Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa
File:                     ffadfc08-ef44-3134-a107-fa470ddc4033.roa (raw, json)
Hash identifier:          JE/VTrJh2nJDSDkEDwl2eudlsenjPqOE4w7N74+NUN0=
Subject key identifier:   EE:00:DE:71:75:85:95:84:DA:B0:B2:47:6C:FE:66:E2:E7:85:93:92
Certificate issuer:       /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa
Certificate serial:       010D0C9F4328584B13D6B0A755403B6A82E10380
Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        192.135.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b0:a7:55:40:3b:6a:82:e1:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=76a0e8a6-1d7d-44d1-aaff-7ea1b2887fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:82:58:5f:b1:14:9f:d2:1a:2d:53:6e:2b:
                    a5:98:8b:fb:fa:c2:95:0d:64:9f:74:8d:c1:df:d1:
                    81:94:81:b2:aa:91:c9:89:4e:75:5b:b4:3e:17:e3:
                    7a:b1:4d:a4:d6:e2:74:59:2c:54:d8:68:92:94:91:
                    6a:ea:68:c1:ea:07:47:d8:17:bf:e4:b2:d0:43:0d:
                    7c:80:1e:6e:1f:09:54:44:ac:05:e9:ea:3f:ff:14:
                    76:26:a7:04:85:f5:d1:53:b0:aa:db:e5:74:2a:cb:
                    b3:93:48:a1:56:ab:55:d0:63:74:54:d4:76:ef:1a:
                    8a:4f:20:f8:86:25:63:0d:c5:90:ae:0b:bb:04:34:
                    67:9b:66:7b:64:2d:8a:a5:a7:5c:ed:49:28:72:7c:
                    a8:83:8c:d7:f3:f3:58:8b:eb:2c:d2:47:86:8e:7b:
                    e6:c8:61:db:41:81:2d:6d:41:32:14:6c:3e:99:ac:
                    46:84:72:61:5a:f1:85:88:37:4f:14:f6:a8:c5:f0:
                    6f:2c:aa:8e:61:6b:65:df:03:b8:30:68:7b:66:17:
                    ba:12:ae:9b:01:c8:d9:aa:8b:7b:c3:4d:1c:6a:c9:
                    f6:a6:76:9c:78:fe:0b:6c:91:d7:36:54:14:f8:38:
                    ee:2b:b0:03:e1:51:a5:c5:c2:e7:ac:de:7f:c9:ea:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:00:DE:71:75:85:95:84:DA:B0:B2:47:6C:FE:66:E2:E7:85:93:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/ffadfc08-ef44-3134-a107-fa470ddc4033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl

            X509v3 Authority Key Identifier:
                keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:19:cc:a4:81:83:ee:a4:5d:69:19:3f:60:c0:f1:c0:dc:c1:
         9b:c1:45:7c:3a:cf:d4:b3:2b:68:7d:2b:4b:78:f8:75:c0:bb:
         fa:83:df:a8:96:0a:de:a2:e0:0d:43:0f:0e:9c:91:84:1e:51:
         ee:4f:ab:79:a1:e5:9a:2f:8a:c8:a2:8a:14:76:26:9c:ee:db:
         4f:f1:8a:1e:12:fe:c3:7a:5e:e6:45:2c:46:61:ab:97:8f:92:
         4a:f1:5e:af:77:2c:44:d1:ea:41:2e:13:be:0b:03:47:a7:3e:
         64:48:8d:ca:8f:b3:7f:c4:72:ca:55:ee:ff:2c:3d:b0:77:46:
         96:06:a7:bd:6c:65:99:bb:0f:99:8c:4f:d5:ec:b5:54:0e:2b:
         14:d7:2c:36:b4:16:6f:f7:cf:0e:f4:72:35:3c:6b:d5:5a:d9:
         b6:4c:34:0d:98:63:f2:a0:ab:a8:4d:42:3e:32:57:8c:5c:de:
         5c:3f:00:0d:34:8f:c4:ba:fd:5a:a6:92:cf:c5:2d:92:1f:d5:
         cd:c7:f2:c5:e2:fc:72:d8:be:aa:84:72:6d:ec:8c:09:75:d6:
         e5:bb:1f:a1:2f:8f:71:e9:72:36:5f:02:cf:89:9c:ba:fd:97:
         23:ed:e9:27:fc:2a:f0:eb:5f:8a:b4:7d:c0:d7:a0:ad:02:d7:
         f9:a4:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:04 2025 by rpki-client