Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa
File:                     e3797bcd-705e-363c-b104-8d569e2486fb.roa (raw, json)
Hash identifier:          zOPSYSC0jUTZFxFljo5t6vYJaMSRzqn5fwe/NgxA1X4=
Subject key identifier:   6E:F1:2F:F0:2D:BE:EA:69:90:9C:4A:9A:CC:9A:9E:BE:DD:4D:2B:CD
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584B2E5C5AE0AEF3CC8D7A418BE8
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     36691
IP address blocks:        192.55.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:5a:e0:ae:f3:cc:8d:7a:41:8b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=b24c76e4-f3e2-4a37-bc35-2a71114f2c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:21:db:c2:61:d3:d7:c3:7a:e9:bc:58:c7:
                    cd:3a:71:ba:31:f3:7f:2b:23:e6:d9:4f:65:0e:21:
                    fe:79:12:1a:87:9a:41:b3:e9:18:70:c9:82:1e:46:
                    d3:e2:53:9f:94:0b:f0:d5:da:a9:e3:01:d1:80:17:
                    f4:90:85:ef:58:30:36:46:62:b5:9b:e0:d5:a1:e9:
                    e7:08:df:80:eb:e6:ad:a9:c6:b0:2a:f3:b7:32:13:
                    da:8c:ad:74:72:b4:81:40:bd:23:e3:83:d8:cf:ba:
                    e8:bf:fa:e3:26:4d:a0:40:52:08:49:1a:73:30:29:
                    39:59:e0:b8:ed:b1:fb:63:04:0d:91:01:67:0d:10:
                    14:25:9a:35:34:2c:0c:6c:f8:f6:33:86:90:4c:d4:
                    55:55:56:b6:6e:49:1a:be:cb:c7:32:17:5c:2e:f5:
                    e0:cf:70:1b:5b:54:af:22:59:e6:da:b5:aa:ee:ae:
                    b5:12:17:67:e9:29:8f:a8:fe:6f:1a:62:b6:ac:0c:
                    b8:07:a7:b0:35:07:12:86:34:ff:a5:ea:68:6c:65:
                    97:25:e6:d0:7d:ec:30:14:8b:91:77:98:ed:f3:27:
                    08:7e:b9:fb:9f:43:d0:be:cb:11:e1:d2:05:72:48:
                    51:a2:3f:28:99:df:d1:ee:b8:10:57:a2:7b:6b:9d:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F1:2F:F0:2D:BE:EA:69:90:9C:4A:9A:CC:9A:9E:BE:DD:4D:2B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c1:98:74:3d:1d:ca:8d:70:3c:63:1b:d6:10:8b:65:83:42:
         d5:4a:ed:d6:2a:b7:e4:b7:5d:cc:03:4f:41:af:dc:40:f1:11:
         9d:37:3f:27:2b:de:4f:00:f7:50:87:10:fe:f4:1d:8d:38:e3:
         8e:c2:b2:e5:ff:47:2c:a5:80:2a:fe:af:11:d3:42:74:3a:1e:
         f7:52:db:66:91:98:93:29:d0:bb:66:c7:b9:85:69:2c:a7:4f:
         c0:e7:05:1b:c6:f7:a3:97:14:a0:e5:a6:d0:01:99:f7:84:c3:
         9c:37:eb:bd:44:e8:b7:ad:33:7d:0b:4e:d5:c3:5d:f9:27:92:
         6b:47:7a:df:86:32:de:95:65:ed:5c:b0:9e:b3:5b:0c:71:b2:
         10:9a:ae:00:27:3a:44:1a:e6:c0:52:18:92:16:27:81:60:70:
         d5:27:93:1d:4e:74:a7:1b:19:cb:31:44:83:f0:9e:d6:98:c9:
         20:7d:e9:02:2c:6e:4e:cc:83:89:10:c7:8c:35:1b:c0:b4:d0:
         e5:d2:f7:0b:3a:c4:b1:c7:de:1f:52:62:2f:39:fe:9b:0c:93:
         29:0e:a8:33:aa:a6:36:39:c8:52:e6:43:b5:9f:77:6d:72:bb:
         42:e7:82:13:53:e4:b1:1f:4a:d9:df:78:02:68:46:de:19:00:
         46:df:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:34:31 2025 by rpki-client