Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/7d714b33-43eb-3d28-8efd-dc702c9fd38c.roa
File:                     7d714b33-43eb-3d28-8efd-dc702c9fd38c.roa (raw, json)
Hash identifier:          zO53lXdTpPR4MwebK3b8LYk1VBwNdGzhgBzod94D43Y=
Subject key identifier:   49:03:7C:70:B7:9B:1F:FA:31:4D:74:9A:18:C8:0E:64:E6:7E:58:D8
Certificate issuer:       /CN=adbe8e45-914d-402e-9a09-f3730289dda0
Certificate serial:       010D0C9F4328584AF25686C47FA0BF16A463FFC0
Authority key identifier: CC:BB:1E:4C:CA:95:0F:22:F5:AD:48:65:19:62:5A:AE:D1:88:1E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/7d714b33-43eb-3d28-8efd-dc702c9fd38c.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     25728
IP address blocks:        192.139.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/adbe8e45-914d-402e-9a09-f3730289dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/adbe8e45-914d-402e-9a09-f3730289dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:86:c4:7f:a0:bf:16:a4:63:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbe8e45-914d-402e-9a09-f3730289dda0
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=6ef15284-b19d-46a9-85ef-e30ff3595d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:a8:ce:b1:9f:0b:93:49:59:8c:61:4c:e8:
                    d0:43:65:c0:6f:ad:00:86:a7:77:e3:09:91:61:08:
                    3a:63:85:ab:bc:ae:01:3b:e3:0c:e8:86:8a:e7:ae:
                    f5:28:ee:77:6c:58:e8:89:d9:53:32:41:8a:bb:20:
                    19:f7:da:60:de:39:29:ff:51:a0:73:92:fd:75:03:
                    05:14:27:2a:e0:9e:8a:42:ce:d0:97:68:b7:3a:33:
                    fb:c4:d2:ad:35:9c:bd:a0:21:4b:c5:c1:46:aa:fc:
                    c7:bb:e0:cb:fc:ac:73:df:d4:2b:d9:14:d5:ff:33:
                    a3:b9:ba:32:dd:3b:ee:c5:6d:88:50:4b:bb:28:e9:
                    35:b1:9b:64:c4:4a:32:d1:7a:ef:b9:ec:f5:8a:1e:
                    f7:11:9b:8c:c5:8c:46:b6:a8:45:e2:1c:d9:ce:a4:
                    f1:31:fa:8f:c6:6b:f1:a4:2a:1b:da:ed:3d:e1:80:
                    f0:42:5e:e4:db:fa:51:4d:b5:d4:4e:8b:1c:6e:d0:
                    34:38:57:5d:05:6c:60:4d:65:fd:ca:ba:42:3f:e8:
                    f4:a7:63:6c:ea:1c:54:8d:b8:aa:0e:b7:5d:d1:2d:
                    b4:ac:ef:62:3c:32:43:64:c9:3c:b8:77:fa:4c:b8:
                    91:93:ef:19:cb:5e:c0:14:f3:bc:d4:d7:e5:1b:7d:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:03:7C:70:B7:9B:1F:FA:31:4D:74:9A:18:C8:0E:64:E6:7E:58:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/7d714b33-43eb-3d28-8efd-dc702c9fd38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/adbe8e45-914d-402e-9a09-f3730289dda0.crl

            X509v3 Authority Key Identifier:
                keyid:CC:BB:1E:4C:CA:95:0F:22:F5:AD:48:65:19:62:5A:AE:D1:88:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:db:dc:53:8f:4b:cc:d7:38:c6:da:b8:d9:f3:09:3e:66:e7:
         34:15:b4:05:06:30:bf:1c:5a:7f:c1:6e:25:49:5e:bb:18:2f:
         82:b0:35:40:de:82:b8:22:7a:60:c7:cb:c7:bc:6f:10:92:81:
         73:8d:c1:ab:3d:f8:81:87:de:4c:35:63:16:be:d9:36:cd:0d:
         22:28:8b:00:7d:70:a3:04:21:70:7a:e9:b2:5b:99:6a:de:f9:
         2e:0a:d9:b4:52:c4:3b:dd:96:d3:48:c2:58:be:eb:94:7d:14:
         e0:a3:62:b4:ed:1b:9d:c2:b4:af:6e:ef:14:00:4b:3b:f1:27:
         6f:5a:e5:46:fa:3a:e4:bd:68:be:bf:70:9c:71:d6:73:21:ce:
         5a:91:1b:9e:98:e1:22:5c:6b:e9:79:6d:7f:38:e1:53:e7:5e:
         20:99:28:14:b3:2d:79:a5:7c:55:a1:13:f1:ed:8c:a5:9e:c4:
         70:b6:6d:f7:00:b7:76:d3:cd:e4:e9:bc:f1:61:fb:f2:d4:8c:
         c4:48:71:ff:53:96:f9:08:18:d7:31:70:db:75:26:c4:29:02:
         75:bf:93:90:d5:c0:67:7a:8f:be:60:1a:d5:63:7b:0b:7b:6e:
         03:35:0f:d6:bc:11:a8:81:01:a1:89:54:9a:ed:01:e6:e3:4d:
         cc:11:f0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:47:13 2025 by rpki-client