Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc23b692-8c87-3b0f-b88c-0a00acec07b5.roa
File:                     dc23b692-8c87-3b0f-b88c-0a00acec07b5.roa (raw, json)
Hash identifier:          T/lbw74ZgP8Qq69Jz4qzAfSIZ0y29qacqsgmmz9HxAI=
Subject key identifier:   26:0A:1D:1A:2C:51:13:44:94:55:29:53:1B:BB:2E:43:D1:CE:C8:10
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A3B7B2F0C1A34A4E0875C4100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc23b692-8c87-3b0f-b88c-0a00acec07b5.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     397236
IP address blocks:        192.100.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:2f:0c:1a:34:a4:e0:87:5c:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=64d3bb1b-8da1-4d1d-86ab-ef5b3f01a7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:45:8f:aa:cb:c6:a8:c2:53:67:49:dd:90:
                    59:90:9d:d5:37:22:1a:46:2f:05:c6:bb:25:1e:7a:
                    6d:11:13:85:1b:64:e2:ff:75:42:b4:ea:78:54:6a:
                    82:2a:65:2c:4e:ca:37:f8:e9:04:b4:95:96:98:9c:
                    77:d5:c5:72:48:c6:44:fb:67:b6:4e:b5:63:f4:77:
                    4c:34:b8:15:21:88:2f:51:f9:f5:1d:98:a7:a8:16:
                    db:96:ff:b9:67:a0:d5:4f:89:2b:9e:63:5f:8d:b5:
                    35:ea:b9:bb:fb:e6:27:95:a6:17:33:2a:aa:2f:94:
                    68:65:3b:1f:c0:82:4f:8b:9e:ed:a1:46:16:cc:cb:
                    e1:c4:8a:e7:df:6c:91:3b:87:31:c0:1e:1a:13:23:
                    66:21:0b:a6:b6:5f:9f:63:26:56:4b:f9:a4:2b:12:
                    47:db:f4:b0:a7:60:eb:2c:79:ce:14:7d:b3:36:cb:
                    1c:c4:e4:ff:cd:0b:7a:db:c1:8d:dd:1d:d2:b4:aa:
                    2d:a5:85:58:ff:68:92:7e:ac:41:6e:1c:0a:22:d0:
                    1f:d4:07:08:cd:8d:91:e4:be:23:24:ae:20:6f:7e:
                    c2:10:b2:34:b9:bf:39:5e:26:21:0a:40:f9:01:4e:
                    bd:7e:4d:28:bf:69:4f:60:33:d3:f1:e6:44:bf:3e:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0A:1D:1A:2C:51:13:44:94:55:29:53:1B:BB:2E:43:D1:CE:C8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc23b692-8c87-3b0f-b88c-0a00acec07b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:05:8d:6b:37:be:94:28:4a:48:25:b4:98:18:72:f8:20:a8:
         2e:66:fa:4c:1b:eb:be:a8:22:a2:92:86:2a:59:4a:ba:53:ca:
         d0:86:f5:d5:bb:6f:2b:13:dd:ef:fe:80:95:cc:8c:6b:fc:a4:
         95:bb:14:52:91:3a:14:50:7d:09:0e:0b:6c:43:0d:15:a9:af:
         d8:85:d0:e0:4b:44:87:ef:cc:5e:7a:cf:c4:54:8c:9b:5b:6c:
         2c:0a:9b:9b:de:63:c2:42:5b:01:c6:cf:67:c0:1f:78:96:0a:
         d9:ba:a5:b2:66:c3:8d:51:5a:50:f4:f9:8d:5b:6d:60:45:1f:
         e6:59:58:eb:58:31:89:d6:1b:3a:91:0e:eb:e3:d3:08:5c:ee:
         b8:9f:8f:e5:c2:c2:be:5f:3d:0c:3e:23:77:54:0b:bb:fb:33:
         5b:60:97:53:60:45:0a:26:57:97:6a:82:2b:ea:83:ee:b0:6c:
         59:62:ac:e5:5e:41:40:0a:34:c9:ec:e6:89:f7:61:0c:19:46:
         5f:5b:15:34:a8:26:70:e3:96:14:ff:6b:af:64:53:59:70:98:
         76:b2:17:32:c9:d2:c7:90:df:41:35:d7:b7:2f:47:a5:0f:70:
         2f:95:75:38:38:0f:8d:79:4e:27:02:33:91:e1:b2:07:a1:47:
         5c:95:32:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:55:29 2025 by rpki-client