Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa
File:                     aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa (raw, json)
Hash identifier:          X8haHkrExCaGu/TQ6iTwWGCzwRzy/x+sMSmkcD3td04=
Subject key identifier:   91:90:55:E3:94:6C:38:9F:C4:DC:17:F1:D2:0A:DC:56:B2:90:7D:AA
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F4328584B0B76AE5EC8EB25CE1621A4E0
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     14203
IP address blocks:        198.186.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ae:5e:c8:eb:25:ce:16:21:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=db66c335-968e-4aa4-bf10-3530cb5ff0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:43:0f:41:c0:7e:de:ab:53:e6:84:c7:fa:
                    11:ff:43:7a:8a:61:68:cd:4e:ab:25:6c:3c:ab:66:
                    4b:4c:95:81:95:be:a1:8e:52:26:19:c9:0d:46:d3:
                    49:1c:b9:11:7f:7e:fc:ee:b1:c6:0c:b5:62:5c:ce:
                    72:41:05:25:dc:7b:c4:0b:dc:92:bc:5c:9a:76:03:
                    29:30:ef:af:10:7d:c1:bb:86:51:7d:a3:cc:49:1d:
                    fc:fc:65:b1:2a:ee:57:b7:c7:a8:6f:dd:ce:fc:9b:
                    61:16:26:24:6c:27:36:44:b3:d5:f5:bc:05:6a:fe:
                    ad:ee:7a:41:4b:c9:29:2f:de:46:66:74:cd:e7:3c:
                    83:c6:4b:74:5c:14:bf:ee:1d:8e:0c:2c:56:5c:fa:
                    06:27:2a:04:c4:2c:5c:ed:c0:61:bd:ec:c0:85:cb:
                    25:29:df:9a:0c:41:db:d0:b7:44:28:c8:b9:ce:48:
                    14:66:55:8c:d0:7e:2e:2f:0e:6c:42:2e:06:ea:2a:
                    c7:d1:2e:0e:22:ac:cc:c3:59:aa:dc:d4:0c:fd:af:
                    b0:0a:10:91:1d:b5:ae:15:27:dc:df:4d:25:3c:9b:
                    9d:01:82:33:66:6e:4a:3a:fe:e1:77:a3:8b:16:b5:
                    e9:09:82:44:8f:e4:31:45:e5:df:39:6f:89:30:a9:
                    24:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:90:55:E3:94:6C:38:9F:C4:DC:17:F1:D2:0A:DC:56:B2:90:7D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.186.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0e:be:15:f7:f4:24:61:cb:8a:11:54:b7:96:39:17:0d:51:
         83:01:84:8c:93:8c:ba:f4:3c:51:bf:66:f7:84:e3:90:d0:a7:
         7b:0b:d2:b2:de:61:f8:62:0f:cb:62:8d:41:01:cf:b5:1b:e9:
         75:7e:9e:2b:dd:10:ad:5b:ec:ab:bc:01:da:3a:68:d3:fa:e2:
         8b:74:af:e2:a4:4f:58:60:4e:82:4e:83:67:e1:a8:0a:91:f6:
         71:91:f7:ff:d5:c4:2a:d0:9f:2b:d1:0d:38:40:e9:63:cc:04:
         d5:ce:f2:d6:16:0e:81:2e:d5:53:dd:8e:ff:69:be:25:a9:43:
         db:97:6e:80:fb:02:d4:77:70:b3:a4:49:48:5e:e9:47:62:1a:
         80:39:a7:e2:f9:66:6e:9a:32:1a:12:28:5e:b7:a4:b7:43:49:
         73:94:4c:35:a5:8d:2a:da:48:9f:a1:4e:2d:f4:8e:06:f8:ee:
         59:97:05:60:f0:a7:e1:62:fc:7e:69:05:37:74:81:e3:95:27:
         05:f4:ca:b9:41:2c:69:14:d5:28:22:b2:aa:79:c3:5a:ac:dd:
         41:60:ed:1a:26:73:a3:b8:e7:3f:f6:48:ce:a8:e5:2a:4a:a4:
         7a:f1:bf:83:03:8b:76:df:df:9b:6a:3e:b6:d1:b3:89:a4:27:
         4d:cd:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:55:43 2025 by rpki-client