Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/4c7da4e2-ae8c-31a0-ba36-256c55b478db.roa
File:                     4c7da4e2-ae8c-31a0-ba36-256c55b478db.roa (raw, json)
Hash identifier:          jiNEhcKNRlE8CPpxblOiBIn3maYLCzeX7JmxvlGdkj8=
Subject key identifier:   3E:09:40:C6:C6:BE:10:75:2B:E4:E6:51:31:A3:E3:8D:51:81:40:98
Certificate issuer:       /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
Certificate serial:       010D0C9F43285849E4EFB4BB6B87CA3B1E60EB30
Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/4c7da4e2-ae8c-31a0-ba36-256c55b478db.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     393780
IP address blocks:        192.198.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b4:bb:6b:87:ca:3b:1e:60:eb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=bd5a752a-b4db-494b-a002-bf2f1548df5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:ab:1d:de:72:a0:f1:93:5a:a3:99:12:48:
                    b0:0f:21:43:3e:f5:07:73:59:9b:ec:23:72:37:50:
                    6e:fa:ec:69:f9:96:80:cf:e2:88:c5:86:26:8a:e2:
                    2d:ed:fb:3d:e3:5d:d9:1d:3d:a3:1a:6b:36:4e:09:
                    90:0b:20:ee:3a:2c:0d:4c:41:8a:7a:83:71:a3:f9:
                    4d:76:aa:8a:a8:2f:1a:a9:24:1c:e0:66:81:9d:61:
                    01:4d:19:ee:e1:0d:41:44:2b:c9:29:90:6f:44:62:
                    9b:ee:52:7e:5f:8e:95:21:f7:56:c4:08:d4:25:bf:
                    3b:f2:a5:3b:79:29:cc:11:a0:ce:5b:9b:43:c4:1b:
                    9f:b5:3f:41:76:20:08:d4:4e:0b:bc:cb:5a:6c:f3:
                    2a:98:f3:47:58:91:e6:c2:02:19:79:66:36:3f:cc:
                    66:6b:9f:c6:39:83:76:fa:18:eb:22:4a:7e:4a:a8:
                    91:34:04:ee:4a:95:76:fa:a6:ef:89:80:28:6a:c3:
                    c0:8a:54:61:34:1c:c5:ab:11:5d:10:ee:5d:fd:28:
                    52:9f:5a:d0:8e:3c:9e:68:99:2c:c2:b0:23:9a:45:
                    39:c5:9f:dc:a8:f0:52:a2:03:d0:7c:ad:92:40:5b:
                    95:21:e8:98:b0:b4:48:dd:07:05:c7:5b:e9:e6:88:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:09:40:C6:C6:BE:10:75:2B:E4:E6:51:31:A3:E3:8D:51:81:40:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/4c7da4e2-ae8c-31a0-ba36-256c55b478db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl

            X509v3 Authority Key Identifier:
                keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.198.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:53:e3:41:ff:ff:18:f1:f4:ba:de:78:79:93:36:08:8d:b2:
         cc:d1:5b:c7:ff:2b:75:b8:6e:9d:ea:3c:74:c2:ef:bf:63:5e:
         b9:af:c9:f5:92:d9:d9:5c:c1:e8:50:3b:b0:53:6d:d2:08:64:
         a8:4c:a5:ba:98:6f:4d:df:7a:b4:3f:87:f6:62:3c:de:1a:ff:
         6f:4c:e9:47:b8:80:f4:89:45:66:04:9a:e3:2c:32:7d:96:8d:
         af:f5:b3:24:3f:f4:6f:01:22:d7:9b:85:2a:2d:71:f7:4f:52:
         ba:04:6d:b8:2d:18:a8:34:cb:02:38:55:8c:fb:02:e0:46:c1:
         da:3f:ea:f3:b5:84:7c:8f:2a:0e:49:fb:0b:45:a4:9a:04:e1:
         b3:7c:7d:df:78:f1:7f:cc:51:87:a8:c8:29:e1:e5:5b:32:ae:
         79:d0:18:d6:0a:00:66:b3:49:c9:4d:3f:f0:fa:47:c9:e4:ce:
         b5:a6:84:d3:7c:82:8c:9c:c6:26:2e:8b:7c:a1:de:ca:e2:46:
         c5:f5:21:3a:d3:09:18:d7:a6:ec:43:3c:b5:5c:e0:9b:de:ff:
         4c:1f:e8:9b:f6:f1:0f:1b:38:49:79:7b:59:ec:0f:ec:1c:df:
         ce:2c:8b:94:bb:73:1f:a9:d4:22:04:24:27:7c:8b:70:92:f0:
         ca:58:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:27:45 2025 by rpki-client