Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/0c95b651-9cb3-3c73-a032-6c62fec99333.roa
File:                     0c95b651-9cb3-3c73-a032-6c62fec99333.roa (raw, json)
Hash identifier:          dlMYocGGVXngpHBTp0cBh0xwgt4M7YqI91pxNKpIt9Q=
Subject key identifier:   09:BD:6E:9F:C4:EE:73:9E:89:BE:B5:A8:F0:96:64:D3:B1:5B:16:90
Certificate issuer:       /CN=c682a716-bb81-4916-beba-279628f77a85
Certificate serial:       010D0C9F43285849BDDA25A3C321F9555D90B378
Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/0c95b651-9cb3-3c73-a032-6c62fec99333.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     23319
IP address blocks:        192.122.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:25:a3:c3:21:f9:55:5d:90:b3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c682a716-bb81-4916-beba-279628f77a85
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=87b2a962-8c74-4a62-a71d-0bbf24698387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:48:a5:3f:ec:7c:b8:0e:bc:83:25:c9:4c:
                    75:24:a0:b2:20:11:f5:57:b4:36:cd:f7:ab:56:89:
                    c4:c5:1f:35:7f:18:52:34:f6:c6:4b:2f:72:4a:83:
                    70:c9:3c:69:d7:f1:f6:fe:4b:a2:52:37:b1:7f:0f:
                    4d:ba:42:cc:6f:62:e1:2f:4a:94:38:4e:26:56:87:
                    3c:24:59:b4:81:d0:af:6e:4c:b9:29:aa:6f:cf:e2:
                    4b:0a:e7:cb:aa:6f:9b:b3:4e:1c:a0:de:51:16:3c:
                    33:48:ca:16:0a:81:c0:c0:e6:29:3e:f7:97:30:fc:
                    a6:8a:57:ec:84:d4:e2:7c:28:3f:20:33:2a:ac:59:
                    d3:83:a8:da:45:8a:cd:7b:46:a3:43:93:db:f5:69:
                    01:3a:c7:29:71:b4:5e:a8:17:59:ae:71:88:74:e5:
                    d3:48:a3:ee:6b:1c:47:8c:87:60:8b:d8:d7:5d:fc:
                    3e:01:cc:93:45:5f:41:da:11:bd:aa:e7:b2:7d:4c:
                    c1:11:ce:77:75:3c:d6:93:ef:6a:54:2d:31:3a:b1:
                    be:6d:96:49:7d:7d:f9:6e:21:4c:91:82:ad:d7:d7:
                    90:b0:e0:8c:86:c8:5f:92:95:fe:3a:9c:0b:32:e7:
                    0d:6f:fc:7a:0f:55:c7:87:18:93:81:2b:32:23:5a:
                    17:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BD:6E:9F:C4:EE:73:9E:89:BE:B5:A8:F0:96:64:D3:B1:5B:16:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/0c95b651-9cb3-3c73-a032-6c62fec99333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl

            X509v3 Authority Key Identifier:
                keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:44:f6:95:5d:ae:5c:49:da:36:ba:5d:20:9c:f8:96:88:
         02:57:1e:c7:4b:5d:d0:95:39:3a:0c:7d:25:cc:26:8d:88:d2:
         81:26:82:42:79:ef:5a:7a:1b:be:ed:bd:46:79:0c:60:68:e2:
         65:94:5e:b3:f7:a3:b3:9a:73:17:1a:b8:6b:e5:bd:bf:45:0b:
         45:ba:bc:49:4d:ec:66:51:c4:68:8e:ee:4e:6d:b6:d8:1b:50:
         c5:ea:da:ed:bb:d7:90:36:87:1c:ba:3d:db:b9:38:4d:c5:7f:
         1a:71:cc:8b:b9:97:02:ac:b7:de:9c:98:f7:b7:24:4e:17:b5:
         91:79:31:9b:93:eb:fd:71:d5:4c:e0:42:0a:9f:cc:78:e0:6d:
         d4:2e:a1:a3:c2:7b:84:4f:f3:f2:7d:ef:be:0c:a4:e4:fe:a1:
         4a:86:f4:84:8a:ef:be:77:19:49:cd:8f:62:ca:c9:87:a4:38:
         42:5b:d6:cd:e4:1f:4f:f7:5b:df:be:6c:27:ca:4b:cf:36:70:
         56:e4:a4:08:d1:09:fc:d7:be:c9:16:d0:94:5b:8b:6a:0f:0b:
         c5:b9:5e:6c:aa:db:d4:d6:57:15:16:d7:a6:20:21:f3:4a:de:
         27:df:56:d3:e0:22:19:6d:27:b2:ff:30:f4:a5:f6:b9:36:11:
         69:f8:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:38:29 2025 by rpki-client