Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/79a5b31d-7a9b-3393-a35b-90e9d3701174.roa
File:                     79a5b31d-7a9b-3393-a35b-90e9d3701174.roa (raw, json)
Hash identifier:          x2ICOSrSMtJqdAgu85sAwNpER2mEnSBxIx8MC78m4u4=
Subject key identifier:   2B:15:17:07:DE:08:AC:E8:DF:E1:B5:BE:6B:7E:1D:AB:42:22:AC:9A
Certificate issuer:       /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
Certificate serial:       010D0C9F43285849EA85179005D1182C04D9A770
Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/79a5b31d-7a9b-3393-a35b-90e9d3701174.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     7212
IP address blocks:        192.111.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:17:90:05:d1:18:2c:04:d9:a7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=b46d6259-313e-4842-9c5d-b24944bf2c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:e4:2e:07:bf:99:7c:bb:2f:cc:1e:f4:10:
                    c6:66:9f:db:c5:7d:29:e8:a5:d0:68:b1:05:48:cd:
                    0f:5a:d5:0d:3f:17:5b:d2:7b:77:6d:82:49:f1:1b:
                    0b:8f:1b:ae:d7:d2:1b:aa:65:29:bf:cd:ad:76:02:
                    7b:ad:87:11:1a:e9:5c:5c:5d:39:3c:6e:d3:9d:b3:
                    dd:1e:8a:55:d6:a4:08:42:de:7c:19:52:b0:f5:4e:
                    10:0c:87:a8:e4:2a:93:4a:6e:41:6c:72:b6:30:dc:
                    3d:fe:df:4e:e1:0d:fc:88:b1:76:06:35:60:d4:fa:
                    08:84:8a:af:f0:b3:85:8a:bb:fe:d5:cf:b1:dc:f1:
                    b5:9b:60:d8:ce:92:3b:80:4a:79:d9:49:1c:a5:85:
                    ee:06:17:50:da:33:1c:af:8e:51:d9:fe:f2:53:66:
                    98:1a:c8:11:7a:f8:11:5a:c4:61:f1:6d:89:cd:5b:
                    1a:74:d0:18:f0:fe:d2:c7:0c:ef:e0:9c:91:d4:42:
                    2f:cc:2b:18:27:17:55:80:2c:5d:13:eb:33:86:51:
                    56:94:d5:4b:ff:06:30:a1:59:14:52:16:04:c5:25:
                    d1:49:66:80:17:7b:9d:59:bf:43:c3:f2:d3:c5:6f:
                    b6:24:3c:29:7e:c6:d6:89:63:71:57:b2:0e:8d:7d:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:15:17:07:DE:08:AC:E8:DF:E1:B5:BE:6B:7E:1D:AB:42:22:AC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/79a5b31d-7a9b-3393-a35b-90e9d3701174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:42:de:f5:57:e1:8e:10:eb:5a:c1:f5:3c:8f:56:2b:d6:05:
         71:11:e8:8c:a9:60:3f:88:0a:52:d4:03:80:ab:2f:5c:38:7e:
         e5:e4:dd:f7:ba:ba:41:0f:f4:2c:0a:34:19:75:5c:80:66:fc:
         f8:93:3b:e3:5f:c3:94:f3:59:61:62:ea:e4:5f:5a:4b:ed:8b:
         7f:1b:51:f4:01:b4:9a:a2:c5:a9:78:ce:21:41:c7:3f:91:c5:
         4a:0e:b5:04:20:2e:10:51:f3:88:9e:c1:7d:55:94:9d:16:da:
         2b:ce:a8:90:4e:fe:c3:e7:d7:09:25:3e:ac:81:5d:5a:76:dc:
         56:49:01:2c:7c:ee:56:f8:de:96:5e:c7:a5:62:f9:95:2f:21:
         0b:dc:79:80:84:71:64:27:54:30:cc:a4:ab:2e:b1:f7:08:6e:
         b3:ff:e2:72:82:95:8f:f7:f3:e0:24:83:79:22:a7:b7:e6:b4:
         c5:8d:07:11:83:3a:ee:7a:bd:48:e4:88:ce:c0:4e:a8:1e:63:
         74:c1:15:a2:91:d0:7d:dc:34:ba:3a:c3:8e:db:fd:a4:0c:d0:
         84:73:31:36:99:43:a4:5e:16:17:f5:d3:11:c7:3f:67:7f:e6:
         00:bc:cc:f9:a6:77:3f:68:2b:c9:99:ba:c0:9a:da:5d:9d:ae:
         2e:88:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:27:23 2025 by rpki-client