Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa
File:                     6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa (raw, json)
Hash identifier:          syVoNHFx84quQsKtHTLe0AQOwvPqA80rSPE74FEiTdY=
Subject key identifier:   90:D5:7B:BF:96:1C:03:EB:D9:FB:17:8D:BF:D9:2A:92:DF:CD:BE:F4
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584B2FC18A55D8452E64FF4B63A0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        198.154.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:8a:55:d8:45:2e:64:ff:4b:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=a2e5bf52-6365-41e0-a98a-ac1bf4700c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:b1:77:51:f3:a3:90:d2:c0:30:d2:0d:5c:
                    45:f7:c7:2e:73:4e:78:65:36:24:2a:ac:ef:ad:1c:
                    05:13:7f:92:89:65:f7:98:1b:7f:45:53:77:d0:74:
                    a9:fc:88:30:ad:ff:93:34:60:1c:20:3d:05:07:28:
                    92:df:b1:c0:06:dd:7a:0e:bb:74:1d:5c:f3:77:38:
                    fb:16:51:18:2c:0e:18:99:25:63:a6:c5:d8:cf:e0:
                    a6:0c:5c:5b:85:53:8a:06:55:a8:72:43:6c:3b:ef:
                    8e:97:e2:a2:61:ad:11:d4:f3:d9:d9:52:c5:57:79:
                    04:00:7d:cf:97:ef:7e:24:97:5d:a2:ab:34:85:62:
                    4f:86:eb:09:92:b5:96:b9:3e:05:be:17:78:21:fc:
                    4c:a9:41:a3:07:f5:c7:94:9d:59:84:b4:3c:a4:c6:
                    35:81:1c:9e:94:88:76:23:5d:33:73:e5:1d:72:52:
                    0a:93:af:fd:80:6b:1b:8f:62:c9:d1:ee:60:68:16:
                    dc:03:49:02:be:c0:ea:66:ac:85:da:35:d3:14:8c:
                    53:62:0f:38:36:09:9d:93:ef:c6:cb:57:5c:54:a8:
                    86:e3:70:12:8c:1f:e9:86:ca:4e:06:c4:77:8d:08:
                    d8:e5:e8:60:b2:42:7c:29:fd:88:dd:8b:4d:2d:5f:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D5:7B:BF:96:1C:03:EB:D9:FB:17:8D:BF:D9:2A:92:DF:CD:BE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6298c3c0-4533-3159-afd6-8d1f9381ae0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:07:66:e2:ac:59:9b:3e:8f:cf:1a:e4:58:92:d3:c2:9d:94:
         3c:15:fa:74:aa:00:86:e0:54:76:ae:03:b6:34:3f:f1:aa:8a:
         d0:e7:07:0f:14:b5:e9:87:04:00:e4:3a:1e:b6:73:62:78:56:
         0b:9d:c7:64:1a:b8:fa:49:ed:c3:2d:6d:b2:28:7b:6c:36:f2:
         a3:e5:49:a4:55:49:98:ca:c6:0f:75:a0:3a:3b:f3:d3:bc:4b:
         be:65:96:8d:47:fd:89:d4:9e:dc:18:93:38:ff:d0:8a:40:e9:
         e8:bc:8b:45:fd:a0:85:e5:06:7e:d6:f6:09:73:0c:ab:b4:b5:
         05:f4:8e:ba:11:ca:e2:be:9e:95:ae:1e:e5:4a:b6:07:48:aa:
         8f:08:fa:f3:50:fc:93:13:d4:b9:d3:c8:96:db:70:f6:40:39:
         a3:c9:e7:ad:11:30:99:1e:99:a5:f3:3d:d1:63:5d:7e:6c:84:
         fc:3d:e1:27:72:a2:c5:64:07:74:c5:52:5b:e7:88:20:55:79:
         d6:41:75:af:48:cc:bc:fa:32:c0:4e:c8:e7:9d:52:f0:e1:f9:
         95:52:b0:68:3b:84:f4:3f:ae:fd:14:82:2c:1d:32:28:ec:02:
         20:3e:e5:18:8b:c5:49:53:4b:bc:64:7d:ea:59:8a:17:b9:50:
         ad:a8:c4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:12:23 2025 by rpki-client