Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa
File:                     a6d9c75c-5577-314d-80e9-b351715ba777.roa (raw, json)
Hash identifier:          mGDGw6CLXbKLDRATJlgquvTmb2EHqDy8HmCSUKmP2XA=
Subject key identifier:   00:7C:A5:D4:7A:C0:5C:68:1F:09:FE:75:CA:26:D1:20:1D:30:16:FD
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584ACE0B98FEE8BA104A635B55C0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     13926
IP address blocks:        192.200.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:98:fe:e8:ba:10:4a:63:5b:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=82c6c919-1dd2-4777-832e-5456baf7b056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:34:db:2d:ba:f9:af:29:6d:ce:82:a4:96:
                    9d:ec:3a:f0:18:90:08:75:cb:57:ab:26:86:9e:4e:
                    29:b9:1c:64:ef:fc:71:8a:ac:9f:db:f1:14:bb:3c:
                    f6:e5:e5:ba:e9:33:51:0e:ed:cc:3a:41:fd:87:45:
                    8e:5b:3b:30:fb:54:2d:ba:bb:cc:92:0c:bf:37:0f:
                    53:bb:a7:37:69:be:f6:8a:f7:56:06:ac:19:7a:3e:
                    fb:a3:7c:3e:a6:39:43:ff:47:95:b4:37:7b:12:98:
                    57:9d:0b:b1:e6:05:a3:72:0e:2d:5a:53:ff:ff:6c:
                    84:80:96:61:e7:a2:fb:dc:ff:3e:dd:da:90:71:f2:
                    c7:c3:57:fb:54:d1:00:02:d8:f2:51:25:fd:d2:3b:
                    85:56:98:8c:a6:98:12:e1:1b:d0:ff:a4:05:b3:dd:
                    16:be:ed:7d:59:5d:b4:68:66:cc:5e:e8:b4:23:84:
                    77:cd:ff:83:0f:62:3c:7f:04:ff:14:a7:2a:ba:7c:
                    0b:30:5d:fb:be:68:c8:80:43:b3:e9:ea:48:59:90:
                    59:27:b9:db:23:e4:87:06:c6:53:51:68:3b:b7:89:
                    10:9b:0a:6c:c8:2a:b2:17:c8:59:aa:bc:c6:78:f1:
                    2c:79:2a:e2:72:91:82:4a:96:3b:63:63:16:c5:dd:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7C:A5:D4:7A:C0:5C:68:1F:09:FE:75:CA:26:D1:20:1D:30:16:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:7f:2a:a9:a6:e7:f9:15:2e:3b:87:f0:af:92:e1:6a:5e:
         31:02:59:05:c0:ca:1d:43:54:5e:5e:44:82:01:91:6f:9f:4f:
         ce:d5:30:36:14:7c:86:31:dc:53:47:4d:eb:d3:ed:19:f1:85:
         5d:a7:9f:25:96:f6:d4:1c:6d:f5:7e:45:77:76:8a:cc:f5:bc:
         36:c9:41:99:74:0f:2a:8e:4b:c3:0d:7a:af:c5:ad:08:9a:11:
         a9:00:96:9f:8b:bf:48:a6:59:e5:a4:ba:48:01:58:38:0c:af:
         4e:8f:e5:4d:07:81:8d:ad:2b:fc:9f:be:27:40:47:b6:02:f9:
         4c:04:92:75:8a:3d:0c:b1:45:3f:53:08:7e:6e:50:7b:27:e2:
         e0:e5:b2:48:5d:7a:b8:85:4b:ee:8a:ae:4d:b5:09:00:83:3d:
         fc:86:37:78:c8:07:7f:6c:04:c3:38:50:36:02:bf:a2:18:7a:
         a3:1e:20:61:78:eb:da:e1:6a:1c:aa:ca:e5:57:c5:4c:51:94:
         d1:47:36:33:28:a3:4c:87:73:c6:56:34:0b:bb:2d:45:49:5e:
         27:d7:0f:47:9e:4d:f6:4b:7d:0a:ac:68:34:5c:9e:ac:8b:2a:
         03:0a:e6:36:c1:2f:6f:4b:74:ff:db:13:72:d2:93:b0:8f:1c:
         05:00:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:01:04 2025 by rpki-client