Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bac65284-e6b5-3aa1-92b5-ccb329933f62.roa
File:                     bac65284-e6b5-3aa1-92b5-ccb329933f62.roa (raw, json)
Hash identifier:          EWEAJ2xNyuyQ+tnxk4D+rXxk2i5qgB1nr5TvDE1Q7BQ=
Subject key identifier:   DF:0E:1A:1A:02:E5:F2:26:C0:08:0A:C3:38:12:15:5D:DA:9A:90:EC
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584AC2E0FF92C3013EF318373400
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bac65284-e6b5-3aa1-92b5-ccb329933f62.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     16696
IP address blocks:        199.192.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ff:92:c3:01:3e:f3:18:37:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=f3bff37a-e5d7-4253-9f83-1f5606384158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:ea:01:4c:4e:c6:18:2f:79:8a:6c:0c:76:
                    68:4d:66:25:13:42:b7:7a:dd:b5:64:e9:f8:1d:b7:
                    94:e3:1b:76:ab:a2:5a:a9:c5:00:38:b8:c2:26:7e:
                    8e:64:0d:2f:51:44:a7:06:05:17:ba:7b:ab:37:e0:
                    3f:91:9e:bb:9c:f5:eb:d3:bb:ce:d3:03:cc:5f:5d:
                    3f:ee:fa:d3:36:a9:a1:f1:83:21:4c:30:76:bf:36:
                    79:52:3b:fd:3e:66:a5:b3:d2:55:c8:6a:1b:66:9d:
                    7f:13:f2:d0:fc:92:24:73:97:4c:8b:7a:4d:05:b7:
                    65:18:3e:a6:01:a6:c5:3a:7d:18:a5:13:77:e2:ee:
                    a2:da:b2:97:d2:45:56:c9:35:c5:2c:3d:b7:4e:a3:
                    5a:15:ee:ab:00:43:6c:92:3f:b8:24:31:85:23:94:
                    ca:21:5e:5b:2c:9a:9e:64:3a:ce:23:96:b6:f6:42:
                    aa:14:e2:c7:69:60:d6:18:38:6a:ce:ae:b7:64:7b:
                    c6:b8:bd:33:45:5a:14:44:35:5f:01:1a:16:a2:24:
                    4e:04:23:22:bf:a3:2e:51:0a:96:f7:15:cb:8a:00:
                    92:fe:96:d2:74:f6:83:a1:d0:19:bd:95:10:62:77:
                    1c:9a:fc:da:5b:c3:05:fa:62:8b:79:55:94:38:df:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0E:1A:1A:02:E5:F2:26:C0:08:0A:C3:38:12:15:5D:DA:9A:90:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bac65284-e6b5-3aa1-92b5-ccb329933f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:02:de:a0:61:e8:7b:6d:14:c4:5d:c4:70:48:29:80:25:53:
         ca:66:c0:4f:e8:52:da:d9:7c:21:be:dc:9c:52:03:d4:8e:17:
         21:ba:22:5a:30:d8:ee:d0:c5:ae:84:f6:aa:eb:e6:00:86:c5:
         77:81:da:aa:ff:cf:fb:c6:f8:4c:98:e5:b2:b3:14:e2:92:f4:
         c4:00:71:96:e6:30:6a:b3:9a:cb:b5:fb:68:f6:15:29:7b:e7:
         e0:e1:c0:df:e2:3d:75:bc:22:0d:7f:4c:fe:cb:e3:49:f8:e8:
         a6:3b:8e:8a:c9:05:bc:d5:45:f1:91:70:38:6c:57:61:76:fd:
         2d:8d:e0:57:e6:65:ec:86:3b:7e:85:2f:71:42:f6:2e:b3:7b:
         56:98:78:e5:ad:2f:56:31:b2:c8:35:d3:ab:ff:5e:99:3b:58:
         53:62:b5:24:2c:9c:e3:db:f4:8b:00:49:c7:d8:d1:64:c6:41:
         e9:0a:32:4d:51:32:74:3e:7d:f7:bb:f6:e4:7a:63:5b:fb:44:
         2a:ab:10:ae:38:16:cb:40:4f:e6:e6:84:a7:f4:0f:5e:8c:77:
         fb:7c:da:ac:e2:d8:9e:cd:f4:48:2c:66:20:da:2d:fd:e9:28:
         14:2d:ec:f4:e8:2b:e5:2b:11:c5:69:ad:c9:51:65:0a:39:2d:
         ae:ef:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:22:16 2025 by rpki-client