Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/7e44f813-7c1a-3f40-b129-8978271804ed.roa
File:                     7e44f813-7c1a-3f40-b129-8978271804ed.roa (raw, json)
Hash identifier:          LhBD7lUvn5tIMO8IPX7wVDl9pvwz79hTZjdSvQ9uSrg=
Subject key identifier:   C6:CF:56:1F:5A:AF:85:1F:55:66:BD:E9:9E:14:67:84:3E:9C:48:FE
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584B4E771714B681026EE1772D00
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/7e44f813-7c1a-3f40-b129-8978271804ed.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     3425
IP address blocks:        192.74.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:17:14:b6:81:02:6e:e1:77:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=3ef7b12d-88bd-4fba-8fc1-04abe276e402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:06:a5:21:dd:1f:03:e5:b0:5f:15:a6:7c:
                    b4:11:ce:28:13:27:9b:78:00:75:57:55:38:dd:f7:
                    ca:64:b1:9a:e8:27:74:72:e4:1f:b8:40:92:08:45:
                    84:59:36:d2:88:89:8a:73:eb:be:da:bf:0f:0f:07:
                    da:84:d7:fe:c6:54:11:da:43:7f:9c:5e:96:bb:f6:
                    dd:db:da:b2:0d:a5:04:72:10:f9:90:99:f1:d7:a5:
                    b2:99:19:7d:06:c7:93:e5:a3:3f:95:d1:10:e6:d1:
                    47:21:c7:06:71:80:dc:b4:2d:33:22:33:82:32:e5:
                    82:15:d8:03:9e:b1:08:99:72:44:7e:24:3f:a4:18:
                    1d:96:f0:55:19:c4:c7:f9:9e:71:3a:bb:90:3f:29:
                    a1:cc:38:fe:d2:32:86:ea:cd:b8:f5:20:3f:36:bb:
                    19:99:de:e7:b8:54:0d:bb:ea:05:5e:c3:50:84:7f:
                    14:21:a9:66:91:69:7a:38:a1:a9:ab:64:fe:5f:fb:
                    a4:5d:04:d6:42:97:39:f0:d6:c9:a2:e3:a6:fd:c3:
                    09:38:21:f4:1c:99:d8:cf:f0:ed:06:55:7c:e0:51:
                    75:61:db:bc:d2:5d:74:88:1c:90:7b:a0:2f:17:03:
                    8d:53:d8:82:0f:8a:96:84:c6:7c:28:66:d5:96:cb:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CF:56:1F:5A:AF:85:1F:55:66:BD:E9:9E:14:67:84:3E:9C:48:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/7e44f813-7c1a-3f40-b129-8978271804ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1c:1b:e3:33:1a:82:c9:fe:8d:60:f5:88:02:0c:c3:09:2e:
         2d:b2:8f:2e:42:81:8c:bf:e3:d3:18:92:e1:79:82:a0:c1:a9:
         52:87:02:1f:83:99:13:d3:d1:d5:d0:2c:27:e5:23:9f:d7:a5:
         ab:8b:c5:9b:69:0d:97:ff:a0:e1:2f:e7:23:d6:93:3a:f1:a9:
         48:fe:ec:d6:04:8f:cc:39:18:19:e0:6b:14:ba:8d:54:9b:50:
         85:00:b3:a1:0a:83:bf:cb:ae:cb:eb:a5:d1:fa:ee:a1:9c:a7:
         aa:44:ed:ce:fa:05:26:78:7b:38:61:18:6a:5a:cd:b3:c7:2e:
         b8:28:2b:9f:98:44:66:ad:04:4a:82:90:7d:d3:0f:c7:33:49:
         f8:2f:66:f4:62:77:6a:2c:1a:22:8d:df:e5:c6:89:42:f3:4e:
         82:e9:b4:68:8c:54:a3:9d:7e:91:90:55:f0:49:b5:52:0f:57:
         54:79:3c:42:8a:9a:45:76:a2:67:b5:30:b6:f4:ee:40:37:0c:
         31:85:c8:f3:de:3b:11:59:99:01:67:37:ae:a5:d8:2b:de:c9:
         57:a1:e5:f2:77:b2:65:93:7f:24:ed:c6:8e:af:d8:96:0a:a8:
         26:e8:89:33:7b:08:a1:6f:ae:97:c9:b5:c0:a8:16:c0:27:62:
         a7:93:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:34 2025 by rpki-client