Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/e6e4d5f7-31cc-3079-9792-0a9b25f06ff6.roa
File:                     e6e4d5f7-31cc-3079-9792-0a9b25f06ff6.roa (raw, json)
Hash identifier:          DRl0+DRaDWKm+CXSHy9tnmy9ZAuRa/zycBJ0JS6RkNw=
Subject key identifier:   88:F8:DC:98:86:95:02:27:8D:50:28:79:07:39:67:CB:14:CA:6A:EE
Certificate issuer:       /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Certificate serial:       010D0C9F4328584A89A615DD119DBF49DFC85660
Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/e6e4d5f7-31cc-3079-9792-0a9b25f06ff6.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     199563
IP address blocks:        132.190.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:15:dd:11:9d:bf:49:df:c8:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=f25adcad-45ef-4622-a352-5a93d5e133d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:01:32:f9:ac:bf:a8:7e:12:d1:f3:fe:da:
                    e5:b2:2f:c3:ca:90:2b:58:0e:bd:81:03:d8:6e:91:
                    b7:cc:f6:e7:59:c6:dd:f0:69:ea:c5:3a:64:d6:1f:
                    d3:32:db:6a:b4:fc:8b:ec:1d:ed:85:c2:a6:d4:ff:
                    09:06:3b:fa:45:b8:13:f2:59:16:2a:47:b2:fe:f2:
                    74:bd:4e:cb:d0:0a:ef:dc:93:f1:4b:f3:11:46:96:
                    d1:f5:d3:b3:94:c8:ef:09:f6:80:fb:77:d6:cd:c4:
                    a9:a0:d2:5d:5b:91:53:c7:c2:fd:70:98:07:d5:27:
                    42:99:c6:d0:a1:f9:e0:37:ae:48:41:c4:7e:57:27:
                    ec:30:f7:1a:20:8c:eb:31:0c:ec:2c:23:a7:8d:03:
                    5e:b4:2e:3e:6a:e8:14:5d:2c:a8:5c:e1:5a:fb:53:
                    d4:54:42:c3:ce:0f:f4:ee:d7:24:52:31:d5:07:05:
                    8c:2d:5d:cb:5c:ae:71:ee:35:c8:7f:33:42:46:99:
                    f2:ab:f9:43:75:b8:4f:fa:83:c9:58:62:e6:2d:02:
                    5a:e0:03:dc:cd:ae:cc:3c:3a:73:64:f0:a5:52:4a:
                    42:22:81:37:1b:a0:cf:ca:10:9f:23:8d:23:a7:21:
                    03:66:4d:7f:8b:ae:fa:39:dc:e7:06:45:1c:ce:f6:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F8:DC:98:86:95:02:27:8D:50:28:79:07:39:67:CB:14:CA:6A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/e6e4d5f7-31cc-3079-9792-0a9b25f06ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl

            X509v3 Authority Key Identifier:
                keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.190.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:04:f3:d3:82:79:56:40:43:70:df:19:26:4d:15:af:8a:98:
         c4:ae:e6:00:31:90:85:37:3a:db:9e:85:e9:bb:0b:ff:e6:72:
         9e:5e:e9:74:c5:40:8d:1e:7b:55:ee:89:aa:5b:23:3d:64:ec:
         3e:d6:58:01:63:ca:a2:c7:a4:c1:e7:db:98:cb:80:b7:f9:16:
         26:b4:63:63:b3:20:eb:f4:23:1c:de:bb:3a:1c:c3:a9:35:ac:
         8b:18:ac:75:95:eb:a3:55:5a:30:54:0b:b7:37:97:3f:5b:03:
         30:c6:08:41:e4:db:04:d2:cf:bb:f8:25:93:fa:20:78:95:c3:
         bf:57:fa:2b:a2:77:22:c8:95:9c:5a:a3:e5:79:ee:fa:4d:fa:
         1c:25:94:fc:0c:78:9f:5d:08:66:4a:b6:2d:6a:ef:b3:c7:7f:
         7c:95:73:36:ba:14:99:2c:6d:8c:09:dc:2c:d0:27:e3:8a:6a:
         b0:4d:9b:0e:5c:43:38:07:d9:64:fb:d9:0f:1e:1d:4f:90:4c:
         64:22:95:61:c1:6c:1a:b0:16:83:53:0d:dd:12:21:ea:ab:22:
         91:4a:b6:f9:51:f3:72:10:46:b1:a6:2c:f2:2c:1b:23:8f:95:
         79:69:23:17:79:e7:8f:54:4b:53:90:48:6c:8d:da:aa:4d:97:
         95:ad:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:12 2025 by rpki-client