Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/99aa30be-1015-39e9-a576-943498872db0.roa
File:                     99aa30be-1015-39e9-a576-943498872db0.roa (raw, json)
Hash identifier:          ftnxWKUSQ0/sTKzuN21EbU0/uajoOY4H9CIrfOivkLE=
Subject key identifier:   0B:9C:36:F2:3F:BD:CB:42:FC:4B:88:8F:AF:90:20:75:A5:04:0B:4E
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584AF2567D17AC04E0C42EC42F00
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/99aa30be-1015-39e9-a576-943498872db0.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        192.80.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:7d:17:ac:04:e0:c4:2e:c4:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=4dba1815-c3be-4d37-8fe8-90c0c1e3de80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:99:db:6c:22:5c:91:7e:76:94:dc:d7:9c:9d:
                    c5:9a:70:a4:54:61:2c:0a:1f:4d:a9:00:3b:ad:4a:
                    9f:36:33:c7:a9:1f:e9:91:82:b9:87:a3:b5:1d:4b:
                    86:65:68:cf:52:e5:21:04:9f:33:43:69:93:13:49:
                    ef:a5:30:2e:a0:e8:64:ff:95:10:20:c7:ce:34:b2:
                    13:9f:33:c5:4c:3e:1f:49:83:e3:5d:01:72:d4:bf:
                    46:cf:10:53:64:23:a4:c7:ce:0e:47:59:0c:46:09:
                    2d:df:fa:79:3f:c6:cb:bb:b5:8a:ae:d0:43:c8:be:
                    8a:c4:ed:37:03:6d:9a:8f:4c:1b:bc:7b:98:82:85:
                    db:8d:c4:ee:7f:e2:52:68:57:e0:f5:fb:1f:bc:b1:
                    a7:6e:8c:7e:af:23:8f:ee:90:43:0c:52:64:77:00:
                    b0:81:6b:97:32:a0:eb:e6:be:dc:5d:a4:eb:6f:14:
                    18:d0:e8:7f:13:cd:9e:49:8e:0a:90:55:00:f1:ab:
                    20:d1:06:1e:40:81:0e:07:2c:bd:27:6f:46:03:42:
                    34:83:fa:9a:59:e6:a0:a7:9e:df:fb:0b:b2:bd:2b:
                    52:79:f4:33:0a:75:8b:9f:b9:81:93:85:32:15:95:
                    4d:29:44:ba:a0:fe:a8:33:8c:2d:d9:ce:fd:b4:93:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9C:36:F2:3F:BD:CB:42:FC:4B:88:8F:AF:90:20:75:A5:04:0B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/99aa30be-1015-39e9-a576-943498872db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:57:25:31:aa:ad:eb:34:a9:81:5c:65:0b:ab:a2:ef:ed:5f:
         f9:9c:bc:73:57:58:a5:8a:a7:f5:b1:69:32:15:5d:06:6e:6a:
         eb:be:d8:78:2f:3a:95:7f:11:b0:0f:b4:f0:85:fc:88:21:37:
         f9:ab:f1:d7:60:88:06:b9:5c:0b:0c:5d:dd:2f:12:06:8a:de:
         18:f4:86:4e:5a:76:e1:d2:fd:63:c1:9b:75:b0:a5:4b:09:91:
         f4:0c:03:2a:25:20:a5:05:d9:ca:47:c8:02:86:ac:9d:50:f2:
         5e:49:4b:ca:05:85:c6:49:d5:ba:a6:df:da:ad:40:f1:60:12:
         ac:27:4a:35:80:44:53:f1:98:44:5c:db:6d:b7:d5:3f:43:3e:
         81:bc:96:bb:46:b0:cd:e2:2a:85:ae:71:0b:30:6d:b0:75:ac:
         36:38:62:7a:3f:38:9e:2a:90:e5:04:97:c6:f0:a3:57:2a:19:
         9d:69:8e:32:fa:ea:82:e7:aa:d9:21:2e:24:27:c8:9f:60:8f:
         ef:88:45:60:90:29:09:48:a1:cf:dd:40:6d:4a:e8:4a:aa:f1:
         1e:20:79:7d:fa:5c:9c:4d:b1:d4:5b:dd:46:84:1f:b2:78:c1:
         a5:d6:68:de:14:98:24:5b:88:34:04:d0:8e:31:24:9f:d6:ec:
         c7:47:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:22 2025 by rpki-client