Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/4928227b-a919-3b1e-8651-e3b58bf2abca.roa
File:                     4928227b-a919-3b1e-8651-e3b58bf2abca.roa (raw, json)
Hash identifier:          m6/KhMfWlCVEXsPQugV/XWfe/zrKl5MpF+YODTDL3LU=
Subject key identifier:   91:6A:0F:B8:E0:25:08:83:D8:5A:BA:CE:72:81:90:63:19:27:C6:F8
Certificate issuer:       /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial:       010D0C9F4328584B48E1C343A3E88CAB9429B480
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/4928227b-a919-3b1e-8651-e3b58bf2abca.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     399899
IP address blocks:        172.98.52.0/23 maxlen: 23
                          172.98.52.0/24 maxlen: 24
                          172.98.53.0/24 maxlen: 24
                          2602:fbb7::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:c3:43:a3:e8:8c:ab:94:29:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=536470bc-3fdf-443e-870b-3a17f0c9162a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7c:27:bf:34:ff:99:58:31:22:43:ae:56:60:
                    a1:42:70:90:e4:04:76:63:51:7e:49:0b:e3:41:8e:
                    2e:36:13:a1:51:e3:63:e7:07:a8:82:8e:57:2a:83:
                    21:c8:7d:07:23:70:15:09:73:d8:bf:97:65:fe:47:
                    c4:51:62:c4:ce:b7:ff:91:ec:67:a5:60:67:ee:ef:
                    c3:c3:79:25:75:28:8e:a2:70:ad:0c:f6:1d:5f:90:
                    4b:de:82:a6:1c:5a:f7:db:cf:88:f8:9c:03:83:ad:
                    54:da:af:1c:63:5a:47:30:1c:11:6b:7a:ed:84:19:
                    38:47:d5:cf:4d:db:e0:cd:0a:07:5f:87:7d:da:e6:
                    f6:b3:b1:f4:77:02:30:42:b6:4e:57:38:ec:88:27:
                    b6:94:0f:f6:52:21:42:30:1f:2a:13:15:c0:aa:40:
                    83:b0:04:a9:4d:19:2c:56:56:c8:b7:84:2c:cd:7f:
                    e9:8e:37:57:6b:76:dc:30:1e:bd:c7:af:fc:ad:47:
                    19:76:65:e3:82:7a:73:c1:f2:cf:98:91:ef:c6:30:
                    ee:fe:0d:ca:bd:19:67:3b:08:81:d1:4e:28:80:5d:
                    d4:0b:7e:51:24:bb:c8:fd:e8:5b:08:8f:a5:c1:48:
                    93:23:92:59:d9:04:51:c0:d9:ac:a4:23:e6:8f:b8:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:0F:B8:E0:25:08:83:D8:5A:BA:CE:72:81:90:63:19:27:C6:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/4928227b-a919-3b1e-8651-e3b58bf2abca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl

            X509v3 Authority Key Identifier:
                keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.52.0/23
                IPv6:
                  2602:fbb7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:25:b4:8c:fd:72:42:23:cb:65:95:bc:19:b6:f1:ee:30:83:
         b0:ed:a0:b2:64:c6:d0:9b:8e:50:be:c2:d7:8b:e3:20:6d:38:
         d9:08:b9:dd:4a:03:99:8c:cd:0e:c1:bf:3b:12:48:81:15:fe:
         d9:51:86:4b:8f:90:2c:07:35:50:f1:43:30:3c:5a:2c:95:26:
         74:69:cb:8a:b6:af:dc:27:cc:b0:70:eb:96:d5:1e:f3:c9:be:
         62:3f:06:1d:83:a8:d5:27:8c:6d:d0:38:d8:96:bf:6f:79:6d:
         f2:35:6c:61:d5:ed:28:6b:1d:12:40:40:75:1b:20:22:55:27:
         ff:fa:cd:26:fa:e9:c7:89:2a:04:60:72:c6:c6:39:bf:d4:c6:
         d4:1d:c0:55:9f:ca:2c:d0:ab:08:45:d5:fc:3f:8d:dd:84:da:
         e6:7a:f0:e6:94:9c:8a:53:ba:8d:77:10:c3:7e:25:7f:3f:4b:
         24:0f:b6:48:da:e1:5a:ca:1d:d5:c7:2f:5d:28:8f:36:8b:82:
         06:ba:e5:d7:de:2e:d7:84:7d:7d:cc:db:af:8d:0b:72:06:e5:
         ea:bf:99:d2:e1:a8:b4:10:56:53:de:c0:93:51:2b:a4:9c:71:
         47:3c:55:37:ad:2f:66:f4:f5:de:d9:5c:21:da:e5:b0:8c:04:
         19:90:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 11:17:17 2025 by rpki-client