Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/519b6be7-3e83-31d4-94e5-db9a1fbd4e00.roa
File:                     519b6be7-3e83-31d4-94e5-db9a1fbd4e00.roa (raw, json)
Hash identifier:          HYNEr9VInlKzB0Y3IqdncaaJxJCkb89mX0LTnXY9AiA=
Subject key identifier:   9C:67:D7:12:DD:64:1C:20:A5:4D:3F:A1:54:F2:24:D0:2D:E0:25:90
Certificate issuer:       /CN=b056a34f-06eb-490a-9513-af59adeb036e
Certificate serial:       010D0C9F4328584A23C015561D43D205C1F21A80
Authority key identifier: 9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/519b6be7-3e83-31d4-94e5-db9a1fbd4e00.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     397018
IP address blocks:        192.160.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:15:56:1d:43:d2:05:c1:f2:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056a34f-06eb-490a-9513-af59adeb036e
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=feb4b0b5-b737-49c6-b8ed-9cf95922dd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:0c:9a:33:fa:83:c5:ac:de:c7:11:66:dc:
                    4e:e3:b5:a9:e7:89:54:86:c3:2e:89:98:64:a8:62:
                    31:40:59:39:ce:3c:63:c9:01:0d:b2:df:b3:b5:aa:
                    ff:1f:1a:1b:80:75:f0:83:6c:7e:10:27:3f:ff:39:
                    06:72:8f:58:74:d1:ea:3b:13:20:9c:03:19:d8:4e:
                    ed:c2:6f:70:3a:9c:eb:29:c2:a5:d8:87:b4:cc:3f:
                    63:93:a6:da:ca:18:3e:b3:43:d8:c2:f0:b1:17:63:
                    62:d5:5b:8f:bd:3c:14:b9:eb:2f:19:0d:38:8d:19:
                    c5:f3:4a:be:d1:9d:97:e7:36:18:e6:55:a5:c7:62:
                    77:60:6b:d0:76:b3:f2:24:58:e1:bc:45:b4:5a:a1:
                    82:bc:3d:cf:20:27:fc:7e:41:1e:54:10:ef:f1:04:
                    12:3c:af:70:33:bb:be:57:3e:e4:f3:b8:62:61:4c:
                    04:07:18:6b:24:57:2c:24:0b:20:7b:87:7c:59:16:
                    c3:a9:64:18:f9:de:a0:62:ae:65:e9:3a:37:59:58:
                    b5:f4:1a:ef:04:01:61:87:63:1c:6e:02:89:2f:44:
                    bc:6f:24:69:0f:40:21:fc:8e:d3:58:36:d9:f6:05:
                    5f:b4:25:90:b4:94:b0:31:9e:02:33:a4:fd:7d:c2:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:67:D7:12:DD:64:1C:20:A5:4D:3F:A1:54:F2:24:D0:2D:E0:25:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/519b6be7-3e83-31d4-94e5-db9a1fbd4e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:45:49:62:e8:45:9e:e6:50:c8:19:f3:28:50:22:71:72:ef:
         b7:b3:3f:48:ea:9e:94:30:32:fc:a0:7b:93:1f:c8:e9:37:15:
         86:38:1a:a6:9d:33:59:d8:d8:16:50:93:b1:14:10:bb:5b:ca:
         6a:c4:0d:f5:69:69:01:54:d9:2b:fe:4e:1a:f5:c0:68:cd:5c:
         15:a5:95:d9:a0:f4:ca:1f:7b:be:ef:cf:4b:d8:ae:19:48:77:
         90:ba:d0:4a:cd:dc:8f:a6:89:6e:c4:ef:92:91:41:9f:ff:cc:
         95:6f:0d:89:03:c9:d9:09:19:50:d7:4a:04:16:d3:1b:67:07:
         5c:5b:b0:3c:a4:1d:ea:38:b7:de:e8:0c:e3:8f:03:07:a0:22:
         0e:4d:8c:69:88:c2:d1:b5:98:3d:85:1e:08:29:a0:4a:7a:c7:
         9e:40:ea:d6:cf:35:b5:aa:ce:42:b7:2e:9d:8b:90:91:de:dc:
         7c:3f:7e:3c:b1:0f:cd:f3:63:5f:ed:1b:42:01:06:fe:34:be:
         d2:5a:6b:9a:1f:11:5b:45:27:7c:9e:bf:d0:6c:db:ae:4f:1a:
         62:0c:7d:30:1a:0c:8c:a2:96:28:15:4f:88:c8:d4:aa:37:d1:
         0d:ef:33:ca:f0:f9:dd:5d:59:e5:65:9a:1f:51:b7:81:7b:73:
         42:3c:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:58:39 2025 by rpki-client