Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/831b03f3-916d-3b69-8550-f1eec3987b74.roa
File:                     831b03f3-916d-3b69-8550-f1eec3987b74.roa (raw, json)
Hash identifier:          LmMUqkYZfnW1nzbJ6LrrWx8/CMjU3ToQ3fy0W7b6jd0=
Subject key identifier:   89:2F:0B:BF:5E:E0:59:48:C3:86:A5:36:F3:82:99:05:6B:7E:5D:83
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584AF256A1A56715FBC87F87B380
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/831b03f3-916d-3b69-8550-f1eec3987b74.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     32806
IP address blocks:        192.187.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:a1:a5:67:15:fb:c8:7f:87:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=3ce03663-0a86-4912-bcfc-a2216d46a013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:a4:2b:46:9a:a1:b4:1e:a7:be:14:da:f5:
                    0f:13:4b:5e:6c:45:c1:15:51:97:00:b6:65:ab:fc:
                    33:a8:46:e3:da:c4:66:47:1f:80:c9:2c:e2:69:87:
                    b8:b4:7d:d3:06:2d:a1:aa:92:44:11:a7:28:ea:c0:
                    6c:a0:fa:ff:03:94:42:63:af:f5:c0:c2:c9:19:20:
                    52:62:1b:a6:db:7a:af:b5:06:06:f2:0e:fa:8f:13:
                    35:8f:65:b2:fb:c5:7a:df:a8:d3:74:22:99:2e:8f:
                    11:58:7d:47:34:36:16:0e:2f:04:48:11:3d:07:a9:
                    06:8b:2b:ce:b3:8c:96:3c:32:5f:ca:c8:55:e0:a2:
                    b9:1f:70:3c:00:c0:26:58:eb:89:be:d2:57:4e:17:
                    d5:db:fc:ce:b9:02:e4:9c:d2:f2:a1:fe:0e:92:c0:
                    1e:b1:a9:2a:a7:c4:b3:20:e5:bc:dc:d7:94:ca:d3:
                    61:e8:f1:b1:f1:ae:9b:38:f6:b6:d6:2d:79:bf:43:
                    07:d4:39:8f:e6:c4:0a:00:b9:ca:fc:4b:42:f3:4c:
                    88:62:de:cf:16:b3:6d:ad:44:79:e6:1a:8b:ce:02:
                    e4:8a:5e:42:99:17:18:18:af:73:57:17:ce:c4:9f:
                    40:40:50:ee:98:19:e8:32:22:17:76:ec:10:64:10:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2F:0B:BF:5E:E0:59:48:C3:86:A5:36:F3:82:99:05:6B:7E:5D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/831b03f3-916d-3b69-8550-f1eec3987b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.187.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ad:d3:0f:d3:d6:13:fa:b3:95:0b:57:e0:d5:17:76:44:c0:
         7a:7a:ac:ca:de:b4:eb:8f:55:fd:49:91:56:72:44:93:b9:40:
         5e:74:0d:cb:50:9b:41:f4:53:9d:04:92:0d:24:ef:91:ff:0c:
         3f:4a:4e:b4:08:1d:44:91:b3:1d:89:a3:af:90:a5:e5:d5:ee:
         30:49:74:00:3e:0e:f0:9d:e0:f6:6b:cc:cd:e2:30:ef:c0:f1:
         15:48:36:13:e2:73:50:7c:fe:05:56:e3:8b:4b:22:50:f4:bd:
         3c:23:3b:98:e4:e6:38:7e:3a:76:c0:65:b0:01:37:d7:35:cf:
         1c:6e:f3:a9:21:9d:66:ae:0d:7c:0d:97:3e:0f:00:3f:55:27:
         b7:43:48:2e:2d:d5:3d:ea:fd:2f:4a:61:fe:d4:77:3e:8e:4a:
         45:27:0f:ba:87:7c:54:83:b1:e9:c3:fc:9f:45:95:8c:dd:e0:
         83:42:6d:22:9c:f8:9b:c3:de:b0:4c:3f:3e:7a:74:66:1e:c0:
         bf:69:91:fe:d5:2e:83:48:1a:a0:70:54:1b:c4:ff:8a:6b:3d:
         c4:ec:78:43:23:8a:67:5d:53:d6:c0:b0:ed:aa:d5:e0:21:05:
         3d:58:14:9e:d9:c0:5c:60:cf:fb:7b:f6:3d:05:95:7f:39:77:
         34:ff:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:11:50 2025 by rpki-client