Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/0a0e3ba9-ad56-3580-847b-2d7bb7164c31.roa
File:                     0a0e3ba9-ad56-3580-847b-2d7bb7164c31.roa (raw, json)
Hash identifier:          hH5IXv6ikDpJkKpoJvvI+fXM2rrw/cMv7Vj6PVYdb5c=
Subject key identifier:   70:58:67:EA:54:6B:5B:D9:3C:A1:1F:B6:40:35:A3:C0:31:DE:5F:08
Certificate issuer:       /CN=e9687864-e283-4f19-98f3-a437efb373e8
Certificate serial:       010D0C9F4328584B3F1C54E482DE710CBD51B800
Authority key identifier: 0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/0a0e3ba9-ad56-3580-847b-2d7bb7164c31.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     22772
IP address blocks:        198.182.64.0/18 maxlen: 24
                          199.33.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:54:e4:82:de:71:0c:bd:51:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9687864-e283-4f19-98f3-a437efb373e8
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=5cf599b3-caec-4e21-a07f-82cbd5e64b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:e7:56:56:24:71:de:ca:76:84:ee:53:65:
                    ef:21:8c:ad:0f:52:34:7a:2d:36:46:7b:98:5d:5b:
                    de:91:d3:15:8d:c2:32:87:2a:6e:37:f7:f5:31:77:
                    3d:d7:9b:ac:e3:45:38:a9:9b:32:2d:0c:25:6c:7f:
                    9e:c1:34:80:08:e5:72:1f:be:f1:35:8f:23:ba:46:
                    42:92:da:10:93:66:93:68:88:c4:90:50:3e:83:f5:
                    f6:b4:dc:fe:84:0f:77:94:a7:0a:20:de:53:e2:fa:
                    bc:fe:2f:c8:93:02:1d:93:ff:b9:45:fa:4f:ec:a9:
                    06:54:bb:ba:e9:54:52:6c:5e:5e:3c:31:f2:cb:59:
                    a4:8e:63:8e:fc:54:de:75:ae:44:75:b6:7e:34:7a:
                    0c:24:23:5b:7f:31:2c:6b:b0:71:93:2e:e5:e8:53:
                    eb:7c:bc:15:aa:89:1c:e3:2d:fa:45:fe:6b:06:f5:
                    3f:61:df:a7:63:57:92:24:5f:7b:48:90:86:7d:3c:
                    5c:ed:64:82:da:ff:37:9e:b0:c0:ba:ef:2e:f7:36:
                    18:4b:1a:1a:5e:ea:b6:5d:c1:f0:b1:f6:55:1f:22:
                    d9:c8:30:3f:f7:50:7f:0d:52:59:3d:b6:cf:22:e1:
                    2c:d8:28:58:5a:73:95:9e:fb:08:44:ac:f1:38:be:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:58:67:EA:54:6B:5B:D9:3C:A1:1F:B6:40:35:A3:C0:31:DE:5F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/0a0e3ba9-ad56-3580-847b-2d7bb7164c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.182.64.0/18
                  199.33.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:c5:97:65:ec:4b:98:39:16:b7:e5:68:51:28:71:8e:f4:
         6f:fe:14:18:2e:72:fb:5d:4a:10:0e:af:e4:8e:36:7b:da:ef:
         8a:ba:e3:b3:23:6b:33:36:ba:f3:ac:d0:ff:05:62:f0:65:c1:
         51:01:61:3e:26:11:e8:b7:9a:42:3b:4f:9b:b0:83:e1:10:3d:
         b5:e8:7e:f7:bd:71:23:29:d2:41:ff:28:23:72:99:58:54:b2:
         09:76:c0:8d:6e:7d:7b:cb:d5:f4:49:e1:2d:67:b5:53:b1:d3:
         2a:71:da:f2:b7:e3:93:10:ad:79:66:f3:10:dd:d2:4c:14:e1:
         a6:5e:c9:c2:a5:56:5d:de:c8:57:98:1d:6a:9c:be:bf:6c:6b:
         ad:0f:f7:30:1e:f4:8a:27:a4:37:73:af:b4:3e:da:70:90:4e:
         68:51:7e:2c:60:c6:a4:c7:3e:76:bb:3c:57:5c:58:c2:09:f5:
         a9:39:ba:18:97:50:b9:52:ea:7b:ea:44:1f:34:3a:45:e8:8f:
         88:f5:aa:15:6b:5b:32:33:bf:99:2e:d7:bc:b2:db:e8:a5:e7:
         08:51:9c:cb:76:7a:24:10:b4:2a:6f:d9:4c:9b:57:21:86:88:
         69:6d:9a:8f:c7:eb:90:2d:12:63:78:23:6e:be:9d:3e:40:51:
         55:2a:9a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:18 2025 by rpki-client