Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/ad6189f6-e244-38e7-b349-1cba2ac39f25.roa
File:                     ad6189f6-e244-38e7-b349-1cba2ac39f25.roa (raw, json)
Hash identifier:          MmErPO+9ZPGLrRjcN9EotNZXmCecSpAxhzKB/s1/NbU=
Subject key identifier:   D7:40:06:E1:79:59:23:D8:71:31:2D:87:36:A6:90:9B:2F:5A:A6:E8
Certificate issuer:       /CN=e76368c6-7013-4f98-819f-c6329c83d1c8
Certificate serial:       010D0C9F4328584B1163CCF0B01D30A35FE18180
Authority key identifier: 54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/ad6189f6-e244-38e7-b349-1cba2ac39f25.roa
Signing time:             Wed 03 Sep 2025 03:57:32 +0000
ROA not before:           Wed 03 Sep 2025 03:57:32 +0000
ROA not after:            Tue 02 Dec 2025 04:57:32 +0000
asID:                     14618
IP address blocks:        198.2.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:63:cc:f0:b0:1d:30:a3:5f:e1:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76368c6-7013-4f98-819f-c6329c83d1c8
        Validity
            Not Before: Sep  3 03:57:32 2025 GMT
            Not After : Dec  2 04:57:32 2025 GMT
        Subject: CN=6ff4d39c-66c5-49da-a968-f0d25271e83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9c:fa:6c:ef:22:c7:e0:e2:58:db:f4:26:c6:
                    d5:8c:55:fe:58:2c:78:70:87:23:2e:ec:6a:ce:34:
                    29:42:99:98:29:a3:81:a2:18:93:42:62:09:16:58:
                    57:1e:2d:e8:e6:d5:57:f4:e6:1f:33:06:eb:44:6a:
                    73:1a:76:ca:68:a6:02:91:64:d9:f1:98:55:d4:f3:
                    a7:4a:88:46:7f:b4:c1:90:6f:46:a3:dd:ec:7c:47:
                    ba:21:49:42:1f:f4:5c:5f:6b:d3:e8:e7:40:a5:c8:
                    fb:75:13:25:9c:3c:ad:4b:2d:0c:b7:d4:e0:97:cd:
                    63:fd:d4:0c:21:82:cb:db:84:f5:19:eb:9f:b6:46:
                    2d:e3:ec:3e:da:cc:cb:d2:51:e5:8e:1f:3d:01:22:
                    cf:6e:a7:a2:9d:f1:4f:a8:6e:3d:71:52:13:e7:e4:
                    cf:28:30:32:a7:4d:53:83:a1:73:71:c7:4f:96:02:
                    45:f6:ca:80:11:2e:e5:11:eb:23:2e:f3:4c:0e:ae:
                    c6:b5:68:60:05:bb:31:88:25:a5:02:8d:01:f6:0a:
                    31:2f:88:b8:3f:1c:d9:29:3f:44:a5:d9:9a:f2:92:
                    50:fb:75:31:ec:70:4f:7c:95:a7:fd:2a:27:1f:2e:
                    dd:22:d7:d3:f2:0c:7b:5a:80:a8:a3:7a:33:bf:ed:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:40:06:E1:79:59:23:D8:71:31:2D:87:36:A6:90:9B:2F:5A:A6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/ad6189f6-e244-38e7-b349-1cba2ac39f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl

            X509v3 Authority Key Identifier:
                keyid:54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:b6:ac:32:6d:f7:8a:8a:e9:b6:71:21:91:8c:88:7f:ca:82:
         c3:4a:dc:fe:ba:ab:e7:8b:0a:00:ed:9d:ab:4b:58:c1:c8:0c:
         89:ef:23:61:ef:ff:33:a1:51:59:c6:a5:3e:da:21:87:50:6e:
         63:51:d4:4f:76:bc:3d:0b:f3:65:c8:2b:13:e0:a2:41:61:4a:
         f4:f3:e9:10:fe:8d:ea:de:8e:7c:98:07:df:3e:1e:a8:99:9a:
         a5:1a:d7:42:59:5d:be:eb:2f:c2:2a:32:f8:e8:8f:e8:66:12:
         7b:3c:68:f7:14:89:c4:3c:25:12:02:0b:20:1f:79:1f:3b:f3:
         23:4b:1d:93:6e:a5:27:e2:76:32:6c:5f:61:b8:61:dc:21:f5:
         a9:6d:0e:34:d3:08:6e:59:4c:5e:fe:c9:b8:fb:0d:5c:ce:54:
         19:d5:eb:1e:74:fe:9d:a8:db:f1:29:9c:d7:96:6c:86:54:2f:
         b6:ab:a5:f1:2e:27:11:0f:c2:e8:de:63:f6:04:d3:a8:0f:25:
         00:3b:db:a0:fc:78:cf:95:bc:30:be:a5:a8:76:b4:b7:45:44:
         28:3c:3d:55:94:58:77:4d:d1:6c:e9:25:77:f4:d1:c7:24:e1:
         f7:5c:99:d2:81:d5:f1:47:f9:2e:bf:d4:bb:66:36:4a:89:8a:
         5b:70:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:12:43 2025 by rpki-client