Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/41bcc159-5d9c-3702-aee6-258369ec470c.roa
File:                     41bcc159-5d9c-3702-aee6-258369ec470c.roa (raw, json)
Hash identifier:          zvW0AB0EE1m4qmXDGSztRq1PIH/gFbFjhcct8ElwqWA=
Subject key identifier:   98:FC:EE:24:40:C7:5B:5C:C4:D8:83:2F:A1:06:1C:79:62:C0:72:82
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584AECC123FE918CAAFBDA3AC380
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/41bcc159-5d9c-3702-aee6-258369ec470c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        192.80.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:23:fe:91:8c:aa:fb:da:3a:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a57d64c3-bad0-4aa1-82ab-f9c0175182e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:1c:80:f1:eb:3a:8b:36:39:35:8f:ec:c7:
                    e4:d7:a4:34:f7:37:fc:65:37:79:df:1e:96:e8:37:
                    d0:1e:09:8c:f1:8a:6e:f8:59:bb:32:7d:0b:a1:b0:
                    be:ab:93:12:de:e1:1d:d9:5b:ad:0d:20:f5:dd:96:
                    da:24:77:7e:90:1e:39:3b:13:bc:94:ac:15:05:6c:
                    d7:4b:e6:c5:39:60:99:0e:5b:2d:c9:07:2c:bb:03:
                    5e:1a:2b:41:79:0d:48:e7:a9:a4:e3:39:ed:01:f1:
                    fa:8e:f4:f7:df:15:5b:b7:78:a6:5f:3d:30:05:98:
                    bf:2f:d0:59:cb:4b:d3:5a:76:2a:36:5b:8d:e6:d5:
                    13:d4:48:e3:7e:df:92:65:a6:7a:93:48:ef:4b:bc:
                    f6:b3:1a:6b:d0:1b:f5:24:c5:c7:5e:e8:81:32:81:
                    0e:b3:ba:26:b4:8a:ad:5e:4a:50:69:fc:ba:d3:69:
                    e5:6b:44:33:f6:d7:f2:39:7a:71:34:ef:8d:c0:7d:
                    7d:bc:46:69:b7:66:b9:53:db:e8:ef:dd:07:e4:4d:
                    27:53:1f:44:9f:cb:bc:cf:a3:65:9c:a7:60:5b:47:
                    63:54:55:ca:fa:a1:1d:4a:38:ef:a2:83:9d:70:86:
                    5b:3a:f8:56:58:1f:65:5c:4a:69:bf:cc:0f:17:1b:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FC:EE:24:40:C7:5B:5C:C4:D8:83:2F:A1:06:1C:79:62:C0:72:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/41bcc159-5d9c-3702-aee6-258369ec470c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:45:0f:73:6f:e6:2e:53:0f:b1:e2:6a:69:b7:27:03:e9:06:
         da:3b:48:45:94:f0:1c:4d:01:61:cf:15:3c:80:ee:04:41:d5:
         8f:41:e3:e9:6c:64:de:e3:86:49:a7:86:2d:a7:d6:41:8d:23:
         77:00:db:a2:8d:55:44:a5:11:12:bd:e9:6b:33:85:33:8c:85:
         ca:81:79:4d:e3:5c:12:7d:d2:f0:26:1e:92:2d:61:f6:81:21:
         57:34:f5:d2:43:7e:45:c7:0e:f9:7a:e1:75:e2:84:3c:2a:c6:
         2e:c2:b4:4d:23:db:66:f5:4a:b5:f5:0e:e7:3e:38:07:62:bb:
         fa:5c:70:64:5f:38:cb:af:7a:c5:80:29:2b:f2:94:5a:30:29:
         d7:17:ed:d0:5b:e9:cb:00:1d:c3:26:35:d7:f8:ce:90:64:a0:
         4e:8a:8a:e0:c0:00:10:34:46:f5:20:26:f6:09:11:ef:40:63:
         22:f6:ff:fa:ad:35:49:6a:12:f2:fb:48:b9:f4:18:6e:0b:1b:
         90:dd:25:7b:da:b4:df:59:af:de:de:5a:5a:d7:03:92:14:30:
         ae:13:81:9b:32:22:06:33:a9:9a:0e:90:6b:69:0c:fe:13:e0:
         62:a4:cf:78:67:16:89:36:ba:36:2e:b3:62:e0:d5:6e:72:19:
         a4:52:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:12:07 2025 by rpki-client