Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c0f74c7b-46f9-386c-a86b-05b278db46a0.roa
File:                     c0f74c7b-46f9-386c-a86b-05b278db46a0.roa (raw, json)
Hash identifier:          Q3Ln41TTQgViw5V3smUSoT71b4WxqUTYhWYyMnT6x0w=
Subject key identifier:   C1:3D:A3:05:0A:30:4B:1A:B4:B2:43:F0:97:8C:6A:F7:F9:8C:47:3A
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584AFD287FB1E71220876D209400
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c0f74c7b-46f9-386c-a86b-05b278db46a0.roa
Signing time:             Tue 26 Aug 2025 22:01:52 +0000
ROA not before:           Tue 26 Aug 2025 22:01:52 +0000
ROA not after:            Mon 24 Nov 2025 23:01:52 +0000
asID:                     20016
IP address blocks:        198.145.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:28:7f:b1:e7:12:20:87:6d:20:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Aug 26 22:01:52 2025 GMT
            Not After : Nov 24 23:01:52 2025 GMT
        Subject: CN=d0a3225b-223a-4bc0-9005-d1d535962d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:67:87:1d:84:b4:60:95:88:8a:84:8d:b9:
                    b6:6c:ab:07:a3:76:9a:92:6e:a8:e6:18:be:7a:11:
                    07:d2:be:f5:fe:8e:0f:d8:72:17:4a:e4:bb:d7:e2:
                    71:25:82:99:74:5a:7b:11:63:e2:45:e1:39:14:16:
                    68:40:16:15:70:e6:48:11:31:bc:85:bb:e5:c5:a1:
                    bd:71:e7:4b:36:dd:09:4b:a0:8e:c2:71:33:4c:29:
                    42:af:4e:fb:44:df:17:99:02:96:5c:04:cd:ec:e9:
                    5d:e8:1e:23:79:71:0e:6f:d6:38:0a:f7:c1:a5:0e:
                    b1:fe:d4:b5:a5:8b:67:8a:48:20:90:25:63:91:94:
                    c9:f3:18:9a:1d:76:0a:4d:b2:50:b5:f4:97:5d:9b:
                    39:fc:83:d9:df:43:65:55:02:e5:94:f5:cd:27:09:
                    f0:a5:0c:0e:08:8c:94:55:8d:72:f8:02:07:42:8c:
                    6f:f3:44:88:b9:a1:c3:b1:e9:e5:67:db:1c:16:6f:
                    5d:1b:3e:1e:85:0d:6f:99:85:99:fe:a4:34:79:24:
                    da:b2:d9:36:21:96:b6:b9:c8:fa:d5:e0:05:7d:9d:
                    61:3e:5a:e8:f4:78:9e:d2:41:fb:55:f4:7e:51:d5:
                    6b:51:33:8a:22:5b:0a:f7:d0:62:aa:cb:0a:b1:ee:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3D:A3:05:0A:30:4B:1A:B4:B2:43:F0:97:8C:6A:F7:F9:8C:47:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c0f74c7b-46f9-386c-a86b-05b278db46a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:90:bb:e8:c1:18:5f:87:97:b8:1a:b6:61:c0:24:d1:e5:86:
         ab:63:b7:b3:2a:5d:5c:33:8e:6f:fa:d7:4d:7a:b9:35:84:ad:
         8f:e7:1e:21:a6:85:40:14:66:41:de:d1:a0:fe:87:f1:86:37:
         f9:c9:16:83:b8:b4:2f:41:64:62:18:9a:5c:43:e0:e2:dc:3b:
         b6:6d:06:cf:bc:3e:98:84:a1:18:0c:bc:8f:f7:4e:c7:8c:7e:
         d6:31:3a:7d:73:9c:e1:e1:75:db:8a:3e:8b:f2:db:42:a5:44:
         26:db:10:3d:e3:f8:3a:7b:2b:56:ac:d8:e6:24:d8:63:60:18:
         9a:22:91:dc:1c:f1:a4:75:f9:05:12:99:c9:c5:40:1a:c6:05:
         47:30:10:f8:ac:55:0e:cf:10:fb:64:a2:87:70:c1:2a:01:5b:
         65:72:ae:ad:40:01:36:a0:c2:80:1d:fc:3e:a8:ba:00:61:09:
         68:80:82:19:60:af:b0:4a:9b:cd:a7:7e:cf:f5:9e:08:39:57:
         44:fe:b4:c1:0f:d6:e1:c7:ff:97:5a:35:53:7c:d5:e1:d1:0e:
         1f:a1:09:fb:ea:c9:a2:ab:46:1e:a9:bd:12:82:4a:78:c2:aa:
         5d:7a:19:d3:f1:0e:66:07:8a:05:3a:25:d9:bf:25:25:78:94:
         d2:4b:1b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 22:49:57 2025 by rpki-client