Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/41be1aec-1415-3921-bfea-522b7006aa5c.roa
File:                     41be1aec-1415-3921-bfea-522b7006aa5c.roa (raw, json)
Hash identifier:          4bRq+E+ptXfXmbfkX0FAbfsU4rKctrasIAJv0qSmcA8=
Subject key identifier:   C7:23:1B:79:B8:F9:69:86:4F:F4:FF:7D:A3:ED:50:5B:8B:14:A0:BF
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584AF256A1B6BCE1F7C305A08AF0
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/41be1aec-1415-3921-bfea-522b7006aa5c.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     32806
IP address blocks:        192.187.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:a1:b6:bc:e1:f7:c3:05:a0:8a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=bb00edad-93ff-4261-a95f-7c89034ef431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:24:c1:07:85:dc:58:24:11:90:26:e7:3e:cd:
                    d7:a7:59:ac:75:f2:9b:72:ee:e6:f4:98:f8:b8:66:
                    89:96:d2:f1:fb:06:66:2c:ab:70:86:6e:6e:02:8e:
                    e2:56:fa:39:17:6f:03:79:ef:38:db:78:bb:9d:90:
                    cb:c1:62:71:93:d6:0f:10:a9:68:05:eb:da:88:4a:
                    57:20:b4:dd:66:c5:b5:ab:6d:60:a1:0c:fe:6d:95:
                    8b:62:e2:06:08:86:0c:ed:d0:9a:5c:a5:b8:26:6b:
                    d5:c6:39:40:3f:4b:9e:c8:35:cd:e2:2b:af:cf:38:
                    9e:47:b1:76:b6:3f:53:d4:89:cd:e5:e0:0b:36:ac:
                    76:50:b1:cd:fa:80:a5:c1:cc:2b:cd:50:6f:e6:73:
                    d6:b5:0e:69:b3:4c:7e:d0:eb:82:6a:3f:d8:74:a9:
                    ad:ed:a2:e7:f0:ef:f8:60:c6:95:3d:8d:72:81:32:
                    39:96:a1:af:d2:16:11:cd:d8:49:8f:c9:86:34:ef:
                    66:8d:0c:ea:b9:d7:a4:6f:6e:24:1b:64:91:f5:c6:
                    10:9e:c6:76:6f:91:aa:5a:3c:93:cd:66:9b:bc:d0:
                    7b:14:b8:3c:8c:26:bd:8b:a6:ae:07:10:f9:c9:9f:
                    29:d2:64:9c:21:83:4e:c0:34:84:be:08:41:a4:35:
                    b2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:23:1B:79:B8:F9:69:86:4F:F4:FF:7D:A3:ED:50:5B:8B:14:A0:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/41be1aec-1415-3921-bfea-522b7006aa5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.187.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:95:ed:8c:7f:ba:fb:fa:cb:d5:e9:af:b1:88:37:dc:e9:
         61:c3:f6:8a:70:84:f4:d1:32:6a:51:ad:c6:ff:34:c9:ea:d4:
         c0:2e:c0:2a:01:3f:39:64:a4:1d:c3:a8:7e:88:74:b8:e3:42:
         b5:3c:ca:f0:ca:6a:c2:fe:e1:9e:4b:9e:9e:40:47:eb:88:12:
         b5:43:b2:18:87:1d:16:63:a6:50:e4:12:1e:0a:81:25:0f:65:
         52:d7:8f:6c:5c:47:78:86:de:d5:08:0a:a3:2b:20:c1:b5:82:
         11:52:f7:e4:87:7e:a5:df:42:32:92:81:3f:54:32:4b:c7:bb:
         5c:f1:ca:92:b9:ab:00:de:b6:d6:40:d6:03:7a:f7:d5:07:7c:
         43:d3:a3:b1:42:45:7e:f8:01:10:57:56:be:8d:0d:6a:fe:ee:
         9d:e3:9a:cb:fe:b6:42:6e:8b:4b:6f:38:34:bb:8b:95:b3:92:
         a6:14:12:08:d2:ee:67:e6:22:3b:fe:43:10:5f:90:4f:38:1f:
         8f:0f:73:a5:9f:54:66:25:24:2f:8f:d9:8c:16:5f:f6:8c:b7:
         f8:d4:96:16:e6:df:ff:4d:30:23:56:fd:3a:d3:ae:bb:92:51:
         7b:85:c7:5f:f2:07:6e:0c:0c:b9:25:53:c7:fc:48:93:4b:fc:
         f6:37:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:16 2025 by rpki-client