Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/f8e3688f-19aa-3a70-9245-20c1cd43b2d0.roa
File:                     f8e3688f-19aa-3a70-9245-20c1cd43b2d0.roa (raw, json)
Hash identifier:          p7to+z3PKqFyFGAcsRkZznqpttEEmkcQeWdZ99XGwQs=
Subject key identifier:   77:1F:E7:01:B8:7F:58:2F:85:C3:61:35:42:91:13:7B:D9:CA:04:14
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584AF0F143F491F9EDED0C79BE80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/f8e3688f-19aa-3a70-9245-20c1cd43b2d0.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     13213
IP address blocks:        199.195.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:43:f4:91:f9:ed:ed:0c:79:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=619a247c-7899-4a63-8281-9264e84b2aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7f:56:18:88:d9:87:bc:e1:e5:a8:13:43:f0:
                    34:54:06:aa:6c:03:e2:a3:34:4f:f6:46:e2:c7:5d:
                    79:59:6f:5d:e1:47:ce:51:8a:37:75:c2:f6:83:25:
                    9d:a1:81:43:8d:90:93:72:c2:a0:64:00:5c:7e:e2:
                    0f:c4:db:03:89:d0:c1:25:0c:3d:45:a7:3b:a7:bf:
                    06:42:72:18:3a:f4:5d:34:df:33:39:ba:d0:b8:87:
                    e0:48:83:cd:e7:e2:76:f9:ea:47:ba:5b:01:63:63:
                    8b:14:7f:e2:ac:85:aa:7c:75:87:18:58:2b:ad:be:
                    9c:11:fc:33:51:bf:42:c6:8a:38:45:7e:7a:5c:8f:
                    d4:9a:06:01:37:1c:4e:ad:32:61:93:a3:ab:3e:fe:
                    2f:2c:0c:6f:bb:42:e0:eb:b4:3a:17:65:25:96:96:
                    c0:50:30:f6:33:9d:01:a2:2a:9c:d9:5c:df:82:6f:
                    c4:89:eb:e4:2e:6d:81:1f:f3:4e:cf:d5:2e:ef:a9:
                    1f:08:86:dc:cb:40:85:46:99:92:da:06:8e:76:0b:
                    a8:4a:e4:a6:f6:4e:f5:ff:11:60:36:66:1c:5b:ad:
                    e1:5d:12:a8:23:35:30:fc:47:f8:e8:40:83:78:9f:
                    97:25:09:65:2a:01:76:ec:a0:3c:2c:54:72:cd:8a:
                    c0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1F:E7:01:B8:7F:58:2F:85:C3:61:35:42:91:13:7B:D9:CA:04:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/f8e3688f-19aa-3a70-9245-20c1cd43b2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:09:f5:eb:0b:9e:33:01:50:41:07:88:51:0c:69:ec:e8:2b:
         ae:b7:c1:07:98:8c:68:bf:3e:4b:b0:10:fb:ee:4b:73:0f:d9:
         ab:5e:8d:ff:b3:e4:4c:f9:84:98:56:8e:9c:1c:95:07:b8:c9:
         fc:20:76:59:7b:bd:8d:dc:1f:6b:29:e1:28:25:bb:38:18:08:
         af:2a:f5:67:ab:4b:44:dc:7e:94:8d:d8:0e:8b:9e:a0:62:b3:
         db:3e:d5:26:86:d6:32:88:ff:43:f7:2c:4d:07:1a:c6:5f:65:
         9a:1b:7c:b6:3a:f6:59:7f:51:e9:53:92:94:9b:3b:23:62:15:
         a6:f3:f9:13:4a:95:1b:3f:8d:33:1c:d5:7c:05:54:5e:20:15:
         fb:a0:69:f8:17:b1:5a:03:ee:b7:ee:74:af:8e:1e:b8:69:9a:
         86:0a:1d:ef:2b:37:02:55:14:3a:88:bd:d3:79:8a:b3:f1:69:
         42:da:a5:46:01:a4:6e:c2:e8:6e:1f:e7:ae:96:63:34:30:db:
         7b:27:45:52:17:cb:84:49:4f:ec:09:32:29:53:87:27:16:c2:
         88:4a:b1:17:a7:ee:19:12:c6:7e:6f:7d:b8:06:3e:f0:43:b0:
         7b:cf:e0:07:9d:69:0e:63:5b:fc:3c:57:39:27:32:c7:dc:84:
         4c:3d:6d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:08:46 2025 by rpki-client