55:32:c1:6e:86:65:
                    96:26:ed:72:17:b2:33:31:a9:a4:63:79:53:7a:3f:
                    58:9e:b4:65:64:b5:53:47:95:e5:9b:67:02:4e:33:
                    49:84:7c:ae:68:f3:22:31:2e:fa:0e:6a:aa:d6:8b:
                    c2:a9:db:53:88:a6:61:f6:c0:89:2c:5c:2c:a9:d0:
                    7f:c0:e5:cd:54:0c:8c:73:12:dd:09:c4:ce:3d:74:
                    67:ec:16:68:59:0c:e4:12:0b:64:e5:d5:a4:4c:78:
                    25:01:0a:1c:c8:d3:e2:79:4c:be:29:30:94:e6:c0:
                    7d:59:13:c0:1d:8a:81:71:19:0d:b2:ef:64:04:a1:
                    e5:5f:69:4d:0c:cf:4c:93:7c:ab:54:49:d8:e6:66:
                    8d:10:32:f1:46:3b:e2:8b:a0:07:fb:bf:1a:83:38:
                    99:6f:c6:32:d0:a9:ea:74:b9:c3:32:cd:78:35:6c:
                    11:07:7a:f5:b8:5e:f1:b5:5b:fe:1a:84:ae:98:4a:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A4:FA:41:F1:BE:E6:8C:43:A6:2E:9E:C5:43:34:31:6B:28:F8:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/f2f1e06f-1f8d-37cf-8e52-a5ceaae5c728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.crl

            X509v3 Authority Key Identifier:
                keyid:60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:eb:90:3c:3f:7d:e1:3f:8f:c3:c4:74:ef:10:84:08:22:14:
         08:39:93:d6:8a:b3:9b:00:ca:21:36:70:44:2b:8b:c4:9a:a6:
         7f:91:80:0d:d8:1c:36:56:0b:aa:dc:c0:c1:69:76:9c:0c:13:
         5f:b5:c5:1d:c6:d7:92:2e:48:64:c3:20:e8:ac:aa:0e:80:a3:
         e8:62:39:71:a3:39:1c:82:e4:79:86:c4:c7:cd:f5:44:e2:6e:
         4e:cf:8d:2c:6c:f5:56:c3:ba:2a:b0:4e:00:be:76:c0:96:39:
         85:d4:d4:08:7e:9f:18:b5:73:9c:fc:26:10:e4:de:2e:14:1b:
         d4:07:33:cd:70:5b:a1:6e:08:19:ef:c0:25:ba:73:b4:f0:63:
         e6:c9:49:81:dc:27:3f:e7:ee:46:83:ac:47:fe:9d:e5:14:47:
         0c:62:de:49:68:97:7b:ac:8e:f8:24:c2:bf:d7:b1:7e:1a:4f:
         20:5d:a4:34:af:34:c7:a0:c5:12:6b:6b:13:93:54:d6:88:57:
         38:58:88:5a:5b:93:3d:06:7a:75:7e:ae:ef:98:af:64:78:e4:
         a2:51:d2:3b:71:c7:48:5d:a6:44:ab:92:59:51:54:16:9a:ed:
         ea:40:64:95:1f:65:8e:2f:71:70:d3:ee:a3:c8:36:14:00:88:
         fe:e5:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:52 2025 by rpki-client