Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa
File:                     a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa (raw, json)
Hash identifier:          LzhG0QTsBYl7e6ZqCFlmmtyuhBGtUBbn+0XZPb+Zkrc=
Subject key identifier:   56:18:A0:F6:6E:E1:2D:F0:6A:50:2E:D2:7E:8F:70:65:79:C1:3E:54
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A374AD5D6ECCE3B768CAD5D40
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     203963
IP address blocks:        192.190.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d5:d6:ec:ce:3b:76:8c:ad:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=881b3417-c5bc-4434-84f9-53323c82cc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:a3:04:d4:3b:98:20:cd:6e:bd:56:b0:8d:
                    5a:63:14:40:0c:47:30:ec:5c:8f:bd:b7:8f:4e:d0:
                    b0:d7:c0:ea:58:90:fe:eb:d3:c0:f2:6d:45:e8:c6:
                    af:97:63:b2:e1:e2:97:68:44:d8:ac:e3:af:a2:33:
                    52:73:82:b7:2c:44:a1:ed:6b:fb:e6:8f:81:b3:41:
                    c1:e1:ef:d2:50:c4:9a:8e:72:08:45:61:e1:1a:57:
                    97:72:21:b7:98:38:3d:d3:70:b4:ec:78:9a:b5:2d:
                    74:04:10:5d:46:2a:03:7d:36:ce:ea:f0:33:a9:99:
                    e8:93:5c:4d:fb:a6:2b:d2:40:4f:9f:87:4b:dc:1e:
                    ca:ed:9f:89:2c:63:29:db:d3:64:ea:32:0b:7d:1f:
                    37:25:f6:7e:bb:80:c3:b3:9b:03:41:ea:22:70:07:
                    7d:d0:d4:21:aa:3e:f8:c6:43:80:57:8c:fb:ae:d6:
                    25:de:e1:c6:90:6b:55:bb:ab:3c:91:03:fc:8b:6b:
                    d7:c6:dd:8c:c7:eb:52:85:93:73:e6:a3:31:77:57:
                    a0:3d:a0:65:25:95:0e:6d:2b:5d:f3:71:37:ef:4b:
                    a5:0b:af:bd:60:7a:0a:cc:49:c9:38:04:f2:3a:62:
                    c1:eb:ac:f2:5b:d2:6a:53:7e:09:8d:d2:47:e2:9e:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:18:A0:F6:6E:E1:2D:F0:6A:50:2E:D2:7E:8F:70:65:79:C1:3E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:00:3b:cc:b2:0e:b4:83:63:9c:82:4e:be:9d:96:ec:ef:c3:
         d6:76:45:3e:ea:27:47:46:6d:19:0b:a2:4f:7f:da:de:46:55:
         e2:d2:c0:ba:b5:f2:c9:63:88:8b:9b:94:f5:7f:54:bf:eb:21:
         39:0a:ed:16:11:02:a4:48:ce:0e:2b:c3:04:49:fd:5d:67:d5:
         8f:3c:a7:4d:1a:cd:09:41:79:5e:8a:9d:91:21:23:59:a5:87:
         5e:92:6d:3f:5d:9a:4c:df:7c:87:61:4a:86:1a:2c:ea:b6:39:
         94:57:61:94:6a:ae:0f:94:c5:15:ea:65:d3:57:b6:46:fa:66:
         aa:f8:87:47:ab:0a:fd:04:1f:cd:c3:ee:9b:ba:62:6d:b1:bc:
         2a:49:b1:50:ce:c7:f1:0c:c2:df:c7:f9:fb:2e:9d:20:42:c8:
         35:77:a1:d9:3e:53:71:35:9d:50:43:32:bd:4e:d8:f6:69:d3:
         d3:e3:25:58:0a:b7:d2:52:cc:c8:72:52:1c:0d:0d:d3:db:99:
         0e:00:cb:e7:9b:a7:49:e3:e9:e1:ad:4c:ac:ca:db:ba:18:7f:
         59:ea:39:37:a7:36:b0:9c:dd:ec:07:f9:03:51:ae:a1:c3:43:
         fb:d8:1b:6e:d5:2d:a4:ef:a6:b0:99:1d:1a:50:b6:29:b1:a5:
         9e:1b:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:11:43 2025 by rpki-client