Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa
File:                     cea6a4db-b45f-38c8-ba93-dab3703d562c.roa (raw, json)
Hash identifier:          JJekLIK8dJOjW81yP2tFm0Wp7I713eDYtLu2pCgZHSs=
Subject key identifier:   10:45:25:B2:3B:3B:97:0B:60:D7:58:28:85:C5:73:71:EB:B0:74:06
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F4328584ADA9BC061B3B5005521BEE680
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     23158
IP address blocks:        192.16.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c0:61:b3:b5:00:55:21:be:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=a8b8e6c7-69c5-49a7-8f2e-e9d23b2fee05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0a:09:d9:a0:85:bf:28:31:91:fc:37:43:c1:
                    63:a1:4f:5c:5c:c8:ab:5b:a8:66:08:fd:b9:4b:50:
                    db:3a:98:57:ab:dd:31:0e:a3:41:56:f6:da:78:f2:
                    59:c6:2b:da:62:f1:31:c2:60:9a:8d:01:2a:ce:7c:
                    29:ad:6f:b4:67:a7:a9:38:e3:ff:91:9a:ce:ae:24:
                    cc:c5:4c:a9:82:50:66:35:f4:05:62:39:9f:74:f2:
                    3f:e3:e3:53:89:b5:6e:90:63:a2:6c:8d:43:c7:0e:
                    d9:1e:68:b3:2a:6d:44:25:75:34:40:55:a0:b3:ca:
                    72:29:55:3f:09:c1:03:f7:81:d5:04:0e:fa:7d:ee:
                    f4:47:46:6c:33:d4:79:fd:d5:bd:76:a8:4c:f4:8d:
                    49:c4:d6:94:e2:7e:f9:8e:6d:fc:63:bb:a3:22:07:
                    53:95:3e:c7:13:fd:38:c5:b5:35:77:91:c4:c8:52:
                    87:42:91:8c:e3:e6:36:32:97:2f:60:ab:72:59:5e:
                    f7:8e:80:df:4d:17:34:14:fe:46:fa:3b:8a:8a:91:
                    0c:f0:c4:4b:bc:d8:2a:9f:1d:88:7c:25:9b:c6:56:
                    9e:a5:c4:92:48:a9:f5:5f:18:da:dd:9b:90:bd:ab:
                    53:ab:35:19:15:a4:b6:e2:6a:4d:93:e2:c3:16:cb:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:45:25:B2:3B:3B:97:0B:60:D7:58:28:85:C5:73:71:EB:B0:74:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cea6a4db-b45f-38c8-ba93-dab3703d562c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8a:3f:8d:39:96:c3:47:bc:d7:4e:c2:48:c8:9a:04:62:23:
         ec:6e:8f:4e:fd:89:b6:d9:91:97:12:ef:ce:aa:10:1d:09:3b:
         97:d9:07:ab:f4:f8:d9:6e:27:1f:a3:f1:0f:20:1f:85:99:18:
         a2:5b:7b:0c:0f:87:7d:3c:36:18:54:31:f2:0d:6c:56:35:54:
         fc:42:29:71:62:b0:c4:24:94:60:2b:cc:b6:15:a9:c6:f1:12:
         59:26:ed:d1:ec:b2:29:a4:8c:c1:31:c0:26:77:40:75:bb:5f:
         0e:22:16:ae:54:b4:18:bc:6b:94:8d:1c:9c:04:bc:6b:55:53:
         c5:90:78:b4:f5:ee:33:37:c1:c4:7c:25:24:88:af:d8:01:fc:
         fe:7d:13:d8:2a:8a:bd:d3:01:85:1d:f3:3f:6d:8f:92:33:4f:
         81:de:83:52:de:b9:2f:f8:e3:34:20:3f:69:39:94:c9:1e:cc:
         e2:4e:86:99:73:be:d9:a3:fc:d8:90:7d:f6:74:f4:1d:a3:89:
         c0:55:3b:a2:67:c1:17:a7:59:f2:cc:c3:45:0b:3f:30:2a:2c:
         44:22:c1:d2:6a:b1:51:14:0a:e5:cf:f9:41:02:5a:ba:d3:d5:
         b8:7a:a4:b9:1d:c4:6d:99:0f:d1:9a:04:12:54:99:47:fc:5a:
         31:05:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:17:08 2025 by rpki-client