Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/196dc71f-9dea-3538-bf9e-512a28a260e5.roa
File:                     196dc71f-9dea-3538-bf9e-512a28a260e5.roa (raw, json)
Hash identifier:          GHbKyNfbjiPiWQSMyU2dS9Xttm6Ujh73pYo41iGIVUY=
Subject key identifier:   5A:E7:96:40:B1:5D:5E:87:14:59:AF:15:47:19:7D:D8:DC:78:E7:9F
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584A7FE09209E8998DAC1AB23340
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/196dc71f-9dea-3538-bf9e-512a28a260e5.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     188
IP address blocks:        198.151.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:92:09:e8:99:8d:ac:1a:b2:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=cb53ac16-63c2-44dc-acc6-8029b9d38721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:11:21:27:aa:4e:db:8c:e6:0b:34:da:d0:11:
                    9c:d3:0c:5d:cb:a4:5a:7d:37:c4:05:fe:b9:6d:f9:
                    63:61:9b:a9:64:90:90:44:31:94:da:82:37:e2:c6:
                    09:17:e9:77:18:7b:0d:2b:0a:0b:a8:64:34:5c:12:
                    4f:c5:1a:be:5f:34:f4:f8:2b:fa:8c:1c:44:1a:dd:
                    a8:19:c8:3a:94:70:29:fd:d5:51:09:90:69:1e:93:
                    67:1b:da:93:a0:30:c8:1d:a9:12:33:2f:14:4b:fd:
                    13:92:18:48:90:ce:6b:64:ea:d6:37:59:9e:cb:86:
                    53:10:17:51:c2:bf:7e:75:dd:96:c4:0a:4f:7a:65:
                    f9:63:ca:f2:81:20:d9:2d:f8:db:38:46:9c:73:4e:
                    3b:e7:f0:5e:f1:68:ad:b7:15:fe:af:77:41:ae:f3:
                    71:65:42:56:9e:78:c8:95:f2:9f:68:7d:a5:13:6c:
                    25:cd:de:9d:fa:fc:e5:d3:78:eb:44:30:6b:c2:30:
                    86:81:b7:85:f5:11:62:23:0f:a8:a2:ea:84:52:14:
                    11:f8:bb:23:0a:4b:31:f2:72:10:ae:b7:0b:e0:de:
                    9e:6b:ff:43:14:3d:aa:65:b0:67:1e:78:df:02:44:
                    95:c9:02:99:9d:52:25:d0:71:4d:63:f4:cb:f4:f1:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E7:96:40:B1:5D:5E:87:14:59:AF:15:47:19:7D:D8:DC:78:E7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/196dc71f-9dea-3538-bf9e-512a28a260e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.151.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:57:50:b4:84:45:cc:d3:b2:0b:d9:ba:3d:ad:00:77:15:2e:
         c4:e7:78:d3:6d:43:36:53:e5:f2:bd:73:a5:06:a2:83:cd:76:
         7d:6a:80:21:5a:22:c1:a9:da:5d:25:2b:f6:eb:f9:be:c6:85:
         8c:c6:93:6b:44:53:d6:85:56:69:a6:e3:1c:9b:04:81:4d:b1:
         0f:43:68:b5:b0:67:12:e1:cb:07:4c:5e:50:77:66:88:1a:50:
         61:94:25:a6:2d:5f:94:85:17:e9:99:8d:69:30:ca:13:ff:9e:
         a2:68:3b:49:bd:da:a0:cd:51:a7:a4:63:cf:fe:76:33:c4:82:
         3f:da:ea:b0:2a:5d:a9:8c:e4:cd:d6:b5:d3:78:72:df:23:ed:
         0a:7f:39:d6:69:7c:51:9e:89:b8:61:87:b3:56:e5:f5:82:ba:
         79:90:5d:0e:13:1a:24:24:b6:f7:2a:c7:dd:c7:d2:5d:e9:56:
         6b:8a:d3:07:fb:1b:09:78:82:a2:51:1d:e8:77:f3:ae:19:a7:
         81:14:37:c2:16:66:85:3a:9d:31:a8:a6:dc:b6:4a:73:30:d5:
         02:fe:6e:2a:24:e2:c3:f0:dc:e6:bf:c2:82:7e:5f:2f:c9:82:
         97:b7:67:03:de:00:c6:0e:67:20:70:0d:ac:fd:26:ad:67:2a:
         ee:41:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:55:35 2025 by rpki-client