Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
File:                     e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa (raw, json)
Hash identifier:          T6oSTKDjzdvrXXYOj4BzF7O0plO+2+ec+vLbu2s8KrI=
Subject key identifier:   33:64:26:09:5B:20:EE:C2:9F:20:EE:7B:F4:41:86:C7:E8:59:73:4D
Certificate issuer:       /CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
Certificate serial:       010D0C9F4328584AEE2694E9B2A89ACDC3DABD00
Authority key identifier: 66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     399293
IP address blocks:        192.140.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:94:e9:b2:a8:9a:cd:c3:da:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=21574410-34b7-4c0b-80ad-3e98ede78a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:65:8d:9c:91:ae:d9:0b:b0:45:05:ab:dc:
                    50:b6:3a:40:85:80:35:b9:7f:08:db:98:f8:b3:18:
                    34:d7:fb:1a:a5:69:28:0c:ab:47:3d:17:b6:0c:b5:
                    f4:a0:4c:d8:e9:b4:cd:81:e0:39:af:a2:c0:2d:38:
                    f5:d1:04:be:38:d7:5d:50:97:33:9c:4a:3c:43:96:
                    e0:a5:45:7c:17:c1:c2:7b:32:bc:15:54:e4:c8:84:
                    59:1f:18:a4:db:29:02:b4:a6:0a:72:b3:af:24:aa:
                    8c:5b:de:eb:4c:d2:80:a6:ca:69:d7:07:3f:6c:44:
                    e2:7c:de:0a:8e:80:29:4a:8e:67:b5:16:7f:fb:2c:
                    dc:6c:c5:c5:07:19:29:0d:9b:51:41:34:f7:8b:c4:
                    c9:96:a7:06:9d:f5:5d:6b:fe:33:66:9e:4e:5f:c6:
                    e4:76:f0:44:3a:27:03:01:ff:51:9b:ca:88:58:bb:
                    a5:8a:33:ef:6b:3b:d5:7c:a7:06:7a:2b:88:4e:6a:
                    56:59:6a:f7:51:9b:f7:cd:c1:63:e3:01:21:a4:f5:
                    54:05:41:ef:2d:63:b7:26:07:49:46:71:fb:dd:0a:
                    35:9f:06:03:d9:72:72:d0:fb:0b:c2:a6:bc:b8:0c:
                    d8:d5:9f:9b:91:5b:6f:dd:56:29:c1:be:01:0c:eb:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:64:26:09:5B:20:EE:C2:9F:20:EE:7B:F4:41:86:C7:E8:59:73:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl

            X509v3 Authority Key Identifier:
                keyid:66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:31:7a:43:ea:37:e4:88:79:cd:42:8b:f1:37:83:e4:4c:5b:
         02:1d:f9:80:54:d4:dc:1a:ea:17:2f:e2:43:c7:af:1a:99:9d:
         ed:71:15:ab:78:34:e4:1d:c6:66:b9:24:58:b0:24:62:4d:2c:
         52:02:6a:bd:73:9e:1c:0d:49:05:ca:98:ed:62:e3:a9:73:55:
         7c:93:54:8f:ac:ec:81:b9:f0:61:6a:b0:e0:3a:39:3b:42:35:
         50:f1:c0:ab:9b:8a:d6:a3:6b:b8:8c:59:95:94:64:14:71:2b:
         8a:ed:cf:90:c4:bf:af:3b:ca:22:66:ba:f1:53:cb:b3:5d:66:
         1e:18:ef:21:0f:82:9c:e1:5d:e4:f9:5a:32:a2:a5:fa:e7:f2:
         e8:f4:15:75:98:a7:a6:13:03:71:b1:80:d9:55:03:37:c2:d2:
         b2:f8:37:3c:81:63:71:2b:5f:0e:e6:53:80:78:ab:66:e1:06:
         1e:47:86:d9:2b:87:7d:c3:e5:29:5a:b1:40:4c:26:bd:66:8a:
         0c:16:e8:d6:f7:dd:45:02:20:95:f5:63:39:d1:48:83:47:92:
         e8:a7:b8:b9:ed:ce:05:54:4f:3e:8b:31:bd:f6:22:c2:28:10:
         e2:46:fd:7a:53:4b:6c:0b:78:c8:b7:80:98:c5:44:90:27:e8:
         22:18:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:53:58 2025 by rpki-client