Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa
File:                     7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa (raw, json)
Hash identifier:          gDtg6UAhbSeA36AxWoHWICxhxAYtExpOMA8fCeT7SEs=
Subject key identifier:   61:93:AB:B2:53:16:03:67:2D:8E:AF:AE:DC:A8:63:88:EB:F5:1E:37
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584AC9DBA0CFBD10F2BC343BF0E0
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     7018
IP address blocks:        141.195.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a0:cf:bd:10:f2:bc:34:3b:f0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=5c003e06-97ca-4114-b08f-67b4fc0a916b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:01:ec:73:6d:d6:d2:db:bf:4e:03:3c:34:
                    24:f6:95:b0:94:15:85:8e:10:1c:6c:17:ac:6a:65:
                    47:4d:13:65:07:0d:e5:3a:47:08:57:73:eb:71:67:
                    31:0f:a3:30:7d:85:ee:f8:d3:55:7a:f6:d4:42:84:
                    1c:00:bb:9f:04:5c:74:13:d1:85:d2:7a:b4:10:e6:
                    cf:02:c4:53:0d:17:9b:38:74:a6:cd:36:d6:36:8c:
                    6b:09:61:d3:31:59:67:73:60:0f:aa:e7:dc:a4:58:
                    37:40:22:fe:55:2c:7b:53:a5:e0:cc:93:d0:43:c1:
                    a6:a5:9a:22:31:29:7f:3d:13:1c:f5:c0:9f:33:99:
                    fa:47:aa:89:27:f3:c4:c5:c1:dd:8a:ea:78:90:24:
                    b5:1c:2a:28:25:34:c9:1d:4f:0e:0c:d5:7e:ea:ef:
                    fc:48:57:61:a6:88:6a:4e:d0:87:ec:12:8c:c3:0e:
                    19:fc:e1:6d:9b:fe:b8:d7:87:f5:ac:cc:6c:08:56:
                    12:b2:04:16:b2:f4:56:a4:84:2d:59:b7:60:bf:aa:
                    e6:d1:53:1f:c4:0d:cc:da:bf:db:ad:47:ed:08:57:
                    7f:04:24:46:50:86:8f:6a:9c:58:53:04:9c:d4:fd:
                    d4:79:e4:c6:83:7b:d8:d6:cc:55:86:a6:f0:c3:8e:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:93:AB:B2:53:16:03:67:2D:8E:AF:AE:DC:A8:63:88:EB:F5:1E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:3b:38:07:29:6e:a9:0b:7a:bc:37:85:09:f0:06:9e:67:
         9a:bb:67:89:74:66:58:a1:6f:c9:21:91:4e:99:8b:0f:5e:b5:
         bf:50:65:54:61:5c:dd:43:f7:01:bb:ef:16:81:b8:9a:de:cc:
         bd:6b:3b:60:53:ff:e4:99:5b:8f:4c:93:eb:96:3b:06:0f:22:
         f7:4a:31:e0:c2:b4:38:36:5f:ec:d8:04:47:52:c5:b0:f5:64:
         76:00:38:b1:28:f8:ba:90:bb:f3:d3:d8:b4:05:b0:3a:61:7b:
         56:f9:ac:e4:d0:3e:b5:8e:9f:3e:2c:bb:7f:24:1b:c9:8c:5a:
         5e:c8:0a:2d:cc:b1:c4:7b:38:bd:17:0b:8a:7c:fa:e6:26:fa:
         54:d9:95:53:83:17:ed:d3:fb:5a:f6:68:fe:0e:6a:3f:a4:a2:
         e5:ce:24:f2:f6:dd:7a:d3:6d:c7:ad:c8:39:5e:d3:4f:25:72:
         af:89:2e:87:1f:d6:98:6b:d4:d0:d1:9b:96:ec:ad:4c:1d:32:
         ad:9c:9c:2b:36:f8:36:27:76:be:2f:13:7c:b0:8a:e9:49:cc:
         9a:ba:6c:41:b1:82:e5:cc:04:13:3b:7b:90:50:79:4c:f5:63:
         4a:ff:b7:34:b2:b5:62:b6:94:d8:4e:6e:ae:46:00:99:32:e3:
         fc:c6:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:12 2025 by rpki-client