Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/954fe63a-c657-317e-80cd-908ee147dd36.roa
File:                     954fe63a-c657-317e-80cd-908ee147dd36.roa (raw, json)
Hash identifier:          iai9j/iuTF2hWgF2JhD04R+vkjS/tYxLsWG3Ds6Wm28=
Subject key identifier:   CB:AD:84:88:8E:92:61:4A:15:3A:78:63:EC:30:7F:D1:0D:A0:47:64
Certificate issuer:       /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial:       010D0C9F4328584A5765D56AF299833A54D53D30
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/954fe63a-c657-317e-80cd-908ee147dd36.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     401085
IP address blocks:        192.112.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d5:6a:f2:99:83:3a:54:d5:3d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=1edbc0e7-42ad-43fb-95f0-bfe08f09fb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:08:bc:ca:72:92:99:a5:fa:4a:c5:df:a6:
                    a9:0b:c3:ea:b6:8e:3a:f7:10:22:52:69:b0:8a:9e:
                    47:8c:bb:a5:01:46:fe:6d:68:0c:14:36:34:4d:74:
                    90:1b:3b:bf:20:9e:e9:57:d3:b5:07:bb:48:a6:67:
                    6d:41:27:9e:56:49:13:5f:ab:46:f1:13:ac:e9:dc:
                    1e:a9:7a:39:36:af:f7:18:96:e4:94:7a:ef:4a:48:
                    b0:5f:57:0a:ae:cd:26:87:bf:3e:19:5e:0d:6d:61:
                    b0:77:72:27:f7:9d:d8:8c:da:77:7b:65:66:d1:42:
                    28:f2:48:a2:cc:08:12:f6:23:e4:43:e5:24:d1:59:
                    51:b6:03:e9:7d:65:60:c9:8a:67:6c:72:1a:88:6f:
                    f6:d4:ff:2a:61:6c:07:04:c4:e3:e6:e3:fe:36:6b:
                    7c:f6:7c:c8:22:40:45:ab:8d:e6:5e:79:5b:3c:41:
                    6d:2d:87:ed:82:b8:91:b7:71:db:8c:89:d4:29:5c:
                    f6:6e:23:27:6d:fa:da:44:b1:6e:81:eb:5d:7b:e5:
                    98:97:89:1b:61:d6:e1:18:fd:8b:d2:b7:b1:f3:12:
                    bb:0f:fb:8c:ca:48:b1:3a:b5:c6:99:da:12:8e:79:
                    ef:de:66:fd:e2:06:25:77:78:05:d8:72:5a:ab:4f:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AD:84:88:8E:92:61:4A:15:3A:78:63:EC:30:7F:D1:0D:A0:47:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/954fe63a-c657-317e-80cd-908ee147dd36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:18:25:e0:91:c1:50:54:b6:53:39:77:6d:95:d5:9f:4c:
         1e:ed:ac:5f:f9:51:4a:2e:19:b9:0a:31:cb:fb:89:c1:ec:d5:
         b6:9c:25:7e:a8:1d:1e:8c:24:ed:08:0a:97:fd:60:39:dd:d4:
         15:2b:f0:2b:9d:89:1d:5b:61:0c:87:dc:8b:b4:c9:24:8f:b5:
         d3:11:79:41:0a:2d:db:c2:33:cf:48:72:ce:30:6b:62:1f:1a:
         1f:8e:af:c1:b1:38:b2:a5:6e:28:57:45:e8:1c:b5:9b:f3:7a:
         dc:63:99:d4:20:b9:7f:5c:77:23:a9:c5:9a:a3:01:29:02:b1:
         4c:11:9b:ed:38:bc:90:cb:4a:34:c1:53:49:b3:db:c6:06:11:
         a5:d7:69:8f:b3:9a:7a:6b:39:55:91:2c:00:a2:07:f1:b9:43:
         27:14:8b:43:37:41:50:51:6a:7c:d1:45:bb:23:50:5b:e0:07:
         c4:e7:6d:68:b8:34:2a:a2:63:88:54:00:61:c9:9f:38:5c:a9:
         6d:84:e2:fb:3e:28:50:86:b1:64:22:99:8d:fc:f9:85:f1:ac:
         24:c1:8c:45:76:62:84:ba:33:62:16:48:65:18:81:86:60:c9:
         7a:e9:62:e4:3d:98:07:0b:3b:b3:ac:3d:03:a0:24:e5:dc:e2:
         ad:f8:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:41:48 2025 by rpki-client