Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa
File:                     c6492204-28f2-37fd-b247-ea6f897ad2f3.roa (raw, json)
Hash identifier:          sbbiEdNaOy3vx2h+VcAtBOctMuuaW5T0RDVMdNTkgq4=
Subject key identifier:   15:A2:08:4E:86:62:B3:2F:06:6E:94:7A:FA:D3:2A:B7:16:9D:A5:39
Certificate issuer:       /CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
Certificate serial:       010D0C9F4328584A43DAFE5A1499A338CE4D5FC0
Authority key identifier: 03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        198.160.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:fe:5a:14:99:a3:38:ce:4d:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=89a6cb29-1fa8-4725-9195-c544cb60c64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:71:53:43:1e:d2:06:1c:46:ab:ec:0e:f9:
                    c8:27:1e:68:d5:d1:4b:7d:0a:85:f0:c9:b4:0e:3b:
                    00:75:1d:b2:14:f3:87:0c:1b:cd:99:1c:0a:d4:c1:
                    ca:d2:eb:e6:d3:82:d6:03:6f:7f:99:e1:88:10:5d:
                    92:10:ae:4c:88:63:72:8a:6f:c1:d6:17:ce:07:fc:
                    a8:ff:d3:9d:3f:d2:d4:0b:6e:0b:22:3e:e0:ca:12:
                    38:b8:a5:31:46:ec:9f:d4:c7:da:fe:7e:e2:66:40:
                    16:20:c1:6d:83:2e:e4:6b:5b:a7:d9:05:9c:86:93:
                    2f:c3:42:f5:9c:0d:d3:75:7d:02:b4:cb:09:6d:bc:
                    c8:d3:a1:2e:a0:15:5c:a1:cc:3b:7c:0a:0e:f2:9d:
                    91:b0:b3:7d:e6:8c:4c:95:74:b0:b8:62:56:5f:c4:
                    74:30:a0:e5:8f:4a:71:e8:10:02:4f:aa:5e:54:84:
                    e5:98:49:b6:c8:03:3b:e0:1f:23:5f:47:81:0a:9a:
                    7f:54:d4:df:5b:cf:0f:db:19:93:12:2d:c8:89:23:
                    d0:86:05:bb:ff:9d:e0:06:dd:bf:94:c5:77:10:22:
                    a6:44:34:bf:16:ef:01:77:0d:ec:09:72:60:b1:e9:
                    72:5b:e5:6d:10:9c:45:36:1f:76:fb:14:46:c4:f4:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A2:08:4E:86:62:B3:2F:06:6E:94:7A:FA:D3:2A:B7:16:9D:A5:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl

            X509v3 Authority Key Identifier:
                keyid:03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:ae:e9:af:a7:ba:17:f2:ef:5c:b8:4f:1f:d0:41:2c:8a:
         0a:ff:41:cd:59:41:71:7d:c8:7c:c3:94:b8:d9:2e:03:5d:0a:
         e8:4a:8a:60:44:d5:38:56:db:18:20:47:a2:e8:4d:1a:dc:d3:
         ef:16:19:7d:52:cc:de:1f:d6:29:81:d1:c3:7f:de:4f:e6:1e:
         ab:40:85:ba:5a:57:87:4a:e1:05:6a:48:82:f5:15:3b:a9:9b:
         76:d2:fb:09:ab:53:48:7e:cf:a1:54:98:34:d6:d1:e9:1b:c7:
         0e:82:69:dd:77:59:9c:cf:ba:9c:57:ce:3d:8b:95:d9:56:09:
         3d:99:19:85:bd:39:69:da:bf:fc:f3:bb:f7:05:a4:27:5e:5a:
         75:91:1d:8f:3b:a8:91:9b:60:2b:6e:c2:62:af:d7:98:7b:3d:
         4f:0e:c1:f9:35:01:e0:76:3e:65:de:28:cb:47:bd:f6:c3:02:
         61:78:ae:f4:9f:82:8c:09:69:8d:b9:3b:55:dc:8a:21:7e:31:
         d9:20:78:dc:13:a4:9f:83:89:37:39:6f:c0:2f:f8:4f:85:9a:
         32:a5:d5:2f:54:a1:da:17:09:62:6d:bf:08:68:e2:a5:20:98:
         6a:7c:88:56:3e:fc:8e:cd:43:af:5c:a3:f5:26:6f:a0:a3:e3:
         21:7c:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 07:55:46 2025 by rpki-client