Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/752b18ec-1348-3fe5-8d85-e5405a69f689.roa
File:                     752b18ec-1348-3fe5-8d85-e5405a69f689.roa (raw, json)
Hash identifier:          q8d5pCxBrxpB0dInVBrgRpnMBqnF7R/7Im8V05BYXjs=
Subject key identifier:   04:64:DC:4E:6C:38:DF:26:11:B1:E6:66:FD:2A:9B:00:D4:D0:9F:4F
Certificate issuer:       /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
Certificate serial:       010D0C9F4328584AE03120E54254DAD4D4EE2C80
Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/752b18ec-1348-3fe5-8d85-e5405a69f689.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     29066
IP address blocks:        192.155.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:20:e5:42:54:da:d4:d4:ee:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=6f3a578b-8c87-4fde-9501-c0ed0ac761a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:94:62:62:79:92:7a:81:f9:73:be:55:e5:
                    86:66:63:cf:9f:17:c6:f4:f4:8f:b1:23:df:37:e4:
                    58:01:cc:35:d0:df:c7:ca:d0:3e:4a:83:cc:f2:d3:
                    2c:e9:d2:e4:5c:d1:80:94:50:bb:9d:1c:64:07:21:
                    3e:0b:21:c8:b3:c2:0d:5f:2d:cd:d7:58:b5:0d:59:
                    7d:80:76:b9:9f:d5:c8:ff:ad:5d:53:f0:7f:00:d0:
                    78:77:f8:97:44:c1:ee:9a:6a:af:5a:28:a7:74:4a:
                    69:1c:a0:b0:4f:f4:6f:fd:e4:5c:bf:fb:d7:58:48:
                    2c:ec:61:dc:f5:03:4d:3c:b2:06:10:6d:83:50:67:
                    93:d7:5b:87:9d:c1:06:90:30:2c:a4:9b:48:94:4b:
                    1f:9a:75:d2:f0:9a:87:8f:e0:9b:b8:ee:64:4b:9d:
                    79:06:6e:9d:2b:31:f2:3c:cb:ec:d9:7e:44:64:0f:
                    fd:b4:d7:40:e7:46:06:69:42:cd:dc:69:de:99:ca:
                    cc:61:b6:08:af:58:2f:23:ed:85:5e:af:77:f0:06:
                    19:97:89:c8:ae:c0:0f:59:0e:e6:cc:55:6a:42:f0:
                    e4:e6:a3:73:bf:6c:27:63:64:ea:2d:0d:1a:3e:3d:
                    90:9d:77:c5:7c:f4:00:7a:ba:78:c1:3e:de:8f:27:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:64:DC:4E:6C:38:DF:26:11:B1:E6:66:FD:2A:9B:00:D4:D0:9F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/752b18ec-1348-3fe5-8d85-e5405a69f689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.155.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:57:ab:b1:a0:9e:94:56:90:15:7f:c8:93:53:89:af:95:cd:
         c5:56:aa:30:4f:5e:76:68:eb:42:db:4d:6f:32:ca:bc:35:af:
         ba:79:84:58:a5:63:61:82:4e:be:3b:94:eb:18:37:b3:26:bd:
         77:8d:47:5c:aa:4b:d2:8d:71:db:70:f5:84:5a:dd:60:ba:ee:
         23:b0:ef:47:90:6e:0f:2a:98:1a:ad:58:28:0a:d2:14:c4:2c:
         f9:2b:0a:96:f9:85:c1:5b:a6:84:a8:79:be:b9:52:3b:ca:06:
         5e:b9:ea:fb:dd:75:19:14:eb:c9:3a:bb:72:cf:b1:58:0a:1f:
         b9:a2:99:86:34:71:7b:96:1f:85:09:45:0b:4d:b4:e4:cd:82:
         42:00:40:5a:2d:29:fc:b9:8b:35:37:9b:10:d5:90:6d:a9:d0:
         93:ad:5b:cb:9d:40:41:e6:e6:54:3a:4a:ad:ca:83:8e:6e:b9:
         08:75:ee:cd:a3:19:bc:ed:8f:c2:b8:ec:6f:b0:8b:8f:2e:02:
         a4:06:f9:e8:14:51:dc:b0:98:06:26:a8:3f:1b:c3:d1:4a:f0:
         2d:bf:ef:6f:08:ea:cb:59:a9:9d:d0:a7:b9:fa:96:c8:7b:63:
         7d:5b:63:a5:b9:ae:b6:20:b7:c5:04:0d:eb:33:9c:1d:04:23:
         fc:92:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:50:40 2025 by rpki-client