Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/92e9c1fe-6ec2-3ed4-a274-e5e915bcc17e.roa
File:                     92e9c1fe-6ec2-3ed4-a274-e5e915bcc17e.roa (raw, json)
Hash identifier:          gi7WLxtrRG/j+QqaB4RzBqHBa31CziXMLrHICeLbPLY=
Subject key identifier:   89:C9:18:68:B8:63:D9:4F:C9:FF:32:51:0A:C1:57:69:18:7C:3A:2D
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584ACE0B9C1321CE520DB1746E80
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/92e9c1fe-6ec2-3ed4-a274-e5e915bcc17e.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     396844
IP address blocks:        148.76.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9c:13:21:ce:52:0d:b1:74:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=dc609144-0b9d-4776-8b5e-6ed25c480080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:d9:47:e4:88:77:77:04:a7:d1:5c:c3:a5:
                    a5:40:e7:c0:b4:97:08:ec:2c:99:c1:91:94:fd:a0:
                    06:3a:70:37:1e:ff:c2:dd:fc:37:bf:f7:6c:2c:13:
                    9a:51:0e:dd:ae:ca:dd:70:c4:f3:23:ef:15:dc:b1:
                    ce:58:1a:3a:b8:d0:91:08:04:4a:76:43:a4:67:76:
                    77:85:09:01:40:ee:18:ad:2b:95:23:8e:b1:f3:04:
                    5f:1a:58:f5:fa:de:75:8b:3f:38:12:80:40:85:a4:
                    43:15:b4:e2:b9:be:79:4a:8d:1f:7e:99:de:00:cb:
                    72:1d:31:41:3a:43:27:ae:fc:cb:fd:75:c6:2f:56:
                    30:31:20:49:1e:89:63:e0:a3:4a:c7:69:a4:eb:b0:
                    46:64:d3:74:55:48:6a:27:52:4c:e0:73:68:55:f5:
                    5b:d3:7a:12:f7:71:5c:66:f9:10:71:f9:c0:ef:38:
                    1a:1d:c7:78:d3:f5:74:d4:c1:4f:ee:6a:f3:c5:8b:
                    fb:c6:55:8c:72:f2:db:39:86:1a:7e:de:11:6b:25:
                    e1:39:9a:22:8d:93:ea:d2:8c:7d:ea:80:e5:e2:dd:
                    ed:92:d7:87:2d:29:80:4a:68:53:75:ca:6b:fe:ee:
                    82:0d:b1:ea:b8:67:43:c5:ee:19:6e:11:ed:99:b5:
                    6f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C9:18:68:B8:63:D9:4F:C9:FF:32:51:0A:C1:57:69:18:7C:3A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/92e9c1fe-6ec2-3ed4-a274-e5e915bcc17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:a5:81:09:d5:eb:80:49:34:58:f0:ce:61:b9:6c:8b:c7:
         ac:e2:99:ba:80:9c:71:cf:4c:98:b5:eb:be:33:04:f0:53:51:
         8e:73:3f:57:62:a6:c3:3e:b8:03:43:ba:66:a5:a6:cd:0f:ad:
         25:b9:7a:ba:5e:db:33:18:8c:54:21:16:0c:f7:43:44:c1:fb:
         7d:c9:c6:a6:34:13:d9:fd:aa:b3:0f:b4:27:82:36:36:53:75:
         65:fd:75:63:44:e6:77:46:33:7b:5b:45:2e:71:ab:7c:33:60:
         86:2a:b7:dd:6d:c5:55:7d:5e:67:fe:db:27:01:e8:2e:9f:1c:
         a7:eb:02:4a:d9:13:5c:87:ba:fd:d7:a8:b6:4f:77:b0:19:16:
         ec:85:bd:84:cd:e8:14:cc:1c:84:52:43:cd:c9:c7:c3:fc:9d:
         68:a7:ec:6e:fa:7d:db:d0:a2:19:cf:d5:23:4c:3f:fd:aa:db:
         c0:3a:30:d4:35:31:14:72:44:20:b4:12:74:d0:9f:1d:85:38:
         70:fc:a6:20:34:2a:24:04:58:47:08:b9:08:8f:88:ec:ae:6e:
         62:49:01:41:2f:03:a6:04:66:ff:cf:c7:ac:53:04:b3:42:15:
         89:8d:26:db:8d:0f:6f:37:af:c4:b6:62:1e:81:47:a1:91:51:
         1e:dd:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:52:32 2025 by rpki-client