Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa
File:                     35febe00-9c57-373a-948b-0f3b0e170f27.roa (raw, json)
Hash identifier:          awfU5ldHxXj5lSU1iXvGgSRIXSFY8lhdi0qd0XMhRso=
Subject key identifier:   41:D6:A3:1D:F0:CB:DA:70:4A:3D:6E:7D:22:05:09:22:00:06:55:2C
Certificate issuer:       /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Certificate serial:       010D0C9F4328584A612B14762A3CBD6486FC8200
Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     397984
IP address blocks:        198.184.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:14:76:2a:3c:bd:64:86:fc:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=9847148b-9784-4b28-9fe6-97a7ca4f5fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:2f:9b:19:b1:dd:3a:c1:26:07:8a:c7:93:
                    c8:18:7c:c7:15:66:22:2a:13:32:f6:bc:9e:b3:80:
                    4e:2e:a1:d1:5e:4a:10:a0:e5:f8:89:b2:7b:bb:1f:
                    cc:59:78:9a:15:4e:f7:40:18:0e:de:da:d4:21:db:
                    f6:b4:66:d6:bf:5c:b6:7d:7a:0a:66:7f:1f:ac:f3:
                    72:35:f7:7e:6e:2b:eb:4d:93:0e:4f:d8:15:b5:8d:
                    37:b9:a5:d9:37:f8:9d:2e:d0:ec:85:93:e2:05:9a:
                    4e:d6:08:ae:5b:17:ba:3b:68:2a:a3:bb:bb:db:42:
                    9f:10:b9:84:c0:42:d1:97:47:9d:34:3e:33:6d:d7:
                    1a:0c:a2:ce:fd:7d:00:24:c5:0d:51:51:56:3e:fd:
                    24:98:dd:50:d5:94:4b:0e:60:57:c7:91:92:65:4b:
                    50:ad:10:4a:e3:50:b9:52:bf:9f:eb:cf:06:f5:f4:
                    88:c1:7c:b3:50:51:89:b1:2d:ea:e9:a7:b4:8c:ba:
                    07:01:6e:fd:c6:9b:99:41:71:cb:80:ec:7b:60:30:
                    3b:9d:46:ef:1f:34:be:f3:d9:14:ca:20:6b:49:53:
                    9e:fe:91:3c:96:ce:60:97:b8:04:2a:b6:67:48:61:
                    1e:cf:a1:2d:da:42:9c:1c:ee:32:e4:51:4d:a8:e8:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D6:A3:1D:F0:CB:DA:70:4A:3D:6E:7D:22:05:09:22:00:06:55:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/35febe00-9c57-373a-948b-0f3b0e170f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.184.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:00:78:0b:f2:36:55:82:d2:ce:9d:9f:6c:a3:c4:89:a1:33:
         4e:a2:a4:a0:89:80:80:7d:16:6f:66:3f:c5:55:37:a6:93:b4:
         7e:35:dd:66:9e:3a:9d:3e:85:de:05:9d:a2:cb:e6:56:13:76:
         1c:3a:c4:5a:10:29:03:5a:a0:a4:cf:28:92:14:c7:03:df:34:
         e9:dc:88:5d:c7:54:25:e9:a6:7b:12:91:a7:e2:e4:74:e6:20:
         ed:95:56:15:29:2a:80:3e:ba:77:d9:b9:3f:50:85:0b:ad:f6:
         49:14:51:e0:aa:ea:6c:e3:3e:8f:3d:96:a1:80:a1:7f:cc:9f:
         20:2c:a1:25:41:d4:3a:bb:2a:90:8c:0f:31:48:07:e2:17:e4:
         9b:5b:67:99:a3:d4:56:49:8e:db:97:e1:06:87:4c:c6:74:7e:
         6f:52:46:9f:ca:7d:63:57:b9:05:6a:08:ed:60:08:37:95:de:
         5c:5d:e1:5d:46:c3:06:18:10:63:71:d9:37:41:e1:06:f1:ec:
         ea:6b:1a:a9:b5:61:e7:16:16:b1:95:60:6f:e4:f6:6e:fe:ed:
         ee:55:5e:7f:33:c9:5a:e2:bd:8c:9b:f7:36:66:c9:7c:1f:8a:
         b5:d0:59:d0:cf:4c:c5:ef:12:17:fe:fe:68:44:6d:5c:50:a8:
         99:05:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:25:09 2025 by rpki-client