Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa
File:                     cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa (raw, json)
Hash identifier:          Uk1FBrHVrLfZcR0FT3CZLbK/FQa0mG1sEGbNKftvp8E=
Subject key identifier:   84:CE:32:E8:11:BD:26:45:DE:05:A5:42:5E:AC:4A:9B:53:D0:6E:A6
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584AD7D107FA2CEBBCBA52072180
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     32133
IP address blocks:        98.124.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:07:fa:2c:eb:bc:ba:52:07:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=f9ef554a-db56-4486-81f3-dcc8d20e50b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:6c:3c:8b:5e:eb:e0:8f:6d:58:5f:06:e4:
                    5e:ec:ca:e7:df:5e:cc:f3:75:3e:eb:cb:b1:61:70:
                    7e:c5:9d:44:5e:b2:55:8b:56:c0:c1:12:4a:68:6b:
                    38:5d:67:11:f4:58:95:3e:68:2e:2b:19:18:50:69:
                    7d:08:c1:c1:6f:2c:d5:c8:37:7a:22:81:c2:87:95:
                    f7:fa:42:c9:a5:01:80:ac:ae:b8:8b:b4:de:82:22:
                    47:12:64:9d:ea:1e:33:f5:34:c3:29:e7:2b:05:ab:
                    44:77:f7:b5:f3:73:e4:9f:fa:ab:0f:b2:1d:18:98:
                    ab:15:67:04:5b:da:7e:a8:6f:72:d0:f2:e9:42:fc:
                    80:07:61:fd:fb:33:83:17:11:24:28:6e:3a:dd:c2:
                    c2:fb:0e:8d:f5:f9:4e:a3:01:ab:f3:6b:e5:da:c2:
                    27:5d:30:0f:17:e7:75:7d:59:1e:62:1b:f3:d2:e6:
                    a1:68:a2:7f:32:ad:98:83:c6:20:a0:14:cb:ad:56:
                    44:cb:ee:5f:0d:99:b0:80:5a:43:ee:47:25:2e:bc:
                    54:6e:9a:81:93:5b:e2:77:0b:99:6f:18:c6:68:5e:
                    7e:7e:28:ac:01:7e:87:36:e3:6a:9b:4f:e4:0f:50:
                    d7:ec:93:2a:3d:e2:43:6c:76:3d:ac:43:5f:3b:de:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CE:32:E8:11:BD:26:45:DE:05:A5:42:5E:AC:4A:9B:53:D0:6E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:0c:24:18:d8:f0:6d:9b:0b:9c:4f:0b:39:90:29:ad:21:
         61:be:41:de:a6:cb:8c:e5:e2:11:d4:fc:3d:63:66:b7:37:1e:
         95:1a:26:7c:d0:b2:ba:ff:08:b5:76:e5:55:ea:a5:4b:b8:5d:
         6f:3d:fe:54:eb:b2:d4:de:51:7c:9b:9e:a0:5f:a6:05:c2:ea:
         38:fa:a5:d0:91:1f:93:75:aa:c9:e2:d9:ae:d1:bd:61:35:a2:
         fc:2a:b4:ad:61:32:06:de:e2:85:94:19:10:ae:45:39:84:e9:
         39:0e:e7:46:e5:24:e0:96:df:fa:6c:4f:bf:cb:79:f5:92:81:
         b1:d1:44:be:0d:5a:d4:a0:fb:83:da:0a:2f:70:de:f6:d1:2e:
         7a:85:66:2e:49:ad:d8:cb:d2:77:d8:15:2a:c9:b3:53:06:26:
         9c:0a:bb:06:81:76:a3:75:34:3b:b1:a1:bb:20:94:20:22:40:
         8c:2f:1b:9d:38:35:2c:d5:98:14:8d:9f:19:98:83:f3:a4:40:
         b4:a0:c9:12:5e:b5:09:fd:8e:4e:71:33:2c:10:bf:bd:fe:dd:
         ea:f7:6b:e3:30:e1:09:9f:09:57:ad:a9:24:34:f1:83:67:2e:
         3a:f7:2a:d7:1d:c6:ce:66:10:05:36:e7:65:3e:ac:5f:75:b2:
         92:5e:33:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 10:24:23 2025 by rpki-client