Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/cd569a32-42a2-357b-b73c-5972a0a941f5.roa
File:                     cd569a32-42a2-357b-b73c-5972a0a941f5.roa (raw, json)
Hash identifier:          pRxvoaaWL2pUMMuZvr3E3fss3JWfOyVKTfVScCoAC2g=
Subject key identifier:   7A:7D:A0:F8:50:FB:FC:BF:67:5B:3C:65:BB:1E:7C:CD:FC:4D:86:E9
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584B153C24E61ACC26514A817A80
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/cd569a32-42a2-357b-b73c-5972a0a941f5.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     803
IP address blocks:        198.230.96.0/19 maxlen: 19
                          198.230.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:24:e6:1a:cc:26:51:4a:81:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=7932baba-e690-456e-bd1a-a8d03769074e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:18:e0:9d:65:60:64:7f:2d:0e:23:12:02:
                    d7:50:11:2f:bf:8e:27:1c:4e:88:92:4c:2a:ee:bf:
                    0b:c2:f2:33:c4:9c:17:a2:e9:93:8c:99:68:11:16:
                    9c:a5:7b:9b:b5:79:0d:f9:2d:ba:67:13:0d:19:6c:
                    b2:53:29:ce:1a:7a:b5:c4:47:3e:74:41:40:31:85:
                    96:ab:55:52:87:27:f8:6b:fc:39:23:3a:f2:57:82:
                    bc:fb:9a:9d:a1:2c:cc:c5:15:29:a0:1e:8b:27:cd:
                    73:e3:fa:9e:28:e7:67:4f:8a:44:9b:9d:cf:73:ec:
                    86:37:f6:20:64:82:79:04:5d:a0:d1:22:05:a9:37:
                    a5:6a:00:08:d0:99:7f:ad:f9:07:fc:ff:0f:2d:df:
                    2a:fe:d2:8e:59:f6:26:45:73:96:5b:fb:15:7d:14:
                    cb:27:76:6f:4b:65:27:d5:9d:48:bf:9a:1c:c5:89:
                    c4:e0:13:8f:0b:62:b8:51:1a:bf:95:94:64:bb:c4:
                    24:87:1c:90:57:38:3f:9a:73:e1:69:f8:f4:98:a2:
                    9b:bf:e1:05:33:a2:38:1e:82:30:53:b1:c0:d7:77:
                    da:07:5b:81:b7:90:fe:3f:88:b0:fa:de:15:68:6b:
                    92:ed:42:0c:f2:e9:0d:f2:b8:38:44:4d:96:e8:29:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7D:A0:F8:50:FB:FC:BF:67:5B:3C:65:BB:1E:7C:CD:FC:4D:86:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/cd569a32-42a2-357b-b73c-5972a0a941f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.230.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:18:44:5d:81:1f:eb:7a:5c:1c:3c:83:a3:21:b8:76:97:14:
         5c:19:00:13:ea:f8:8e:cc:18:51:79:5a:fb:b4:49:de:ba:0c:
         bd:d4:81:47:b5:ea:4d:5c:a3:c0:e9:2a:27:2d:99:51:2a:a6:
         a0:05:73:d8:98:d0:7e:38:52:6a:da:de:47:fd:1e:40:a6:0e:
         49:18:e9:23:e9:bc:a4:fa:f0:9c:b9:8e:45:de:d8:ea:c3:c7:
         4b:90:48:37:92:61:e7:88:cd:7e:87:d3:88:df:86:54:98:6b:
         d1:65:fa:43:45:cf:ac:7e:90:92:ae:16:a9:8d:df:bf:5a:fc:
         4d:32:e6:58:84:e1:df:32:5b:95:3d:10:75:15:d4:14:0b:ac:
         6c:d6:cb:22:c1:db:2d:a8:99:51:83:91:54:09:d6:9d:cf:05:
         b3:14:35:fc:27:96:d5:1f:87:69:ad:b1:7b:6d:2a:2d:ac:4e:
         9c:e1:9c:10:58:6c:40:39:80:6e:76:a2:54:42:99:51:5c:b8:
         f5:0e:65:b7:d4:5e:01:f4:7f:24:fd:03:e1:54:8d:66:ac:c9:
         97:7c:74:5e:f6:6f:9e:c3:e3:52:bd:14:1b:e2:4f:8f:e3:6e:
         16:a5:98:8f:0e:03:da:4d:c4:a4:5f:4f:5f:3a:2e:6e:84:0b:
         63:37:da:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 09:01:45 2025 by rpki-client