Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/07962f62-e59f-341a-94eb-8b3971452edb.roa
File:                     07962f62-e59f-341a-94eb-8b3971452edb.roa (raw, json)
Hash identifier:          73mxpGXko6sTlC352PHgO/o4kSvnrDqWPTbK5gcKop0=
Subject key identifier:   69:1F:CB:F6:74:A2:01:E5:67:32:8E:E5:5D:FD:2E:21:A2:D8:8B:6C
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584AD23BAFCBCAF44129E487A180
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/07962f62-e59f-341a-94eb-8b3971452edb.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     13926
IP address blocks:        192.200.152.0/24 maxlen: 24
                          192.200.153.0/24 maxlen: 24
                          192.200.154.0/24 maxlen: 24
                          192.200.155.0/24 maxlen: 24
                          192.200.156.0/24 maxlen: 24
                          192.200.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:af:cb:ca:f4:41:29:e4:87:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=238850a9-45fb-4d7e-9770-a416f723ec37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:df:52:75:9b:08:8d:e2:a7:aa:3b:2b:96:
                    4f:8d:5a:1a:90:f9:5d:7e:b3:ce:5f:f5:f7:c4:25:
                    87:b8:a7:47:0d:06:df:4b:fa:12:c9:0f:a6:71:12:
                    a6:dd:a4:fc:5c:92:73:d2:04:0a:b0:9a:b5:92:09:
                    19:36:94:ac:1c:c0:e6:76:e4:53:24:88:d3:70:6c:
                    05:ce:32:0f:f2:51:f5:c7:e0:f8:3f:97:50:0b:3f:
                    57:5c:97:47:7b:e6:71:cb:2a:75:c8:85:c5:2f:21:
                    61:2b:f0:81:f5:31:2e:c8:29:44:15:32:03:45:9f:
                    0a:ef:1a:c3:b2:0d:aa:4c:f1:c9:eb:ea:07:a7:6b:
                    40:97:3a:dc:da:fa:e1:8d:46:36:71:7c:b0:1c:2c:
                    9f:85:bf:bf:43:f9:13:55:83:18:b2:3d:b8:5e:1c:
                    4e:22:18:52:f9:26:d9:35:ba:81:4e:63:d0:7d:3b:
                    b4:61:d2:6b:b2:c0:bc:2f:39:11:4b:76:ba:fe:d4:
                    c3:43:56:cf:21:77:11:f4:a2:18:00:ef:93:5f:b3:
                    b1:7a:c4:0c:92:25:62:00:c7:5c:99:0e:b2:8d:ab:
                    e1:53:60:e6:19:55:1d:1e:1c:f4:60:40:97:52:6c:
                    98:b1:23:90:e7:f5:d7:b4:35:af:69:a5:06:0d:56:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1F:CB:F6:74:A2:01:E5:67:32:8E:E5:5D:FD:2E:21:A2:D8:8B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/07962f62-e59f-341a-94eb-8b3971452edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.152.0-192.200.157.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:d1:f7:2b:96:e6:13:d4:42:0d:3f:f3:b2:1f:50:9f:44:
         f3:84:36:12:a7:c6:4a:f5:e5:f9:97:4f:96:f2:d9:5f:d0:97:
         84:03:48:ef:8c:11:d5:b9:d7:70:d5:67:e4:36:51:a9:b5:fa:
         9a:f9:a2:f5:0a:f4:e8:62:31:ee:18:89:6b:19:b8:6f:64:63:
         ce:9f:73:86:24:0c:eb:01:18:5e:12:00:fd:3c:0e:d2:d0:b5:
         8f:b8:ba:1d:46:19:e6:c6:7d:c5:90:67:bd:55:87:70:a9:56:
         25:3f:c0:d0:40:27:ae:b6:ab:09:51:6e:32:5f:68:80:1a:a0:
         d5:84:4c:7f:74:c4:69:51:14:66:77:e8:ce:21:ef:f6:dd:a9:
         cf:23:d5:1f:8e:9b:cb:45:e7:54:e2:67:74:f8:b8:0f:c2:d8:
         d9:84:42:ad:c1:32:c7:d6:6c:e3:f5:fb:88:42:1a:86:7f:4f:
         fe:a2:84:59:3c:6b:96:30:b9:17:71:47:ef:07:5f:fc:dc:53:
         29:aa:d3:94:92:50:d9:e0:fe:87:37:3f:63:bf:4c:f0:9c:64:
         c4:84:13:60:fc:55:79:91:e1:44:84:ce:e6:d6:f8:f7:53:94:
         86:91:90:9e:3b:5a:ea:1f:fa:35:4d:a7:1e:15:9c:19:e2:73:
         02:fe:34:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:03:12 2025 by rpki-client