Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/332842c5-1a21-3e55-9351-5007e5fd1d35.roa
File:                     332842c5-1a21-3e55-9351-5007e5fd1d35.roa (raw, json)
Hash identifier:          l8PmuPwtk6ptm9mr0BTHAFY6lTKDyorOsBs+4rdb9P4=
Subject key identifier:   53:42:9D:D5:17:3D:15:7D:A1:39:61:12:2F:DF:9D:69:43:D7:DA:34
Certificate issuer:       /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial:       010D0C9F4328584AF7EBE9307E4152A7EC544780
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/332842c5-1a21-3e55-9351-5007e5fd1d35.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     399899
IP address blocks:        172.98.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:e9:30:7e:41:52:a7:ec:54:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=03f2eead-b7a3-4e3a-99f7-d87360ee01eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:39:93:73:07:0f:ee:7c:c2:55:0f:90:4e:
                    3a:ee:f3:f0:c0:e8:fc:98:6e:2f:52:00:8d:61:30:
                    04:06:93:41:f7:fd:3e:12:b5:a5:95:b3:8e:75:b4:
                    95:f9:aa:0a:e4:c7:7b:ce:c7:46:ea:96:9b:33:d0:
                    61:e9:9d:36:05:f1:be:12:84:dc:68:de:8e:f2:10:
                    22:60:45:38:ad:f5:38:da:ff:b1:67:25:b0:50:ae:
                    b6:a4:62:1e:5e:29:1d:5f:b1:91:29:19:de:f1:6f:
                    ce:02:88:2f:70:f3:7d:6b:ec:b8:17:87:bf:49:a4:
                    ce:fc:a9:f0:a5:13:7d:d7:35:94:31:88:3e:0b:f0:
                    08:f5:a3:20:d3:e5:d0:0d:97:95:32:df:b3:43:05:
                    bd:70:fd:e2:b8:53:e0:fa:9f:a5:81:2a:01:ba:a4:
                    1c:1b:3d:ce:c0:37:ec:71:c2:b2:f7:e1:00:b0:53:
                    0d:88:09:cf:69:b2:eb:d4:42:31:4c:02:15:64:5b:
                    20:61:58:08:54:2c:3c:d4:01:3e:80:47:dc:f0:1e:
                    57:69:3d:be:c3:6d:d5:1a:a0:14:20:a7:ce:a6:a6:
                    3a:b7:0f:da:53:da:f3:50:f4:0f:9e:fb:ed:11:ca:
                    d8:97:0a:fd:ea:a5:1b:a6:b9:62:45:ae:10:ce:1a:
                    bc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:42:9D:D5:17:3D:15:7D:A1:39:61:12:2F:DF:9D:69:43:D7:DA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/332842c5-1a21-3e55-9351-5007e5fd1d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl

            X509v3 Authority Key Identifier:
                keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:b2:65:71:10:34:5a:48:b5:5c:2f:ba:02:d5:1e:cc:1c:
         19:a0:02:ca:7d:b8:46:0c:3d:39:a4:c3:88:70:4f:87:b0:d5:
         15:b5:75:e7:e0:b6:9d:27:9d:6a:03:84:fa:51:c3:a3:00:9b:
         b2:74:06:fb:b4:03:62:e4:41:3e:b7:9b:b2:bd:e2:53:a9:28:
         a4:7c:3b:a2:87:0d:0f:e7:44:ed:e9:58:b4:18:ef:c7:2a:c0:
         be:99:f0:2b:41:f4:27:f4:20:ca:21:bc:a6:78:a1:dd:63:9d:
         bf:18:76:f5:a4:cb:74:f0:80:4b:33:ad:54:92:59:4e:7d:a3:
         80:f8:4e:b1:45:90:89:eb:87:a9:9d:4f:cf:29:e7:e5:78:83:
         c9:56:dc:3c:38:83:91:14:b3:96:91:90:d9:7d:98:5a:9f:73:
         35:a6:35:d7:33:fc:b0:14:ec:5e:29:c2:bb:80:15:d8:20:e5:
         7a:3f:cd:f8:0c:ae:56:9f:52:c2:06:c4:bb:ed:67:ef:17:64:
         14:7f:78:26:9e:be:a1:d4:09:5d:4a:57:ac:01:88:2f:55:37:
         f5:c0:44:32:4e:39:1d:d6:1a:a0:6c:6d:57:84:b7:7d:38:66:
         8f:4e:54:01:b9:4c:65:52:88:95:94:ba:6f:ac:ed:fc:0e:53:
         6f:61:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 12:24:54 2025 by rpki-client