Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa
File:                     5322ee79-9c85-3eee-9d78-27a6894643bc.roa (raw, json)
Hash identifier:          DHPjEVwgXdrquDzKf/CodBE+jWGnSbGiOi6hcqeHIrM=
Subject key identifier:   3E:30:B1:E6:AC:16:34:B3:31:E6:E7:69:98:C4:16:BE:8B:E3:25:02
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584ACF70F88D5D32751E462B0040
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:f8:8d:5d:32:75:1e:46:2b:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=f68ecf6b-8650-4bed-bf71-2c81a3d79732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:f8:4c:37:34:69:dd:84:e4:3e:26:f9:bb:
                    0a:9a:f0:fe:2c:88:72:9b:b4:f0:8f:23:f9:11:8c:
                    31:57:e2:8a:3b:a7:36:e2:a7:a8:b5:b0:78:00:51:
                    62:b5:a1:3a:78:18:0d:39:ec:fc:68:36:46:8a:16:
                    5b:af:65:e6:fd:ca:3f:f4:b1:d7:a4:7f:ea:0c:db:
                    09:b8:7b:70:6d:81:6d:d7:9a:45:b5:c2:e2:1e:3e:
                    a5:db:af:fc:76:20:98:b5:c1:c1:86:eb:97:c2:b8:
                    61:bc:cb:fe:2d:84:4c:08:18:85:73:5e:a9:40:c8:
                    9e:fa:0d:08:71:a7:92:9e:c0:ff:c5:5a:5e:a0:82:
                    5a:38:58:31:1e:3f:62:19:58:04:4b:fc:7a:5d:19:
                    83:2d:12:f4:9a:48:d7:56:7f:dd:b0:64:da:f5:0a:
                    88:37:5b:bf:a3:13:d7:56:a2:e1:4c:b1:d1:ae:c7:
                    57:e7:05:f5:7d:e1:05:6d:60:09:a6:93:fa:57:ed:
                    f5:7a:06:20:ed:dc:c6:c7:2d:51:24:2c:95:86:c5:
                    ad:f5:fc:6e:ee:f6:98:03:11:ab:53:4c:94:ad:f2:
                    84:30:cd:f7:a6:d4:fd:89:ab:d4:5e:06:d0:39:96:
                    bc:7f:97:e4:22:6d:fe:7e:5c:e7:ff:13:26:ed:8f:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:30:B1:E6:AC:16:34:B3:31:E6:E7:69:98:C4:16:BE:8B:E3:25:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a4:ee:c1:d4:b2:a9:2a:3c:1f:69:a0:51:e8:1b:10:f7:3e:
         a8:1c:70:a4:af:d2:50:8f:06:ce:1a:5a:93:85:95:01:5b:a6:
         18:27:2b:f0:42:94:69:8a:79:ff:56:19:58:5f:0b:a1:52:4d:
         01:ed:13:c1:55:7a:eb:97:fd:38:03:ce:4e:23:0e:ff:f0:39:
         51:79:e8:50:3c:40:03:f1:2a:39:3f:bc:84:d0:f6:34:47:8f:
         a4:d4:a5:a0:f5:05:7c:90:2a:d4:f7:30:69:67:e4:b2:0c:c5:
         75:43:85:bf:8b:f4:62:53:79:b8:50:3f:50:ec:e8:20:32:53:
         d8:33:2c:ae:d8:b9:17:c5:b2:30:59:03:2a:e3:a8:09:6e:a3:
         6f:65:4b:56:e7:ec:87:21:07:3d:66:4a:34:5c:73:c4:06:18:
         fb:b5:17:65:45:ac:05:36:e6:36:bc:e8:57:6b:b7:60:69:8a:
         50:09:7e:d9:ef:2a:9f:39:1b:dc:86:34:08:8c:3b:43:92:9a:
         3e:4e:8b:b0:fa:f2:a9:25:1d:79:71:1e:8d:af:e9:60:af:b3:
         01:cc:de:38:e9:2d:3f:02:1d:de:98:b3:8f:9d:df:ad:f5:67:
         ab:b4:6e:ee:c1:15:74:4e:da:76:43:d1:b6:9d:49:5c:eb:df:
         ae:40:9f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:17:23 2025 by rpki-client