Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f19cc6f1-2f1a-3deb-a8ef-25820e7214d1.roa
File:                     f19cc6f1-2f1a-3deb-a8ef-25820e7214d1.roa (raw, json)
Hash identifier:          SS2nrhsw4ypz+I6L4ZJ22erqI/Y/V2JBljp4iWIUU6Y=
Subject key identifier:   C6:3F:35:B0:FE:BE:AF:48:29:E7:64:19:2A:66:46:09:85:F5:7F:F6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A5E1E62B1418B9FDBB37768C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f19cc6f1-2f1a-3deb-a8ef-25820e7214d1.roa
Signing time:             Mon 30 Jun 2025 22:47:58 +0000
ROA not before:           Mon 30 Jun 2025 22:47:58 +0000
ROA not after:            Sun 28 Sep 2025 22:47:58 +0000
asID:                     401152
IP address blocks:        168.93.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:1e:62:b1:41:8b:9f:db:b3:77:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 30 22:47:58 2025 GMT
            Not After : Sep 28 22:47:58 2025 GMT
        Subject: CN=e27af671-8044-4a13-ab15-4399539af9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:e2:90:26:72:c8:72:2b:ad:a6:8a:43:60:
                    c3:25:a2:51:96:51:91:4b:7b:57:68:ab:f9:01:14:
                    f3:9c:73:a5:7a:db:1d:97:26:f0:ae:50:c2:6d:77:
                    9c:9a:5a:3f:79:3f:ad:21:24:30:ba:ee:fb:a5:3e:
                    d8:f5:58:6f:a6:da:cc:21:95:22:4d:87:d4:f7:77:
                    5e:47:af:f0:aa:7e:7e:eb:e9:a0:5b:8b:3d:99:fc:
                    25:f5:ed:31:32:96:52:24:7c:23:9f:ec:63:36:39:
                    7c:2f:bb:ff:b2:4c:24:52:61:26:9e:a6:be:26:23:
                    d1:e8:37:05:f9:7c:cd:3b:3e:55:34:47:15:ae:e1:
                    bd:bc:fc:e4:d8:21:c0:58:5a:a6:81:4b:16:8c:bb:
                    a2:f6:4d:70:c3:61:7f:c7:3a:c9:ed:a8:f4:23:31:
                    68:6e:80:2a:a2:eb:8f:59:96:eb:04:b0:2a:61:a7:
                    a8:4c:74:42:ed:d2:a6:de:2b:36:04:59:b2:7a:3e:
                    50:b2:80:5a:29:d7:9d:73:75:27:8c:51:87:61:ab:
                    8f:96:f1:b3:ce:ca:44:f0:b5:f1:1f:2b:98:fa:b4:
                    60:98:8e:83:0b:06:21:b9:56:7d:a6:eb:44:ef:98:
                    98:a4:23:b6:d8:57:74:ba:fc:4e:ab:8c:70:1e:01:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3F:35:B0:FE:BE:AF:48:29:E7:64:19:2A:66:46:09:85:F5:7F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f19cc6f1-2f1a-3deb-a8ef-25820e7214d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:cc:db:46:8b:0c:2a:67:a9:2a:ab:42:57:cc:02:86:57:e8:
         1a:af:c8:d9:cb:77:76:0e:d6:74:9a:43:5b:4b:00:7d:d6:f3:
         d4:af:23:05:7b:c3:80:95:27:8d:08:1c:fe:61:51:f8:21:a2:
         ea:e7:fd:17:fb:c8:45:a7:13:20:99:e9:4a:ee:5a:71:ef:20:
         3d:a4:cc:14:01:2d:cd:66:f4:25:ed:5e:e4:c1:7c:fe:e8:f4:
         cb:d6:ad:a5:33:84:e0:d1:56:a2:ed:1b:06:4a:cb:a1:a8:9b:
         34:3d:af:8c:80:fa:73:d5:6c:f0:3f:d4:d2:35:d1:8b:a1:79:
         fc:6e:d3:57:dc:20:98:82:43:28:41:36:83:fd:6d:c6:13:4c:
         1d:22:9b:01:ef:12:a9:cf:42:39:22:30:b3:c4:f6:3b:11:10:
         b6:87:66:6c:33:0a:90:ab:1d:a8:4f:4e:23:e9:32:1c:36:7a:
         d4:8f:38:0c:18:c3:9b:7b:10:51:5f:c5:77:27:1e:88:d6:a4:
         e0:2a:6b:27:64:b6:d2:37:17:68:d8:d4:7f:94:8a:c1:a7:29:
         c7:31:82:ee:2d:21:f6:59:f9:a4:a2:d7:ad:c0:24:cf:cb:0c:
         68:d6:21:d5:78:b8:ff:9d:56:2a:19:53:2a:5a:d3:2b:17:d8:
         92:16:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 07:54:42 2025 by rpki-client