Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa
File:                     e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa (raw, json)
Hash identifier:          pG+j1utiWH23AN0HfJTYdzhKKXzlMc6tdhHKKAeFR04=
Subject key identifier:   AD:A4:62:82:4E:83:0B:22:82:15:A0:19:06:52:19:ED:AB:F2:FB:46
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F4328584A7085F534E161A65E6794B9C0
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     8075
IP address blocks:        192.243.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f5:34:e1:61:a6:5e:67:94:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=d1eed62c-5fb0-4b56-8fda-de848b5ac3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:6b:e2:69:e3:b9:ee:00:e8:43:72:2d:e6:
                    21:f2:4d:19:bf:65:cd:dc:54:82:1e:ce:d7:cf:0a:
                    0f:b8:96:fc:d0:79:14:b1:d5:f4:64:9d:00:36:bc:
                    24:94:3b:20:5c:10:60:8b:62:5a:2e:bd:b8:66:c9:
                    1c:55:8d:b6:a6:f9:14:19:fe:74:4e:dd:dd:27:26:
                    57:f3:76:a9:b3:da:ab:e1:ae:19:f1:a9:d2:eb:cf:
                    27:08:04:ac:2a:30:a4:08:46:dc:a5:23:c3:1e:e2:
                    c9:cb:64:1c:2f:6a:da:59:6b:78:2a:09:64:8b:5e:
                    50:79:65:bd:80:61:01:95:51:97:ba:95:fe:36:81:
                    a1:0c:c4:79:3d:a8:62:0b:9a:70:e1:24:44:5e:de:
                    64:3a:f4:1e:3a:58:4e:f0:5f:85:a8:d7:5d:1e:1f:
                    a5:8e:b4:2a:3b:08:f1:83:06:37:cf:38:f5:20:f8:
                    b7:7f:c8:f5:27:b2:4d:13:c6:88:20:20:0e:23:63:
                    47:e7:ae:64:49:fb:4a:85:be:e5:12:50:42:5b:84:
                    0d:10:42:83:8d:d9:6f:05:34:cc:01:b7:bc:03:c5:
                    17:24:e2:06:de:16:3e:c3:a2:45:0e:c7:89:a7:e0:
                    be:8c:95:e0:0e:f2:2d:60:60:dc:8c:5d:2c:84:d4:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A4:62:82:4E:83:0B:22:82:15:A0:19:06:52:19:ED:AB:F2:FB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/e6aa5b0e-0ffa-3250-86e4-2e42ef14822f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:89:3a:25:79:00:c5:ee:fa:d5:cf:1c:7d:d0:2d:89:21:5a:
         3d:00:ba:6a:3d:12:b2:01:db:76:6b:c8:5f:15:08:b1:db:17:
         c4:12:1d:a5:fa:48:64:3c:fd:e2:35:ad:f6:60:42:b8:37:da:
         94:e5:e1:a0:cb:62:af:ca:90:e5:f9:f5:6a:d8:65:08:15:06:
         61:bb:0d:60:12:a3:9f:b6:f5:15:ee:ba:3c:08:6c:a6:e5:96:
         85:cc:0e:e6:22:ba:58:be:89:e9:ba:99:27:78:d9:a4:3c:89:
         1d:97:f2:02:d1:b5:a8:e8:a1:97:f7:78:15:d3:5b:f7:fc:67:
         f8:78:6f:4c:55:13:5f:db:94:5a:4e:0d:d9:54:4e:08:01:61:
         db:e7:90:d0:60:77:ba:f2:bd:10:04:49:47:18:32:12:4f:7f:
         56:c8:93:22:33:54:3c:7a:bb:bb:c0:cb:6d:9b:59:ec:36:bb:
         17:54:1a:f3:c2:0d:4e:fb:9d:5f:08:82:c7:a6:9f:38:c6:cf:
         14:9e:8b:35:d3:f2:53:18:e3:78:be:7b:af:04:ec:5b:5f:a0:
         0f:1c:8d:85:f4:9c:51:77:18:f1:e1:7f:ef:f0:77:85:fd:bf:
         e6:ae:99:c4:3d:68:22:cc:55:c3:8c:83:8d:34:f4:9e:6d:5d:
         9f:14:74:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:19:49 2025 by rpki-client