Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/1ef9bf1a-30a0-3bf5-b059-3f20161e7b3a.roa
File:                     1ef9bf1a-30a0-3bf5-b059-3f20161e7b3a.roa (raw, json)
Hash identifier:          eE2BTy4O6ROq3dKVbfcPovBajyhlA2ye5bnFc6QkuQQ=
Subject key identifier:   F3:0C:48:E7:16:0D:99:77:C9:4D:86:04:3A:84:E3:87:F8:D1:C4:BE
Certificate issuer:       /CN=77a1f652-62bb-4b22-ac07-0b2b88868297
Certificate serial:       010D0C9F4328584B2CF6E369F78B850B95348D00
Authority key identifier: B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/1ef9bf1a-30a0-3bf5-b059-3f20161e7b3a.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     6079
IP address blocks:        207.167.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e3:69:f7:8b:85:0b:95:34:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a1f652-62bb-4b22-ac07-0b2b88868297
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=d03a3dad-7fc1-4cdc-9aa9-9967ec2d41e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:96:76:2e:d1:7b:4a:6b:2d:ee:8c:5b:c5:
                    ca:6b:2e:c2:63:90:af:8c:5c:5f:cb:1e:c9:75:a2:
                    ea:eb:d3:bc:1c:5e:0e:d0:a9:d0:7e:98:72:97:79:
                    4f:a5:4a:3a:45:6f:d6:b6:d4:8b:88:bb:40:cc:b0:
                    28:91:b2:c4:8c:ec:fd:45:84:36:8d:3e:4c:09:2c:
                    ad:e0:14:ec:51:56:fb:cb:51:ee:40:90:fa:eb:da:
                    c6:fa:23:bf:9f:3d:c4:b6:bd:f8:90:66:59:99:a1:
                    1a:76:91:b7:07:25:c6:5b:f0:dd:53:c9:8b:ee:a6:
                    be:9f:d5:11:7f:a1:39:6d:02:df:e5:1f:92:fb:7a:
                    cd:54:2b:b9:f5:49:5a:4f:5c:cc:9c:82:4c:55:3a:
                    00:e1:d0:2f:82:fe:af:64:57:64:c8:50:9d:26:8e:
                    01:50:2d:5b:2a:c1:71:f4:fa:09:da:9b:5c:6a:44:
                    59:38:34:44:e0:39:7f:c1:2f:32:cc:eb:6e:65:aa:
                    6e:20:1d:48:d5:c3:da:60:8a:ff:03:ac:77:5a:31:
                    d8:44:a5:ac:ac:41:5f:42:3d:8b:04:2b:58:26:41:
                    2d:4d:0c:b7:a9:ec:0a:a9:f2:15:ca:0b:23:1c:12:
                    1c:35:f2:e5:8a:84:43:a3:a1:cc:f6:3b:79:e4:fa:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0C:48:E7:16:0D:99:77:C9:4D:86:04:3A:84:E3:87:F8:D1:C4:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/1ef9bf1a-30a0-3bf5-b059-3f20161e7b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.crl

            X509v3 Authority Key Identifier:
                keyid:B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:13:ab:d1:56:f5:a1:34:86:29:d5:2f:f2:35:b1:fb:b2:42:
         7c:2b:76:26:84:80:ca:83:cd:e6:f2:c1:7b:b3:97:ce:cd:d3:
         bd:72:cf:24:be:ea:15:6e:36:ac:6a:ef:c0:f3:40:c4:42:82:
         a0:83:89:49:f4:08:ef:d1:f0:26:f8:a7:bd:17:e1:d0:cd:f8:
         23:9b:e1:ad:7e:a1:3b:30:90:4c:17:6d:85:ea:d7:c8:e8:d9:
         9a:8b:69:94:c1:6d:dc:ed:24:39:89:81:94:cc:e1:66:62:b1:
         43:af:1d:b0:cc:f6:53:72:88:5f:c0:45:57:57:25:bc:a7:e4:
         01:6d:e1:fa:31:b0:8f:32:b4:5c:09:12:39:45:9b:41:35:fe:
         36:45:85:ec:a1:62:64:8e:4c:66:5d:ff:74:72:56:17:9c:3c:
         34:e5:96:1a:a5:d1:c1:54:fb:d1:5b:46:4c:1a:ae:00:3e:a9:
         11:eb:ad:a9:6f:cf:b5:de:f3:26:e8:1e:0e:ad:f0:68:7c:17:
         3f:db:f1:3a:33:0f:6b:51:a7:fe:e1:8a:c5:c2:27:fe:c1:4f:
         76:88:3c:a5:8f:f8:54:51:28:62:fa:ac:de:ce:d6:0a:bd:0d:
         31:f2:5e:b4:52:07:3c:3e:92:b4:ce:17:98:8a:91:f6:b4:69:
         9f:3a:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:35 2025 by rpki-client