Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/03021107-373c-3ac5-abd4-2004e219e7c7.roa
File:                     03021107-373c-3ac5-abd4-2004e219e7c7.roa (raw, json)
Hash identifier:          gPvAxt2kIUPffe7RRwPzNlGyt80ga5+rWPBzMQHzwvk=
Subject key identifier:   45:68:57:E5:CD:10:3F:43:0F:6C:5D:9B:83:63:BE:63:FA:7D:31:C8
Certificate issuer:       /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial:       010D0C9F4328584A506AE7F36CB5C4DCB382FB80
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/03021107-373c-3ac5-abd4-2004e219e7c7.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        192.25.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:e7:f3:6c:b5:c4:dc:b3:82:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=886eac81-9651-4987-960f-00c003d67b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:58:c2:ac:e7:2d:63:3c:a4:fa:5b:bd:fd:
                    e1:fe:f1:4b:6f:3d:11:7c:c4:60:1c:00:5c:96:97:
                    96:f6:94:81:69:74:2c:a2:84:42:30:c9:36:fb:7a:
                    fc:68:14:86:19:ad:a9:54:a2:26:7f:21:47:99:d8:
                    c1:3b:75:fa:9c:e8:21:9d:70:58:1f:03:32:47:bd:
                    f3:25:74:7d:32:81:92:d3:ca:52:91:fa:b5:2c:9d:
                    b6:82:2b:d1:e0:39:b6:61:97:6b:13:8a:89:0c:34:
                    0d:73:21:9b:b5:18:d2:01:63:ff:99:17:0c:98:b0:
                    18:56:1f:33:1b:60:3b:56:74:03:27:d7:80:c2:35:
                    c2:05:6b:82:c5:6a:a0:51:69:49:cc:39:38:21:1b:
                    8e:dc:df:1b:33:9b:2f:ae:a3:7e:c7:07:12:2e:bc:
                    0a:3e:59:62:c9:4c:f0:12:de:f5:03:7f:00:4f:b3:
                    45:4c:4e:c0:fa:25:f1:82:6f:b1:59:63:b2:66:bc:
                    4b:11:eb:9c:a1:07:e7:5c:e3:2e:4f:89:e2:f1:fa:
                    25:6b:39:32:9e:65:1d:6d:f1:ae:3c:5e:8d:a1:ab:
                    0b:bd:bb:eb:61:33:76:1c:58:65:04:1c:08:89:d4:
                    62:c0:2a:e6:db:8f:5c:a7:c7:93:11:9c:66:2f:5e:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:68:57:E5:CD:10:3F:43:0F:6C:5D:9B:83:63:BE:63:FA:7D:31:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/03021107-373c-3ac5-abd4-2004e219e7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl

            X509v3 Authority Key Identifier:
                keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:6c:a0:cd:14:47:ed:20:be:7c:4b:41:38:dd:59:19:47:94:
         98:f0:6f:46:93:70:6c:53:2b:ef:cd:d2:21:24:68:e5:be:a2:
         ee:79:61:e5:6f:fc:5d:87:ca:45:73:f5:13:e7:e6:ba:13:e6:
         d8:72:cc:2b:8d:45:07:cb:5d:9c:ed:48:de:45:bf:c8:53:4f:
         04:e3:8d:69:15:a0:f2:3e:4f:6c:18:54:2b:79:78:cb:af:c3:
         1f:6d:aa:b8:70:52:84:0d:22:9e:a0:c0:0c:a4:24:c4:c4:e8:
         2e:5d:98:8a:25:28:1d:05:be:de:3a:73:57:58:7d:14:98:27:
         db:5e:c3:d4:73:cb:0c:0d:c6:53:42:a7:ef:11:fb:fd:3e:fb:
         e0:5d:79:4b:c1:9b:8f:16:fa:b4:9d:4b:b7:61:6d:1d:7a:6c:
         d0:8f:9d:49:44:40:33:06:ca:99:94:d3:91:43:03:97:d1:50:
         d9:79:e3:13:ec:8e:5c:2b:17:a9:c7:72:38:63:fe:9d:cb:0d:
         7f:71:87:9b:4d:bc:a5:2b:ba:28:43:80:5e:24:1f:e9:14:ec:
         c8:ea:3e:29:68:e5:fa:d7:65:c3:73:11:aa:a2:be:c2:d2:10:
         2a:e1:ed:39:0e:ad:1e:94:55:d7:40:bf:0e:07:b4:97:6b:08:
         1d:f6:cb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:35 2025 by rpki-client