Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa
File:                     dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa (raw, json)
Hash identifier:          Dz1Ntk82yRTRs9XY7ZOSFZ3v53YXwZB7BX0W0cGlHwc=
Subject key identifier:   48:2A:6E:F8:91:FC:31:5F:03:E7:43:6F:61:94:E0:74:6A:A5:C6:9E
Certificate issuer:       /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Certificate serial:       010D0C9F4328584A5FC5D91E3193811850A7E280
Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        198.204.9.0/24 maxlen: 24
                          198.204.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:d9:1e:31:93:81:18:50:a7:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=3bafce81-c754-4f36-bce8-3bb8beec507d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:98:d7:14:37:47:f1:30:d4:43:04:68:ee:
                    5a:ff:dd:1c:7e:cb:df:0b:8b:8e:f3:37:a3:32:8a:
                    46:d5:fa:ae:c6:6c:3f:3f:67:c0:dd:1c:fb:28:6a:
                    19:29:92:d9:88:4b:42:ca:60:14:57:3e:31:a5:e0:
                    05:fe:8c:51:c7:cd:73:6e:83:e9:5e:8b:5c:42:62:
                    e8:df:c7:f3:d0:08:66:f5:b5:9a:59:4a:21:e9:a2:
                    33:73:19:fa:81:50:c8:25:db:89:f9:e5:60:a5:8b:
                    ca:10:b8:0f:87:ed:37:88:31:de:4d:bc:0b:ba:d3:
                    15:2e:ba:f6:cd:8c:56:f5:42:cf:97:f2:a4:dd:43:
                    bb:63:56:e2:ef:57:a3:2d:e1:79:5a:cb:18:a1:4c:
                    27:66:69:19:f3:f5:f2:4d:41:aa:f3:c1:08:3e:5c:
                    6c:fd:9d:b0:34:1f:2f:6b:d8:d8:8a:ee:f6:92:41:
                    aa:76:bd:30:7b:11:1d:0e:45:b2:90:0b:d8:1e:0d:
                    a8:a1:16:f2:8e:ee:2c:c7:aa:8e:ce:80:e8:10:12:
                    87:1d:bd:f2:bc:bc:c2:eb:db:01:e0:ac:6e:65:a6:
                    ea:71:3a:92:e0:05:70:78:5a:94:ae:1b:1e:53:d6:
                    6e:12:43:5e:a5:b2:8e:02:4a:c6:24:fc:ca:63:45:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2A:6E:F8:91:FC:31:5F:03:E7:43:6F:61:94:E0:74:6A:A5:C6:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl

            X509v3 Authority Key Identifier:
                keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.9.0/24
                  198.204.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9d:e0:73:66:50:3a:23:94:f5:7d:71:b1:a3:0a:02:ef:83:
         fd:32:b5:cf:df:f7:ad:12:99:54:5d:12:72:fa:a1:65:06:46:
         90:20:00:9d:d6:fa:e3:d9:63:31:41:2e:f3:c4:a9:e4:86:88:
         9a:f4:4e:11:3e:e2:33:24:67:84:cf:dd:a0:f6:b1:c4:2e:51:
         15:e9:25:db:78:6d:b8:aa:06:e1:b9:1e:9d:c4:a9:73:d5:a7:
         d6:68:28:44:8e:87:e4:91:be:5e:19:71:22:4c:be:60:a7:cb:
         f6:39:7e:9a:19:a0:7f:aa:72:29:04:da:16:c2:2c:e2:96:7c:
         88:45:95:be:48:a8:47:7e:76:c2:12:d5:a7:10:ee:1a:80:b1:
         21:be:75:cd:dd:13:86:19:03:03:0a:89:f9:ae:95:1d:cf:9e:
         cd:1d:47:80:7b:6a:07:6b:1d:5f:5d:ed:aa:c7:6f:c0:c2:74:
         d9:f3:1d:af:fb:20:45:d6:43:55:04:c0:8b:c0:39:fa:b1:00:
         81:aa:ff:cc:71:30:14:62:92:86:db:f5:91:04:9d:3e:36:0f:
         a3:8d:16:f6:63:f9:61:c3:6c:47:59:33:c1:e6:45:70:8a:3a:
         69:6f:4e:a1:26:4e:f6:3a:19:fd:e4:d6:a7:98:7e:3b:2f:4e:
         0d:54:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:55:10 2025 by rpki-client