Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
File:                     848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa (raw, json)
Hash identifier:          E6Yc5UBmJetzqfAJR06dM5xLQ4x+YOZh/tnLLmEplek=
Subject key identifier:   40:9D:A5:F2:BB:B8:FC:2B:85:17:21:E3:9D:3B:A0:5A:DA:5F:13:83
Certificate issuer:       /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Certificate serial:       010D0C9F4328584A295568DF1DCBF324FA3A6140
Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     398774
IP address blocks:        209.250.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:68:df:1d:cb:f3:24:fa:3a:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=34335017-53a8-4a69-bf47-d820efe9e2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:18:56:f7:43:17:89:3f:3c:e5:c1:7c:95:
                    78:57:84:01:27:86:2e:5a:83:44:25:9e:75:94:d2:
                    5a:26:86:4e:73:9b:b0:f0:83:aa:da:63:8d:02:91:
                    47:d8:6d:da:4f:70:7b:af:90:48:36:47:bb:21:76:
                    e8:60:5e:17:05:6b:f5:1a:59:7e:dc:e0:e6:d3:bc:
                    5f:76:9f:03:5d:94:1d:f0:93:5b:d5:20:c4:b8:5a:
                    cd:28:f3:9e:10:ae:11:0b:05:92:56:f2:99:e5:eb:
                    3a:33:60:11:1e:bb:2c:6a:4f:32:9a:60:c7:8c:71:
                    68:4c:29:02:8f:32:de:9a:06:e0:a8:39:5d:d3:be:
                    60:e0:82:d2:f8:4a:ed:70:17:24:fe:98:63:94:2d:
                    d2:3f:85:51:b2:e2:ef:f4:59:e3:34:63:b4:10:59:
                    a3:92:79:a0:9e:2f:56:b8:36:5a:b9:98:7f:e3:56:
                    a6:ec:6b:1c:79:f0:3b:20:96:7a:97:a8:44:be:c9:
                    22:d6:30:e4:b1:56:f2:6c:91:88:13:5c:15:74:a2:
                    d3:42:84:83:b3:63:52:55:02:3b:35:79:51:5c:8f:
                    f1:f6:9d:b0:90:de:9d:43:4d:56:93:02:b5:52:80:
                    f8:3f:9a:2b:26:7d:1a:4a:68:a8:f3:e1:80:24:ef:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9D:A5:F2:BB:B8:FC:2B:85:17:21:E3:9D:3B:A0:5A:DA:5F:13:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl

            X509v3 Authority Key Identifier:
                keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:33:9e:c8:72:af:71:d0:46:c8:e7:12:9d:e6:fe:4d:df:65:
         56:61:43:4d:d2:e6:1a:01:45:ee:9e:16:b9:1e:d5:cd:be:b2:
         e6:5a:b8:5c:5b:29:2c:d7:d2:ef:ae:6f:d4:b4:24:29:89:b3:
         95:cd:7f:e3:9a:4b:53:34:c7:f0:c3:d5:37:e5:72:d0:9b:f4:
         dc:5f:2f:4a:ac:00:e3:88:f0:cf:bc:9a:ce:31:b7:36:05:f6:
         3c:47:91:56:32:1c:e4:e5:5c:dd:35:cc:6e:a8:15:b9:9f:c9:
         80:2b:c0:83:0b:e4:d6:b2:dd:65:63:cf:23:19:bb:ee:b1:e0:
         d8:82:b3:c5:8a:59:47:38:3b:cb:a5:53:3d:bf:88:40:04:95:
         e0:f6:5b:ba:ec:b9:1e:47:0c:ca:44:6e:52:18:6c:6b:b8:c1:
         9d:c7:8f:76:a4:00:fa:ab:79:64:42:07:ae:b7:89:58:c6:c4:
         fa:d5:3b:7c:6f:46:a5:71:09:b1:ef:3a:d0:c6:38:52:8c:89:
         80:fd:74:c4:7d:0f:c8:a2:10:7f:1b:82:37:51:70:c9:06:2a:
         9c:35:9b:91:a7:5d:81:12:be:f1:2b:ad:1c:c8:26:a8:d4:80:
         77:a3:83:31:d4:85:b1:53:45:44:2f:0b:46:c0:9b:6e:d8:4e:
         80:7d:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:06:50 2025 by rpki-client