Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/7ec02096-de1b-338c-bb78-6ac6c3ba802c.roa
File:                     7ec02096-de1b-338c-bb78-6ac6c3ba802c.roa (raw, json)
Hash identifier:          OHKDkHlB1QlguxLIygR12e3LzUWa+Pt2aXdqO5vImS8=
Subject key identifier:   BF:98:E9:31:40:C7:DF:AA:A0:7B:7B:5E:EA:AD:A1:16:F2:3E:B1:75
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F4328584B0A1167C9E2F5E3C23BCADB60
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/7ec02096-de1b-338c-bb78-6ac6c3ba802c.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        198.97.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:67:c9:e2:f5:e3:c2:3b:ca:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=1409a010-5964-4839-835a-199a6f49fb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:9e:4d:42:5d:12:7b:2c:bc:2a:b1:60:83:
                    4c:16:50:1f:25:c4:88:42:60:b2:1f:89:c2:6d:b3:
                    57:dd:5b:fc:6a:61:77:77:ac:7a:45:d8:74:f8:52:
                    fa:d5:74:fd:de:30:df:22:9e:eb:82:1d:a1:81:6d:
                    7a:41:12:04:c1:19:7b:fd:ef:3b:bc:8c:62:16:de:
                    1e:20:b2:65:06:18:09:f4:d4:33:17:a7:db:11:50:
                    95:1b:aa:42:db:f4:f2:fa:82:ff:21:76:10:46:cf:
                    e1:68:70:65:96:41:59:ee:70:51:73:be:47:35:7a:
                    b9:a8:72:94:e4:46:08:4a:a9:dd:63:53:62:ee:2a:
                    ea:53:00:88:ce:43:02:d3:33:a0:98:1e:e6:9d:c8:
                    93:3d:25:44:2e:21:d4:ee:04:bf:e0:03:90:dc:8b:
                    03:04:21:82:33:86:cc:97:4b:d7:43:23:ec:52:bd:
                    41:f6:d4:a8:a7:98:51:f3:a2:9c:b4:2c:d7:22:fe:
                    cc:f3:73:b3:33:ac:43:34:8c:e0:6b:76:e1:9e:f7:
                    d7:4e:a2:d7:eb:e5:7a:81:da:d6:9f:61:49:79:4e:
                    16:da:cf:b4:bf:52:bc:8b:a8:11:eb:b2:9c:4a:07:
                    96:a1:39:65:04:7e:42:f8:ab:93:37:07:8b:6c:ca:
                    d0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:98:E9:31:40:C7:DF:AA:A0:7B:7B:5E:EA:AD:A1:16:F2:3E:B1:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/7ec02096-de1b-338c-bb78-6ac6c3ba802c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:71:66:d4:9d:8d:71:9d:02:eb:af:49:f6:61:33:72:fa:da:
         9e:41:98:80:1f:97:32:39:b5:f8:63:44:92:be:f2:d8:96:71:
         1d:be:4d:3e:01:53:61:79:ca:5a:f9:47:f6:e9:7f:61:49:00:
         84:11:d4:2c:d9:6b:19:79:96:6a:e0:eb:fd:58:f1:3c:62:64:
         24:1f:95:22:e1:10:ab:8f:5f:c4:77:4e:45:7f:19:90:3e:e1:
         95:cc:60:71:cd:37:f1:48:88:ee:2e:9b:3e:aa:5e:32:33:c7:
         2a:7e:6b:df:d2:be:7b:d2:7a:71:7d:d1:d8:59:e2:50:32:90:
         53:f3:89:a6:1e:ec:b1:f0:51:30:c0:ad:64:ea:33:1b:ad:89:
         b7:79:b3:d9:96:6b:5b:33:31:60:64:25:02:1f:e0:96:4b:f2:
         1d:29:ae:5a:7b:9a:3f:45:d7:e8:40:f2:e9:80:d5:d4:5b:50:
         c9:00:0e:b2:cd:cc:26:bb:f6:29:b4:6f:c5:85:f9:03:54:ea:
         da:39:87:0e:b5:77:ee:b2:42:77:6c:ea:70:28:2a:90:a6:1d:
         91:64:0b:01:ba:07:7c:17:67:0f:9b:07:74:fd:12:bb:97:51:
         d3:b9:75:76:dd:a2:08:8d:51:db:2a:96:7d:66:14:8c:87:68:
         7b:5a:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:56:16 2025 by rpki-client