Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/b1e69160-db79-3d9e-a04f-f938ef3def0c.roa
File:                     b1e69160-db79-3d9e-a04f-f938ef3def0c.roa (raw, json)
Hash identifier:          a8DpjG00QA4TNKdVvTVgG1m2CJd5DCnp3uCnkPsN+MM=
Subject key identifier:   FC:06:DA:72:4E:01:B4:22:8E:8B:3D:2B:4E:E0:F8:C6:55:94:63:CD
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584B00B01E3A9367C17C2744DF00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/b1e69160-db79-3d9e-a04f-f938ef3def0c.roa
Signing time:             Thu 28 Aug 2025 04:22:33 +0000
ROA not before:           Thu 28 Aug 2025 04:22:33 +0000
ROA not after:            Wed 26 Nov 2025 05:22:33 +0000
asID:                     14956
IP address blocks:        144.172.106.0/24 maxlen: 24
                          144.172.107.0/24 maxlen: 24
                          144.172.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:b0:1e:3a:93:67:c1:7c:27:44:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug 28 04:22:33 2025 GMT
            Not After : Nov 26 05:22:33 2025 GMT
        Subject: CN=d8f6f6d8-298c-4bcc-8fd4-30507fe24636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:56:51:46:c9:e4:91:36:05:e4:52:3b:7a:
                    8d:2b:43:16:5b:7d:b9:f7:ce:77:cf:82:92:29:b2:
                    f9:2c:4f:2e:b8:3e:d5:35:56:72:5e:ea:24:e1:0a:
                    f8:d8:60:00:0d:c6:19:06:02:cc:21:a9:98:17:39:
                    55:7a:44:16:2b:27:77:0e:e9:ab:59:49:cc:27:5c:
                    72:b5:01:e2:6c:07:3d:e0:34:11:9d:14:26:d1:0b:
                    77:07:8d:f1:f0:2c:c3:8e:f7:d2:92:7f:36:81:79:
                    29:08:7d:2d:c3:f8:0c:8e:6b:a4:78:2b:d6:1a:93:
                    61:32:30:d3:70:73:24:bb:eb:fb:27:81:ba:c6:8c:
                    40:14:63:53:66:9e:96:1c:1b:c3:4b:93:ca:ca:64:
                    ba:60:06:49:ae:b9:d7:5a:c5:a3:53:d4:66:c5:31:
                    5e:71:0c:f5:f8:3a:0e:42:50:63:db:72:fc:82:2a:
                    c6:18:87:8d:39:6c:80:35:87:1e:49:80:9f:a5:c3:
                    f3:68:40:54:4f:fe:d8:56:df:58:9c:7c:b4:17:9b:
                    0b:9e:26:ed:73:24:02:e4:24:a1:b2:95:d5:d6:1f:
                    65:92:d8:0e:64:38:fd:13:fe:9e:1d:1c:f3:98:a9:
                    31:bb:04:45:51:c5:b6:ab:7b:1e:d1:c0:85:cb:17:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:06:DA:72:4E:01:B4:22:8E:8B:3D:2B:4E:E0:F8:C6:55:94:63:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/b1e69160-db79-3d9e-a04f-f938ef3def0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.106.0/23
                  144.172.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:39:8f:0a:c1:f1:67:79:1f:42:a4:f8:93:4b:f7:1c:e4:4b:
         a8:74:c1:a5:fb:ac:61:cc:f2:e0:6c:9e:95:46:21:47:f7:b6:
         f4:6b:72:da:e9:70:fa:07:ae:88:b7:cb:90:c5:d0:44:46:fc:
         53:fa:9c:5a:d4:ab:9f:df:4e:64:da:80:fa:fd:bd:65:60:5d:
         05:78:22:71:7f:c0:ad:3a:41:eb:d7:3c:ee:22:5c:23:f5:a1:
         f5:3b:54:60:28:7c:95:b2:eb:c8:71:23:b7:da:5b:a1:b0:70:
         e6:4a:02:31:81:33:19:c1:10:4f:66:f6:35:73:f9:04:f9:76:
         52:a0:26:fb:1c:e4:74:63:cf:e8:17:63:f8:53:29:ef:4b:5d:
         3f:3f:cc:9f:d0:bc:90:0e:46:e5:11:5b:2c:1f:a1:2d:18:d7:
         31:14:e7:c0:22:07:0f:6d:10:8f:a6:4f:80:ec:92:2d:e5:19:
         69:b3:fe:6b:3a:4e:76:ba:de:e3:68:2d:29:84:5a:73:9a:93:
         40:ac:da:00:d0:b5:83:2a:e6:31:d4:49:7d:4f:bc:a0:64:20:
         e6:2c:9a:d2:13:fd:68:2f:b8:09:5f:29:c4:00:02:20:43:07:
         c2:72:e4:ca:41:a5:e0:81:97:a6:24:ca:66:d8:87:b2:b2:d9:
         3e:0d:e0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 15:50:04 2025 by rpki-client