Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/768d6547-bd3f-3b1d-937c-edf695cd6dea.roa
File:                     768d6547-bd3f-3b1d-937c-edf695cd6dea.roa (raw, json)
Hash identifier:          Z4PvHcv8gh+HhQrDpE8WtONPsPxGQaFyi5nUSrsOBPg=
Subject key identifier:   C6:29:47:B8:C6:A8:48:A5:AE:8A:2E:2F:2A:F4:EA:7A:CB:13:A0:A0
Certificate issuer:       /CN=4113c935-d29d-41b5-bec0-a7395bdeac99
Certificate serial:       010D0C9F4328584A9FFBA1357040D5F947365CD8
Authority key identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/768d6547-bd3f-3b1d-937c-edf695cd6dea.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     32748
IP address blocks:        199.195.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a1:35:70:40:d5:f9:47:36:5c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4113c935-d29d-41b5-bec0-a7395bdeac99
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=f3c4cd94-cec5-4c74-bb5a-337af88af491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:2e:95:55:41:f0:2a:9a:8e:64:31:4f:3a:
                    51:09:a4:03:20:4d:bf:2e:00:75:27:a3:ba:e3:e8:
                    f7:22:58:2e:2c:14:c0:42:05:fc:04:86:cf:cb:bb:
                    f8:68:d8:c4:7e:6a:6a:05:04:d5:e1:49:6d:0f:eb:
                    50:b9:9e:f6:2a:cd:7f:97:b1:6c:be:34:24:ac:98:
                    c4:11:64:7c:08:e8:68:49:b8:38:35:71:4e:ee:1c:
                    8f:52:14:88:c2:09:13:f4:cd:f6:c5:db:f8:16:78:
                    3f:f2:52:f0:e1:95:c1:a1:1b:7e:e1:21:f5:1c:1f:
                    f0:50:cf:98:56:ae:6d:9d:1c:e7:57:97:99:9a:ac:
                    d4:7b:0c:e5:29:3f:65:91:a2:83:8b:02:06:7c:88:
                    e0:46:f9:48:8a:8e:72:46:0f:fc:c9:4d:b7:f5:9a:
                    41:fd:fc:20:8c:df:87:d9:5b:5b:22:96:3c:75:de:
                    8e:36:e2:e9:4e:85:7d:19:85:bd:c7:c0:c0:e7:66:
                    2c:d9:d3:c1:36:cb:35:f7:be:d9:8e:41:10:58:29:
                    ea:55:b1:58:de:ab:7a:61:83:ad:03:f4:b2:89:02:
                    0b:03:90:66:35:49:4c:b7:e7:b9:da:bd:0d:37:ee:
                    0e:2d:aa:70:95:fa:94:98:72:8f:64:d8:8b:05:7d:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:47:B8:C6:A8:48:A5:AE:8A:2E:2F:2A:F4:EA:7A:CB:13:A0:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/768d6547-bd3f-3b1d-937c-edf695cd6dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.crl

            X509v3 Authority Key Identifier:
                keyid:18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:17:13:37:f1:80:d6:bf:75:92:7f:5b:cd:04:b0:a4:4e:3d:
         82:06:c6:b7:c6:76:09:7a:be:21:f7:e7:b6:b7:c2:af:99:f7:
         84:df:30:21:10:db:9b:4a:75:5b:49:6a:20:1c:84:b5:a0:d3:
         9b:a0:da:ab:6d:88:b6:32:33:d2:bb:bd:e5:22:3b:27:9e:b0:
         c6:3b:f7:a3:74:55:67:c8:c6:b5:44:66:42:97:fa:b6:ac:b1:
         e0:be:a6:80:60:bc:a2:8e:96:e4:f8:ad:67:c7:a1:70:ed:4a:
         02:d6:3b:25:02:9b:44:4a:03:86:bd:48:ac:33:c4:5a:08:66:
         cb:97:94:d2:7d:b1:97:32:0a:e7:31:5e:6e:b7:99:25:bf:09:
         cc:12:78:3f:be:8a:16:9e:08:bf:aa:3a:ab:be:90:7e:55:e7:
         b0:39:55:9d:71:9a:f0:c1:e6:4d:19:04:24:b5:a7:6e:98:5f:
         a9:88:9c:01:86:7e:0c:42:73:59:ee:8a:d1:8e:64:d4:3c:16:
         6d:b1:82:f4:cc:53:46:a4:05:be:95:96:c0:6f:9f:4f:3a:a3:
         56:5c:cb:54:74:9b:ec:73:a6:b6:ae:27:f7:ba:63:07:7d:e1:
         cf:c8:10:60:cf:f6:34:03:91:55:2b:f0:92:63:83:98:51:69:
         e7:5e:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:35 2025 by rpki-client