Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa
File:                     50e13e91-c133-394c-976b-9cabe9d2d09f.roa (raw, json)
Hash identifier:          mVen4YZdTrBowv40SDNKPDINQ31lqY4egu2fcnmTpOk=
Subject key identifier:   2F:DA:67:8E:40:0B:50:64:22:0B:BE:0E:E8:FE:82:A4:8A:73:40:0A
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584B4E77118753100990687FB600
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     45
IP address blocks:        192.188.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:11:87:53:10:09:90:68:7f:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=08606e34-b44d-4759-b90a-eec364440bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:88:36:06:fc:67:01:5a:6a:5e:d4:f8:f8:
                    d3:2f:45:ac:7d:dd:ff:9b:db:e4:62:74:ad:ad:c9:
                    84:35:f4:8e:1a:71:2c:5b:b8:31:53:85:6a:b0:0b:
                    80:1f:9a:da:dc:fe:88:9b:95:a9:c1:35:11:10:fb:
                    70:8d:96:72:e2:b7:57:2e:39:ea:60:3f:ee:2a:f4:
                    f4:75:09:21:4f:f6:25:70:ca:0d:b4:5a:2f:32:52:
                    83:6e:5e:90:b9:71:da:e7:c3:95:5a:32:cf:bb:90:
                    23:10:49:f0:4b:af:1c:58:03:73:76:99:b6:6f:60:
                    b1:f2:a9:57:e2:fb:58:3a:09:8e:57:15:5e:51:52:
                    9b:60:c8:ab:a7:9d:d6:93:6f:c8:14:82:85:f6:88:
                    f0:2d:16:a7:55:87:8a:74:11:68:01:ad:34:5e:6e:
                    1d:7e:46:7b:15:ea:12:44:94:ca:e3:f9:f3:e5:2e:
                    ac:a2:d4:57:4e:4c:c3:74:92:d1:3f:a0:1b:24:cd:
                    71:c4:ac:c1:0a:6c:6d:ab:14:a6:93:db:85:76:24:
                    a0:65:da:4d:57:7f:4e:ac:5c:df:16:db:02:e9:e1:
                    99:77:71:5d:94:6d:7b:8c:db:cd:31:89:27:40:9a:
                    22:d4:3d:7b:92:c6:7c:7e:76:a8:e9:72:f0:9b:f8:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:67:8E:40:0B:50:64:22:0B:BE:0E:E8:FE:82:A4:8A:73:40:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:19:07:1b:61:d8:bd:b5:af:6b:44:c4:aa:2a:65:9e:10:3a:
         b3:65:52:90:30:f3:b6:63:9d:5f:af:0a:39:3e:27:f3:d5:7e:
         38:2e:fd:f8:37:aa:6f:50:23:90:28:32:e1:a8:83:bf:94:41:
         61:fd:8e:9f:97:1d:dc:2f:92:66:53:24:11:0b:b4:e1:2e:30:
         e2:41:88:20:53:ea:5a:f7:20:d6:08:03:9e:be:46:f5:7f:d8:
         78:e0:62:fd:98:4b:78:34:d9:14:4c:aa:bb:fc:56:bb:87:a0:
         5e:84:c1:4c:46:87:3d:60:cd:56:85:40:e4:20:77:94:d7:bf:
         ec:ba:94:73:88:b6:05:af:68:2c:28:1d:7e:cc:14:bd:73:19:
         82:fe:9c:db:d2:90:88:ef:ec:a0:0d:d5:2e:07:5c:b5:eb:b0:
         ab:b7:0c:b2:c3:5e:53:6f:2e:2b:cd:94:5f:b8:28:d0:61:2e:
         e6:d3:c6:80:c4:98:9c:0f:a0:41:26:37:4d:b6:67:ac:9e:ce:
         74:35:af:fd:e8:35:4f:cd:db:fc:14:fd:5a:f2:bd:42:bc:9e:
         c4:ec:cb:ef:3e:ce:d0:c0:2d:3d:76:c0:42:50:be:b1:ba:11:
         47:f5:2f:81:23:d3:b8:d1:58:d1:1d:03:07:c9:f0:6b:93:d4:
         11:d3:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:13 2025 by rpki-client