Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa
File:                     72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa (raw, json)
Hash identifier:          No6vJB69LFphIKA+LDGDrndlpCD/ffgNXyom2CYcuXc=
Subject key identifier:   56:5E:01:38:7E:84:F0:4C:88:B4:C0:35:F7:2E:D2:59:ED:B4:65:78
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584AF521470E3EE2FFEDD897EE38
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     33392
IP address blocks:        192.149.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:47:0e:3e:e2:ff:ed:d8:97:ee:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=89e6a7dd-f234-4c41-a3e8-b99e8f9d7f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:72:04:96:1c:fe:a5:45:6c:21:16:98:bc:
                    d8:22:99:e4:2d:75:32:47:31:61:47:d7:21:ec:20:
                    09:59:ee:8c:9c:ff:1b:0d:70:8f:4d:a6:2c:bd:a1:
                    b1:60:f6:96:94:6b:aa:48:1e:97:c9:e2:10:ec:bb:
                    38:33:5f:20:36:6b:8e:92:8b:57:39:d7:b3:80:93:
                    09:44:7e:65:31:e9:1c:23:3b:ef:be:b6:d0:fb:74:
                    18:e4:d6:e3:f1:b2:8a:7d:a5:28:b4:32:ba:2e:a4:
                    9c:bb:72:f0:f0:67:f5:b6:24:55:01:48:93:43:78:
                    83:5b:a5:9d:8a:f2:b2:b5:aa:40:78:fe:ab:12:4c:
                    dd:8b:6e:60:94:69:86:47:f8:2e:bc:90:be:1e:b4:
                    38:79:79:59:63:7c:0c:f6:74:5c:5a:e4:8b:20:49:
                    1d:5a:e4:09:69:0d:73:b0:7c:e0:5d:d1:0c:e5:a7:
                    e4:f5:0f:a5:2c:1e:78:e8:0b:34:47:5e:b5:b1:a6:
                    01:70:ad:3c:d3:d6:88:65:c8:f5:46:ae:c3:13:5a:
                    ab:b5:46:64:25:85:05:4e:4b:6b:21:b4:62:24:6e:
                    86:bc:61:5b:c5:cd:56:fc:7f:03:51:52:d7:78:f3:
                    f7:8e:18:e4:c3:eb:8c:a2:16:32:fc:d4:93:aa:0b:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:01:38:7E:84:F0:4C:88:B4:C0:35:F7:2E:D2:59:ED:B4:65:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:47:5a:e1:f9:01:77:24:04:98:94:60:74:23:fa:45:b5:
         92:64:a4:62:76:93:7d:69:ab:9a:fa:88:5d:de:c5:f6:20:8a:
         33:bd:9b:70:3b:6e:8f:3d:ba:25:c9:ae:77:a7:01:fa:ca:c0:
         9f:3e:a0:3b:00:65:3f:4e:42:12:fd:99:93:40:b5:19:42:70:
         cf:c8:b8:c0:ca:3a:6d:f7:6a:fb:cf:4b:85:47:b4:28:d4:16:
         e1:59:f9:05:6b:0d:00:44:52:09:00:0c:cd:94:8c:5f:f3:88:
         e9:18:c9:28:50:34:56:d6:6e:11:36:21:f7:34:51:36:fa:8f:
         72:29:5a:19:cb:61:60:13:0a:c3:a4:61:22:88:cd:40:d8:c5:
         58:b4:ec:c6:1e:00:ac:a4:fd:77:ec:94:00:99:51:dc:34:71:
         05:6d:a0:7e:4e:15:d2:5a:94:86:f3:64:88:79:d4:63:ee:b1:
         ff:9f:88:e6:3f:c8:45:a0:87:dc:fc:87:6a:14:bb:63:f1:19:
         a1:e2:f9:91:ff:96:6d:7c:15:29:c9:6f:28:78:64:77:6f:6e:
         6c:1f:d8:79:a9:a5:fa:e1:50:9f:52:7f:bc:a1:62:cd:41:98:
         43:e8:9d:57:ab:d3:5c:39:57:c7:07:01:04:fe:91:d5:50:be:
         55:aa:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:52:49 2025 by rpki-client