Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa
File:                     6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa (raw, json)
Hash identifier:          2rgf14SqYqVIz/qa93HjZK2zDBl6bXlVgjxJjLV49jw=
Subject key identifier:   92:9F:F6:93:D9:88:B7:35:0B:49:56:76:A9:64:9B:F3:54:03:49:03
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F4328584AC8765253BE409025FE1C8D80
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        204.152.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:52:53:be:40:90:25:fe:1c:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=eb1ce01d-d125-4ab5-927e-b905d32af917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:0f:b8:a2:ab:b5:40:a8:10:60:49:bb:9a:
                    aa:8d:ac:3b:ba:58:b5:8a:39:1b:0c:f2:1c:ba:9e:
                    62:b5:33:8b:ef:c6:84:31:ba:67:ba:7b:d0:85:92:
                    34:7a:f3:d3:0a:48:16:c8:58:71:5f:a3:f3:02:ee:
                    5f:41:e8:d3:e3:bf:d8:72:20:92:69:8a:ce:b1:16:
                    1a:bc:42:3c:58:03:d2:2e:eb:71:60:1a:97:08:e8:
                    fe:56:d9:cb:a1:83:dc:f6:06:29:c9:2a:0b:b0:12:
                    61:4c:3a:5e:3a:91:9c:4d:64:e0:3a:8b:48:f6:99:
                    26:e6:79:07:50:88:27:c9:6a:e9:ff:9c:fe:d3:3a:
                    20:4a:11:7b:0e:d8:48:08:d4:47:63:81:34:41:53:
                    6b:30:fe:aa:b4:48:ee:6d:c1:a1:94:c7:20:95:c7:
                    20:14:45:4f:c3:55:fb:14:3a:be:eb:64:5a:e0:71:
                    9e:96:3d:16:5d:ad:7c:02:5e:15:9d:42:01:c8:e7:
                    dc:37:6d:b5:c5:01:a5:32:77:3a:47:44:e4:f9:84:
                    fa:cf:2b:a2:07:86:92:27:5d:4f:0b:38:6d:d7:04:
                    ae:5d:d0:f4:58:fa:5f:ea:28:73:d7:06:3d:fe:06:
                    96:0d:ed:52:0b:c4:cf:9c:69:5f:71:31:7b:de:93:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9F:F6:93:D9:88:B7:35:0B:49:56:76:A9:64:9B:F3:54:03:49:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:50:f2:23:b4:b8:51:03:76:6e:6b:9b:8f:9d:75:73:e4:
         dd:14:43:0a:ea:a1:f6:09:77:bb:70:b0:b4:fc:ef:f0:07:df:
         ba:2f:24:06:e0:d1:78:4e:44:f9:d2:19:ae:76:93:95:fc:ac:
         b9:91:8c:ac:a0:9c:82:93:af:e7:59:c2:4c:9f:46:b1:1f:c5:
         a7:b5:de:c7:68:02:88:b6:4c:f9:e5:76:c8:9d:60:10:ab:3d:
         df:52:2a:df:f7:47:8e:f2:3c:d9:be:0c:a4:06:dc:a9:6d:70:
         5d:2b:17:6a:18:32:48:b7:0d:7e:dc:02:e4:09:fe:a3:89:5a:
         ac:99:7b:fd:08:8d:b7:cf:31:91:f6:07:fa:2f:c0:9a:d9:47:
         36:d7:c6:73:f8:05:53:2f:27:ad:ed:40:d1:ce:c7:66:ce:5b:
         ad:31:bc:9e:c0:bd:17:58:6a:e9:a8:32:20:ab:98:31:e0:2b:
         5e:ce:e9:57:dc:6b:cc:11:c6:c8:bc:08:6b:74:9d:73:6e:60:
         ea:ac:40:3b:09:5c:0a:ac:44:14:cf:81:4d:ef:96:ce:d2:67:
         b4:ed:01:d4:af:a4:a9:52:17:73:3f:c5:7f:0a:43:3b:69:5e:
         43:e4:ee:e0:11:bf:9d:9b:74:fc:65:f9:54:ed:25:83:4b:f2:
         2c:04:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:26:53 2025 by rpki-client