Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ea0d431d-21f5-319a-8cfd-d8a10f695194.roa
File:                     ea0d431d-21f5-319a-8cfd-d8a10f695194.roa (raw, json)
Hash identifier:          uCB1JRgSJI1w3aXh/I0dtHIn2Fu+vPTKDaHeCYUVhI0=
Subject key identifier:   14:AA:77:E8:9E:DC:08:5D:92:C0:D3:E4:9E:B2:F7:14:C0:5E:76:B3
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584AC2E10BCF06A4D947A0ADCB80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ea0d431d-21f5-319a-8cfd-d8a10f695194.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     16696
IP address blocks:        192.81.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0b:cf:06:a4:d9:47:a0:ad:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=e4e50fe7-a79b-418b-8f7a-f1335af97faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5b:db:7c:c4:fd:b2:8f:5f:e7:04:b0:f5:2a:
                    ac:31:85:18:e0:36:b6:4e:6f:dc:b6:78:24:cb:d2:
                    7a:19:77:99:fe:dd:c5:53:e9:c8:12:6d:8f:e9:7a:
                    82:0c:a4:38:80:52:6b:5e:0a:51:94:16:96:48:01:
                    88:ae:b9:ea:9b:f7:47:97:76:45:2a:65:2b:69:3d:
                    92:be:dd:8f:fa:07:07:b3:08:49:97:d3:25:7b:20:
                    87:58:b8:1c:44:00:d0:d7:57:7b:5b:cf:08:c4:b4:
                    f7:77:9e:b5:f9:6f:e7:66:5d:8d:12:8d:61:14:0c:
                    ce:26:cb:64:be:85:09:8f:9c:29:79:5c:46:15:a6:
                    4f:b7:69:45:48:c7:e8:75:be:30:4b:c1:34:cd:db:
                    6a:3b:34:7c:59:e5:d1:e5:a1:a8:d4:11:26:ee:07:
                    33:00:67:87:ae:6a:10:83:09:5a:eb:3a:fc:79:fb:
                    fd:2c:53:7c:8c:a0:38:7a:98:7d:f2:d3:48:2e:95:
                    74:ad:29:14:b6:05:34:b7:56:c6:13:93:9c:97:53:
                    52:9a:3d:5e:9e:d1:aa:28:42:07:54:c8:20:21:1a:
                    65:2d:5a:a9:d1:d3:ec:23:10:99:43:5a:05:ce:28:
                    ef:d6:49:3e:6f:c4:7e:53:b6:d7:19:fb:cb:4e:e3:
                    30:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AA:77:E8:9E:DC:08:5D:92:C0:D3:E4:9E:B2:F7:14:C0:5E:76:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ea0d431d-21f5-319a-8cfd-d8a10f695194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:a3:e5:5f:f4:01:85:d8:74:03:9f:2a:36:eb:0c:b1:4d:
         b0:aa:17:3f:55:e3:16:c8:f5:8b:9d:e3:ef:d1:13:71:14:24:
         00:b3:45:16:b9:0e:28:83:62:7b:75:3a:84:04:21:22:75:c0:
         e7:16:5f:22:06:fc:75:3a:c0:d6:e6:3d:24:9d:62:5c:f5:c4:
         cb:62:b9:97:4c:56:35:58:0f:77:4f:fb:b5:95:58:eb:78:b8:
         b7:62:7f:eb:88:6c:24:e4:5b:68:35:de:ee:5c:34:a2:95:74:
         2d:07:d9:97:4f:aa:79:fa:33:02:7b:4b:c0:dc:ee:54:5e:f0:
         33:1f:f0:87:c0:93:25:ad:3e:72:9a:1a:53:85:8f:a3:64:fe:
         38:33:14:80:74:ce:d0:9d:ec:6e:bd:d8:01:5d:d5:8b:cc:fe:
         d7:7c:bf:fc:88:6d:bf:05:d9:89:c9:72:f5:7e:20:49:03:60:
         62:d5:78:26:95:a4:68:fc:61:e3:b2:27:1b:82:48:fd:4e:6d:
         18:92:8e:d7:e5:24:aa:d5:36:17:87:03:b1:36:d5:03:80:94:
         32:cb:20:e4:3c:1a:c0:d5:a1:4b:ae:5a:e5:ed:4f:81:e4:30:
         12:11:98:45:4d:f2:44:c1:26:d2:b0:6c:2d:26:d2:3a:f2:72:
         2c:20:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:17:37 2025 by rpki-client