Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa
File:                     2e0efa81-cacd-3e96-8012-69bb025d6e27.roa (raw, json)
Hash identifier:          EXJFlQzxAOGZ/WeU11EvbPn1gaPXoxkVaM+V5k3MZE8=
Subject key identifier:   81:D3:16:AC:FA:30:75:A8:AA:34:BB:94:1B:2E:E9:93:4D:24:48:9C
Certificate issuer:       /CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21
Certificate serial:       010D0C9F4328584AC016284C8235CE92777A4A00
Authority key identifier: 2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        192.245.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:28:4c:82:35:ce:92:77:7a:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=56c2f843-3d7b-476c-a1b8-add1c597f5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4c:bd:16:fa:c1:ac:55:0b:67:8c:a7:64:95:
                    62:4e:dc:60:b9:c1:52:7c:20:44:06:8e:46:47:6e:
                    71:67:37:3c:d3:8f:9b:bc:11:c7:e9:80:d7:52:5a:
                    b3:b5:e8:d1:3e:ae:8c:c7:7c:9c:a4:43:3d:fd:9a:
                    46:1f:df:29:38:2d:63:d1:4a:36:d5:63:1a:c3:49:
                    47:79:d1:63:5a:7d:ad:64:cd:c6:6b:56:32:75:58:
                    65:68:70:f7:ac:be:b5:5e:2f:1c:3b:10:66:23:52:
                    3b:42:f0:d9:9d:f6:3b:79:f3:e0:8f:b9:7b:55:d9:
                    58:b1:17:cc:8c:9d:c9:c0:f1:df:f5:27:a3:e6:cf:
                    09:5e:43:b8:78:56:87:96:63:81:5c:88:58:23:3d:
                    e5:cd:f1:5a:11:fe:1e:5c:6d:c3:8c:63:41:7a:fb:
                    6d:99:e7:38:db:07:33:fe:35:a9:7c:85:9f:2e:4e:
                    43:64:77:c5:44:79:b9:90:53:25:18:07:12:e7:f0:
                    b1:b1:db:5d:ef:52:ab:0d:ce:f6:e4:8c:fa:68:d5:
                    f1:05:98:98:7d:97:72:da:41:72:f6:f8:93:ae:a6:
                    38:ad:ef:62:53:c4:07:ed:6c:60:1d:df:44:96:0a:
                    1a:3a:e4:03:54:5b:ff:76:00:d2:e3:b3:ab:8f:85:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:16:AC:FA:30:75:A8:AA:34:BB:94:1B:2E:E9:93:4D:24:48:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl

            X509v3 Authority Key Identifier:
                keyid:2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:74:ae:6e:fc:69:52:6d:57:b8:f1:70:5f:b1:b3:53:8d:
         19:dc:aa:59:fc:61:b0:0e:72:48:35:59:07:18:96:a1:31:79:
         7d:c1:c2:5d:43:be:87:e6:41:ea:98:c4:fc:9a:c0:91:37:fc:
         c0:bb:77:1e:53:e2:28:38:00:07:d5:46:45:36:13:61:99:a6:
         c5:da:6a:2f:5f:1e:e9:9d:41:0e:19:a2:fc:1b:b7:26:fa:4f:
         0a:1f:0e:c1:3b:0f:6c:36:1a:f3:69:88:9b:15:5c:9f:3d:66:
         8f:06:18:ec:d0:bf:e0:fe:87:cc:db:01:a5:d2:27:58:d0:f5:
         72:fa:47:b7:bd:87:21:9c:89:67:0b:06:7f:e2:43:9e:34:96:
         0b:e3:a8:32:95:46:fa:ed:70:65:b8:9e:3a:2c:b7:25:1c:39:
         51:24:59:9a:9a:90:44:ed:81:ba:04:80:8f:51:3b:8e:9a:8e:
         0a:ec:23:b7:fa:c1:43:1b:76:af:73:f3:51:96:c9:a1:3b:8f:
         7d:92:61:2e:f9:14:15:f1:b5:65:b0:8c:36:49:49:ac:30:9a:
         05:94:21:36:c5:e2:3c:03:66:2e:1c:77:58:ed:91:f8:e2:9a:
         d8:8d:20:09:07:af:6c:75:83:ab:d4:61:45:a1:b4:f3:ed:b4:
         a9:e5:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:21 2025 by rpki-client