Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa
File:                     9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa (raw, json)
Hash identifier:          ivug6o79NtxzBI/Mb6RveXl/2EXKENKT43JbOeF4uf0=
Subject key identifier:   F3:B7:8A:50:9A:AF:E5:91:BE:CB:E4:FF:24:C5:BF:03:FE:9F:FC:F2
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE097C3C6D030EE6CF41300
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     213122
IP address blocks:        128.254.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:97:c3:c6:d0:30:ee:6c:f4:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=594d00a6-36b0-4520-be04-07cfab5f8430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:45:82:08:71:74:42:30:d6:a7:c8:01:ea:
                    44:3e:4a:8b:11:46:d1:8c:48:d6:96:99:aa:df:0b:
                    0a:bb:52:ec:3b:7a:1b:d1:4a:ec:f9:db:86:2c:18:
                    52:f4:8a:b2:2f:28:fe:58:f9:a9:db:74:ba:d3:3c:
                    98:05:56:22:21:e9:49:85:ce:13:4d:9a:21:44:67:
                    79:7a:d4:39:05:08:dc:53:5e:a6:3e:f8:60:49:ec:
                    50:85:44:ac:6d:a8:19:f4:2e:81:3a:98:f4:64:f2:
                    21:5f:e7:e9:2b:12:af:03:3a:01:31:99:6f:89:e7:
                    03:09:f5:5a:ae:ae:9d:49:42:81:bf:56:6e:30:13:
                    f7:f3:87:b3:18:fa:d3:f4:8a:b5:c7:83:6f:b4:c8:
                    90:a5:a0:0e:23:01:5c:ae:83:53:ac:dc:7d:b3:ac:
                    df:1d:b7:b4:f4:c7:2d:7f:84:05:86:9a:95:97:9a:
                    66:0d:3a:a8:8c:5a:31:3e:10:81:cb:a6:e1:d7:90:
                    4c:06:8a:63:86:ab:97:fc:d5:e2:15:df:dd:0a:28:
                    44:4a:55:ec:7e:ae:7a:60:64:4a:5e:51:23:dd:ee:
                    af:33:bb:ca:3e:e0:e0:15:16:30:66:e4:1b:dd:01:
                    c3:75:a8:e4:c2:77:51:9b:28:b1:8c:f1:53:9f:fe:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:8A:50:9A:AF:E5:91:BE:CB:E4:FF:24:C5:BF:03:FE:9F:FC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fb:34:16:4d:e3:f7:05:ae:5f:b2:af:79:fe:b4:03:e9:17:
         48:d1:ac:3c:a1:2d:ea:90:e5:40:da:d6:8d:24:fc:d1:75:98:
         7e:67:2a:2a:3f:d7:b0:55:c9:66:7d:e7:31:0c:31:c1:c0:d9:
         56:9f:05:1d:1e:46:80:68:f0:e6:90:0f:2c:2f:82:58:6c:85:
         35:ab:3b:b6:1a:77:03:f1:21:2f:25:d2:56:9c:a1:94:01:d0:
         8f:73:7d:44:ae:f3:a4:3e:fe:96:ac:99:1b:a2:71:f7:4d:1a:
         f0:f1:20:98:0e:15:f3:91:84:b6:5a:90:2e:09:1c:e5:e8:3a:
         ce:bf:25:68:5f:22:eb:4a:17:e6:c7:9f:0c:4a:7b:a9:d9:9a:
         27:5c:1d:4d:90:ad:64:27:e1:80:7a:b7:a5:77:60:bb:75:89:
         56:31:84:97:8c:84:55:ee:d3:14:ad:20:38:f3:4a:a2:12:a7:
         52:d2:dd:27:77:2e:6b:b7:be:34:06:d1:67:38:8b:56:db:76:
         2a:22:1a:e7:bd:d6:f4:3f:d7:ec:bd:f7:f7:a4:ea:51:a6:d4:
         83:d8:2f:f3:54:c2:5f:bf:ca:5e:ec:8e:cb:b0:4d:1d:f3:41:
         b9:92:64:82:ff:f4:ea:a3:d3:fb:8e:47:5d:bd:d5:5a:72:c1:
         4f:48:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:15 2025 by rpki-client