Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6e890062-0eff-31e8-b7a4-0006cbb46c8c.roa
File:                     6e890062-0eff-31e8-b7a4-0006cbb46c8c.roa (raw, json)
Hash identifier:          o6cfXf2qd9118mB4EuMWBZic9toTVc/JvofMKhCXccM=
Subject key identifier:   D2:AB:E9:61:85:67:AE:97:C7:18:FA:70:E6:21:37:1D:78:6D:E4:56
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584A90A0ACF92F146BA55EB3F2A4
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6e890062-0eff-31e8-b7a4-0006cbb46c8c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        198.92.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ac:f9:2f:14:6b:a5:5e:b3:f2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=d9556834-ac1b-437d-86ee-d047bdf78760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:3c:94:5e:be:1e:0e:39:e3:6a:b4:c9:1b:
                    ad:cd:cf:ee:d6:34:2e:78:c6:f7:1b:59:a9:42:b3:
                    9a:52:20:73:74:99:49:70:ef:82:7d:4d:f7:19:66:
                    7e:a3:00:0f:4b:58:5f:1d:aa:70:76:25:5f:19:e6:
                    89:91:6f:52:2a:cf:cb:12:e3:7f:16:5a:9a:6c:53:
                    4a:d7:4a:65:a5:c0:65:2c:75:89:6d:3e:d9:0e:df:
                    1b:70:99:16:56:6d:f6:2e:99:8d:45:18:d1:f5:f4:
                    b3:b0:a3:7a:59:cc:54:b0:54:e2:4c:c2:c4:ae:5f:
                    51:3e:a2:70:cc:8e:28:ed:08:96:0b:f9:a6:04:e2:
                    ea:22:a1:20:20:bd:cf:11:94:37:f9:6b:bd:0a:dc:
                    56:8b:e5:67:c2:4b:c8:5a:cd:dc:57:3b:21:48:34:
                    80:1f:74:05:bc:73:fc:bd:5b:72:d6:e9:ec:fd:83:
                    71:0a:be:f4:4e:ee:3c:53:40:32:cc:46:db:16:ed:
                    83:10:96:d9:07:b0:65:a8:70:cc:41:fd:4e:bd:1c:
                    2d:3d:3f:1c:a0:7e:bc:8a:b1:51:01:8f:d2:82:04:
                    a7:cd:9d:53:1b:4b:e7:bb:56:2b:63:76:71:c2:db:
                    0e:22:5b:52:26:fb:fb:ea:2a:3a:79:18:62:23:3f:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AB:E9:61:85:67:AE:97:C7:18:FA:70:E6:21:37:1D:78:6D:E4:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6e890062-0eff-31e8-b7a4-0006cbb46c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.92.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:c9:fe:c7:a3:3d:c6:5c:71:c2:e7:26:e9:97:4c:56:4f:
         97:da:af:34:5d:55:7d:82:b3:63:c8:2d:b7:0a:df:0f:f3:c1:
         c2:74:11:27:8c:4b:9d:7b:79:62:4c:7e:cb:d4:61:43:30:52:
         c4:64:b3:eb:40:fa:3b:50:65:16:02:0a:bc:f4:5a:10:11:02:
         9e:ac:b1:9e:b9:93:ea:c9:49:59:95:be:03:a7:d6:37:81:1b:
         17:5b:6b:19:ad:15:19:9f:25:23:00:74:5b:4a:c4:02:24:3c:
         2d:fe:85:04:80:55:a6:77:37:dd:0b:c5:8d:bd:d1:d1:37:df:
         e0:15:05:20:91:67:19:3d:f6:36:47:7d:b7:c9:9c:26:50:de:
         a7:55:a5:0a:16:bf:78:b0:5e:f0:76:fe:8d:0d:0f:74:87:cb:
         76:90:e9:d7:d5:97:1e:56:f5:4c:51:be:8f:22:90:a5:7b:5c:
         15:1e:8c:46:26:cd:42:ba:fd:20:ef:33:ed:0e:ac:ce:9f:d6:
         02:38:7d:27:7b:54:2e:3d:fa:15:e7:3c:9d:94:bf:82:9b:9f:
         3f:5c:77:55:b2:0e:77:98:4a:ce:4c:07:69:0b:07:30:7b:32:
         2f:f5:0e:5b:6b:81:c2:6b:c6:fc:5a:ec:1d:f3:3c:6a:b8:34:
         e2:20:dc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 02:06:14 2025 by rpki-client