Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2cff645-c5f8-3a71-b910-2ba8f1fff4ba.roa
File:                     d2cff645-c5f8-3a71-b910-2ba8f1fff4ba.roa (raw, json)
Hash identifier:          pu6DqBKjK/LUqoD6brd4unf302IappI2R4Us7dGWiug=
Subject key identifier:   11:CE:B8:83:57:AE:B2:CA:EA:40:B8:A0:AC:63:85:D6:59:11:50:DE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A5E1E62DECAE904941F59F500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2cff645-c5f8-3a71-b910-2ba8f1fff4ba.roa
Signing time:             Mon 30 Jun 2025 22:47:58 +0000
ROA not before:           Mon 30 Jun 2025 22:47:58 +0000
ROA not after:            Sun 28 Sep 2025 22:47:58 +0000
asID:                     401152
IP address blocks:        168.93.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:1e:62:de:ca:e9:04:94:1f:59:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 30 22:47:58 2025 GMT
            Not After : Sep 28 22:47:58 2025 GMT
        Subject: CN=c8256d4f-6ba1-4174-bac3-4abb53a8b6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:78:f8:c3:01:d3:ef:b4:57:25:06:27:fa:
                    8c:9b:d2:8a:eb:03:9b:4f:f8:97:49:f7:99:12:e4:
                    4a:e7:07:2e:c7:39:c8:cc:0e:2f:3c:0e:74:cf:27:
                    02:27:90:b3:42:25:00:81:9a:43:ae:19:19:34:4e:
                    31:97:f9:96:4b:43:9c:ca:5c:59:77:1b:01:77:7b:
                    2c:ec:0e:a6:6c:69:9c:cc:da:3c:c8:44:3b:78:35:
                    30:d5:75:64:91:a9:45:66:92:50:c1:cc:10:f8:0c:
                    65:0b:77:6f:1c:49:21:88:ea:16:a3:95:34:e6:3c:
                    59:86:0c:8e:a4:c9:f5:e4:4a:67:4a:5b:6a:ff:f8:
                    90:18:66:65:3d:90:77:d1:4b:05:dc:ad:aa:fe:ad:
                    60:63:2b:02:07:33:bd:1b:91:e4:14:11:82:33:1d:
                    d1:a7:8f:a3:d0:06:cf:c0:b1:f7:f1:90:cc:6d:c3:
                    a4:96:31:6d:5f:ad:9b:27:96:b6:b7:a6:09:f5:42:
                    88:05:fd:14:87:12:35:d9:76:5c:7a:f5:b1:1b:d1:
                    0d:c1:1d:cf:35:12:57:85:75:df:bd:02:99:67:ee:
                    a6:a6:d4:00:94:ed:52:83:97:6e:ad:5a:19:f6:a4:
                    d8:8f:aa:67:41:47:a7:24:3f:7a:7c:63:36:80:ad:
                    66:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CE:B8:83:57:AE:B2:CA:EA:40:B8:A0:AC:63:85:D6:59:11:50:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2cff645-c5f8-3a71-b910-2ba8f1fff4ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d9:df:95:e2:48:60:c9:07:a9:1f:85:fc:fc:c4:8d:f6:7a:
         78:d9:5e:7a:a0:35:1f:60:90:15:ce:55:d5:d5:84:36:fa:d0:
         e1:37:ea:c9:c3:90:e3:85:e3:20:9c:28:6a:8a:6a:d7:4a:69:
         f4:db:77:e7:d9:7a:1a:a4:8b:7a:f4:04:54:5e:03:ed:04:37:
         df:24:c5:95:ae:d2:4b:66:a2:9b:7d:c8:d8:20:df:10:87:ca:
         21:ba:ff:c1:da:ba:4f:84:5c:79:68:ca:f3:a2:a5:71:51:6e:
         a6:09:4e:b6:2a:a1:ac:a3:11:bf:23:06:d5:da:a5:82:fd:ba:
         ca:26:26:17:a6:74:91:6c:a4:de:f9:35:28:65:61:db:2e:62:
         e2:3d:58:b3:d4:fa:d3:db:98:b6:f8:1d:e8:38:67:20:cb:a1:
         e0:0b:6c:25:64:57:8c:0f:d9:37:f0:a3:33:61:80:a3:e2:4e:
         25:79:93:86:25:7c:ad:5a:a9:6c:b4:ea:3b:eb:b1:c7:b2:06:
         9b:db:b1:30:db:78:0a:41:d3:bb:59:14:db:10:21:d9:72:fe:
         b0:81:e4:f7:20:61:9a:6d:62:84:6b:35:1a:be:db:b7:1c:62:
         ff:02:42:e5:e8:14:65:8e:e8:7b:1a:16:60:74:70:ea:01:f3:
         6a:fc:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 07:49:15 2025 by rpki-client