Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa
File:                     718aca4e-36f9-388f-afe0-123ff07786c7.roa (raw, json)
Hash identifier:          TnzQzPqhymeApHzSRRnZra5B1QtmD7o0EaVBpzJXrq4=
Subject key identifier:   DC:5D:51:46:CD:9D:9C:9B:61:F4:6C:F5:54:AD:34:22:C6:DA:0B:B2
Certificate issuer:       /CN=4a669737-4387-4a5c-829a-5cf431c6469e
Certificate serial:       010D0C9F43285849E38A390CD497CC00D64C7B80
Authority key identifier: C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa
Signing time:             Sun 18 May 2025 01:00:47 +0000
ROA not before:           Sun 18 May 2025 01:00:47 +0000
ROA not after:            Sat 16 Aug 2025 01:00:47 +0000
asID:                     393453
IP address blocks:        192.138.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e3:8a:39:0c:d4:97:cc:00:d6:4c:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a669737-4387-4a5c-829a-5cf431c6469e
        Validity
            Not Before: May 18 01:00:47 2025 GMT
            Not After : Aug 16 01:00:47 2025 GMT
        Subject: CN=0177676d-74b2-4237-8297-bfb60f5fd121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:47:f5:36:e5:1d:ba:0c:ef:2e:5d:91:e7:
                    9f:de:79:20:77:e4:39:eb:be:3f:74:72:d1:eb:ac:
                    a9:ac:43:9a:cb:ba:2d:06:45:6a:d3:4f:47:c7:8a:
                    ec:0a:a6:2c:54:48:8c:73:b1:52:cd:9c:f7:99:35:
                    75:6c:2f:b0:68:8b:5c:58:b8:5a:32:8c:67:44:e3:
                    03:2a:6b:f1:81:1a:0b:1e:12:0c:9d:57:3c:2c:0b:
                    ce:b0:d7:83:ce:16:99:df:11:5a:bd:25:67:2e:47:
                    57:2a:f3:8f:da:16:6a:e7:a5:88:38:89:0a:e0:41:
                    70:d5:c3:3a:98:90:f8:71:fb:10:94:be:fe:45:7f:
                    9b:32:2d:eb:46:2c:b3:26:5f:12:ed:c9:4c:80:6f:
                    fb:5f:35:a5:76:c3:5b:cf:8a:ac:e9:a6:69:a5:35:
                    b7:22:17:d2:ce:fc:11:27:53:30:43:b6:9c:5b:09:
                    f4:71:91:52:31:58:cd:9e:68:d4:58:04:2f:35:a2:
                    8f:e2:06:46:ff:9c:16:27:db:41:35:25:04:bb:6a:
                    6e:f4:8d:8c:86:35:c5:d6:2b:77:00:43:70:28:bc:
                    07:84:6c:14:58:1d:1c:76:43:d8:87:07:44:74:51:
                    b0:66:4c:32:1d:90:19:1b:24:20:3f:33:2a:d9:f6:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5D:51:46:CD:9D:9C:9B:61:F4:6C:F5:54:AD:34:22:C6:DA:0B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl

            X509v3 Authority Key Identifier:
                keyid:C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:fa:07:89:1b:c6:65:21:b2:10:5a:b8:f1:fc:70:08:31:e8:
         b0:e8:25:8a:77:12:cb:8d:f1:6f:6c:9d:e5:7c:5f:39:22:e1:
         61:c7:88:e7:53:34:fe:74:5a:9d:aa:34:81:c2:dd:db:a1:40:
         c3:18:b6:31:99:e9:c2:8f:1f:68:89:1d:90:e0:48:5a:69:81:
         bc:9b:e5:d5:b5:03:87:4e:67:fd:45:4d:09:a5:d6:60:a2:eb:
         7c:e8:e3:6d:af:0d:92:5c:5a:24:b9:69:fa:5a:9d:a1:f4:8e:
         67:28:da:29:eb:58:7d:7f:da:bf:0b:a6:02:70:d2:3a:1f:7b:
         cf:4b:34:2d:0b:02:ef:19:ce:71:f6:48:6a:b9:43:f2:25:0d:
         de:cb:d8:5a:7f:01:d9:d1:f1:5e:4e:4f:0c:bc:4c:fb:cf:18:
         91:58:e0:a5:05:bb:1f:e7:cd:05:b8:c6:65:d9:f6:b9:d9:82:
         a9:04:7e:ed:7d:0a:04:8b:0c:21:f4:4f:0d:1d:12:45:59:ac:
         77:80:99:22:c8:b6:02:36:c9:a8:d0:19:00:43:6a:bf:5e:e3:
         c9:81:53:7b:99:28:31:80:1e:f1:e5:1e:cc:e2:8c:72:cc:cf:
         ff:2b:05:c9:fb:d7:06:3b:6c:b3:a7:4d:d3:b1:13:eb:48:7d:
         9a:db:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:03:43 2025 by rpki-client