Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/3002c08f-8974-3f48-b96c-2c15198fbcb4.roa
File:                     3002c08f-8974-3f48-b96c-2c15198fbcb4.roa (raw, json)
Hash identifier:          IaDpBnW3f7AaQi2browlvrMXvHMleam4HTiTbQsNA24=
Subject key identifier:   89:8B:8D:B4:92:4B:D1:31:AD:98:96:07:B5:A4:75:3E:6D:7F:BC:1F
Certificate issuer:       /CN=13168988-4625-42dc-9138-e5632130d1ba
Certificate serial:       010D0C9F4328584AA85BBACAB607FD0EC014C4C8
Authority key identifier: BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/3002c08f-8974-3f48-b96c-2c15198fbcb4.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        192.197.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ba:ca:b6:07:fd:0e:c0:14:c4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13168988-4625-42dc-9138-e5632130d1ba
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=e38c8d08-429c-42ad-92ae-7cd62adeec9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:cc:1e:bc:46:16:56:7b:f8:40:28:67:c5:
                    e6:58:2c:d0:88:87:3c:b0:df:00:dc:48:52:9d:3e:
                    d7:d0:e8:e5:a2:4e:64:82:be:2d:9f:8c:7c:65:46:
                    a2:1f:4f:de:83:95:45:78:6d:bd:40:5a:5d:49:f0:
                    ff:99:48:42:03:41:6b:7a:ca:71:be:f8:ed:bb:67:
                    e8:5f:f3:59:9e:4c:2a:8a:e4:a1:a4:b0:73:f4:cb:
                    6c:57:48:39:25:ff:f9:c8:2d:e1:cc:b8:bf:9a:dd:
                    a2:b3:53:d3:f4:04:49:cd:0f:20:39:b5:e5:9d:36:
                    ac:4d:eb:99:c6:e4:94:36:9f:ea:80:78:a1:e8:4b:
                    d1:16:77:f8:45:a6:87:11:74:dd:96:b7:be:a2:00:
                    8f:e5:ae:20:0f:3b:3d:94:c7:68:0b:08:17:79:d7:
                    08:ca:b4:cb:cf:e8:12:e3:fe:c2:82:66:d5:68:bc:
                    9e:0e:56:35:a3:4f:95:6b:55:86:97:71:58:ec:3c:
                    54:7a:88:92:b5:71:73:88:06:ec:f4:db:ba:b7:23:
                    bc:5b:a1:94:5d:02:b9:83:7f:b4:8d:20:1d:10:b9:
                    dd:09:5c:34:be:f2:10:53:39:c5:5b:b4:e3:39:a3:
                    0b:42:68:be:e5:53:04:22:5b:66:84:bb:d7:0b:1c:
                    ce:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8B:8D:B4:92:4B:D1:31:AD:98:96:07:B5:A4:75:3E:6D:7F:BC:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/3002c08f-8974-3f48-b96c-2c15198fbcb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f8:d3:93:1e:e9:65:c4:7b:8a:aa:f5:c9:ca:9e:a2:5b:00:
         26:2c:ca:2f:09:b7:bb:93:a4:5b:be:02:b5:e8:a2:af:e4:93:
         b1:62:c6:32:3c:76:a9:e0:a9:c5:38:8a:f3:d2:1e:f9:84:3b:
         b4:26:3e:91:8f:90:d6:b5:6a:81:fe:12:c7:f5:b2:b6:b6:da:
         ce:55:c5:b4:6a:a8:82:ee:35:cd:15:f9:76:33:28:ef:8f:2f:
         33:1b:4b:44:be:f3:24:f7:bf:84:5d:7d:46:58:b8:8c:b6:72:
         96:05:da:c5:a0:a0:15:2c:c7:ae:2c:3f:87:d4:02:86:2a:f1:
         13:a4:5f:df:e4:85:73:e5:c1:46:24:c6:65:4a:3e:76:d4:f5:
         7c:08:8c:83:ce:b1:00:7a:ec:40:c1:25:84:3e:5b:d3:6d:9b:
         40:98:d5:db:65:dd:8a:0d:79:8a:93:b6:d2:d3:2a:fb:d7:97:
         01:93:40:fe:18:93:2b:a5:0d:40:c3:ab:db:8b:ad:cd:14:77:
         29:11:4e:b3:63:03:67:cf:52:ab:e7:4a:e2:cb:98:7e:80:95:
         b7:bc:5c:1f:9d:49:52:b6:a3:e7:22:f8:67:bb:27:81:6b:47:
         70:c5:28:b8:64:3c:0d:b4:4a:0e:28:c1:e6:c3:c6:fd:fa:8e:
         fb:1d:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:53:52 2025 by rpki-client