Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa
File:                     d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa (raw, json)
Hash identifier:          Gt43xa1FQ8aliSd+YHlUpxklhCvxfZmV0TEZP7rOmDI=
Subject key identifier:   73:EC:89:E5:B6:BE:0F:2A:EB:3C:23:D1:60:CD:74:E0:9D:77:85:CD
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584AF7EBD5F6C6BE0C84111F5480
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     46450
IP address blocks:        198.145.96.0/24 maxlen: 24
                          198.145.101.0/24 maxlen: 24
                          198.145.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:d5:f6:c6:be:0c:84:11:1f:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=434b6393-5a02-48b8-bc24-f3f3601ec9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:29:7b:56:e8:c8:37:63:04:07:2f:a6:17:
                    65:bf:7d:4c:44:4a:7b:df:6f:0a:3f:01:0c:d5:0d:
                    39:2a:53:0d:cd:37:64:0e:29:47:0d:a3:16:ec:c9:
                    41:a4:d5:49:0e:d5:e2:bd:d7:a6:8d:b7:09:ef:c5:
                    5e:b5:a8:0d:18:ae:b5:67:e8:c5:19:46:7a:4f:5f:
                    a9:53:0d:9f:38:a5:1a:2f:55:b6:c6:05:67:54:69:
                    68:e7:75:10:eb:7b:11:0d:14:d5:f8:b3:6e:bc:de:
                    6b:d0:10:fa:6b:10:83:14:0d:fa:1d:0a:17:3f:32:
                    8a:a5:82:47:70:62:0e:88:25:ee:b5:4d:35:72:8f:
                    aa:67:36:61:64:d4:30:25:47:b6:f5:a8:2d:f7:db:
                    de:29:bf:fb:43:b5:e2:0d:2e:06:64:7b:d0:be:88:
                    90:49:20:6b:0e:16:05:d5:b5:db:ca:5d:ed:a9:dc:
                    13:cc:0a:d1:60:b1:a4:a1:49:e4:d5:8b:e3:19:4a:
                    71:16:62:8a:e2:f4:4d:e6:59:a3:e4:57:f2:a3:60:
                    54:20:4f:98:cd:1d:d6:92:8a:c9:eb:8b:e5:45:47:
                    7b:9f:88:54:38:a0:31:8e:0c:21:e9:97:38:62:4f:
                    b3:8b:df:1d:da:1c:f7:40:37:98:c5:12:bf:a0:0e:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EC:89:E5:B6:BE:0F:2A:EB:3C:23:D1:60:CD:74:E0:9D:77:85:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.96.0/24
                  198.145.101.0/24
                  198.145.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:1c:4c:f3:ee:97:9c:31:0c:36:dd:09:03:80:0d:85:81:a7:
         f8:b3:de:00:7e:8a:bf:38:d1:f7:7d:95:54:bb:ae:ca:33:3e:
         ce:0f:c9:28:ea:12:9b:2c:5f:4d:d0:d7:77:42:a0:a2:38:cb:
         34:3b:f0:1d:8a:7e:a5:f4:7a:6c:2e:75:4f:9c:cb:e9:dd:0b:
         42:42:96:63:25:a0:de:14:05:2d:57:85:f5:e9:4f:00:22:92:
         ef:32:dd:59:21:f8:0a:fe:f3:8b:1b:d6:6f:eb:25:05:bb:e7:
         20:08:ec:97:5a:38:25:91:05:a7:4f:89:07:06:5c:3e:5a:c2:
         cf:2b:de:6d:be:b2:f0:00:18:1d:c6:d0:73:23:92:a6:7c:03:
         48:71:55:cd:e5:c2:6c:2d:3f:41:2a:a3:8d:f2:1f:ac:b1:48:
         81:74:0f:c0:19:56:2d:69:f6:aa:d2:79:4e:b7:d0:62:85:1a:
         5b:9a:92:8b:59:43:82:9c:d1:c7:f0:cd:63:e4:54:03:68:1c:
         f2:11:de:62:e4:0e:7c:c3:1c:bb:0e:a7:8f:1d:2a:9c:ba:ea:
         23:c9:38:5f:9e:74:69:1e:be:5a:83:aa:00:90:c0:88:91:32:
         da:51:26:b3:7f:13:2b:39:05:15:51:91:88:15:a4:6f:76:2e:
         11:06:3c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 22:57:00 2025 by rpki-client