Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa
File:                     a8529787-c060-33e4-86c6-8d72789c4686.roa (raw, json)
Hash identifier:          TgRYCyUa8qFWM/RKwPxHDkjOQGw6XOWRa8UTTewdTAs=
Subject key identifier:   D8:AF:C2:EB:13:C6:53:04:33:C3:89:94:03:4E:8F:4C:C6:1A:BA:6B
Certificate issuer:       /CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
Certificate serial:       010D0C9F4328584B2FC18FD754A3C4AF5050F840
Authority key identifier: 64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     62647
IP address blocks:        198.49.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:8f:d7:54:a3:c4:af:50:50:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=fea12012-56e8-45ae-a3a0-39b40c83a5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:ef:f2:a6:31:f6:20:c8:c2:94:1a:0a:64:
                    42:b4:a3:f9:d7:22:6c:96:d0:bd:31:33:ae:97:49:
                    ae:97:ab:52:00:5f:fd:c8:11:a7:03:ed:52:22:e1:
                    ea:58:80:c5:5f:af:ee:e1:6e:33:db:b2:79:32:34:
                    18:cc:4c:25:3f:22:a3:5b:c3:96:2e:f5:1f:57:68:
                    00:44:57:d0:86:bf:b6:2c:1e:91:b8:10:04:72:20:
                    f5:b5:44:9f:21:d1:94:7e:be:8b:96:d4:27:80:00:
                    b2:12:7f:c4:c1:d5:2d:2c:0e:a8:46:38:b6:01:a8:
                    04:e3:af:e9:96:df:02:c6:a6:27:c4:65:c6:f2:ae:
                    89:fc:cb:71:24:0a:73:ef:07:88:9d:f6:1f:9a:cd:
                    b9:58:0b:4b:39:7c:b6:e2:a6:f0:5d:db:b4:92:fd:
                    65:0c:fd:51:d5:25:45:1a:4d:5a:c3:aa:89:36:bb:
                    47:9e:87:89:df:f3:7d:21:b8:59:e8:28:54:0d:3e:
                    55:5f:5a:c6:e2:da:06:d2:a7:de:49:87:5f:63:48:
                    7c:5a:69:14:99:a1:49:2a:68:bc:fb:98:37:05:5d:
                    6c:82:65:56:a2:fa:64:a8:13:1a:39:c5:30:d8:2c:
                    b7:71:3b:0a:9e:3e:8e:24:06:f8:95:51:91:8b:41:
                    9c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AF:C2:EB:13:C6:53:04:33:C3:89:94:03:4E:8F:4C:C6:1A:BA:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.crl

            X509v3 Authority Key Identifier:
                keyid:64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:f5:ac:8d:09:fc:78:9f:7c:1d:e6:65:ae:51:77:d6:8b:
         78:9a:c5:9f:cf:1f:82:c5:74:e0:a8:75:2c:32:59:fb:bb:3c:
         11:29:5b:45:d3:40:6b:e3:8d:e5:17:46:7b:f6:75:c2:06:44:
         53:ed:d0:ee:e6:99:2c:c0:1c:96:18:6c:e9:18:fc:43:bb:51:
         46:38:54:38:15:be:32:e0:6d:ca:95:ff:39:f0:32:78:52:8d:
         e0:bd:d3:89:d5:05:00:b2:8b:fd:7e:36:eb:6d:5b:fa:b3:c6:
         5d:b9:4b:52:51:fd:1a:af:20:42:2b:71:8c:45:8c:10:67:c4:
         c4:e7:ba:66:a1:a2:9f:69:34:5c:ef:05:e2:9e:dd:21:3c:dc:
         6f:27:d4:2b:8b:61:11:5b:c2:57:1b:00:80:05:0a:31:53:d1:
         c2:35:df:5b:e5:8f:5b:de:0e:a9:b4:09:64:e9:1d:77:63:7d:
         f4:47:91:fd:7b:07:e1:b4:f9:6d:88:b8:f3:50:f1:b1:f5:ed:
         16:f2:52:4d:13:91:07:0c:58:c6:7f:b7:0b:49:7d:c7:96:e2:
         fe:ab:69:7e:2e:ec:31:8d:d4:02:7d:c1:6e:41:a8:40:c4:9f:
         29:ac:92:07:f0:aa:ad:0f:07:e6:88:0b:e3:5e:dd:31:27:22:
         6d:34:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:03:17 2025 by rpki-client