Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6aec93c9-2a44-409f-934d-4c4ca9b2c389/7ce70a64-3280-308f-86cb-cb129f018127.roa
File:                     7ce70a64-3280-308f-86cb-cb129f018127.roa (raw, json)
Hash identifier:          5osgla+6ikuKDIFWAAPL2D1yLHGfgj4rFMMZJSAOPBk=
Subject key identifier:   E9:8B:66:60:0C:EF:EA:CD:4A:71:7C:67:83:24:84:6B:AF:87:D4:59
Certificate issuer:       /CN=6aec93c9-2a44-409f-934d-4c4ca9b2c389
Certificate serial:       010D0C9F4328584A9900B77F935058611C294D20
Authority key identifier: 32:89:8C:6D:08:A2:F9:82:F0:6C:A7:32:E4:03:85:5C:0C:C4:68:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6aec93c9-2a44-409f-934d-4c4ca9b2c389.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6aec93c9-2a44-409f-934d-4c4ca9b2c389/7ce70a64-3280-308f-86cb-cb129f018127.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     393485
IP address blocks:        192.34.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6aec93c9-2a44-409f-934d-4c4ca9b2c389/6aec93c9-2a44-409f-934d-4c4ca9b2c389.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6aec93c9-2a44-409f-934d-4c4ca9b2c389/6aec93c9-2a44-409f-934d-4c4ca9b2c389.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6aec93c9-2a44-409f-934d-4c4ca9b2c389.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:b7:7f:93:50:58:61:1c:29:4d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aec93c9-2a44-409f-934d-4c4ca9b2c389
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=9e37a053-927b-429f-8d16-49dde97b5d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:c2:5c:6f:2d:7c:68:62:02:2a:c6:d0:06:
                    56:b0:de:95:1b:09:7a:1f:4b:6b:c7:2c:c5:48:19:
                    f8:b2:7f:5a:9b:15:ca:51:05:2a:c0:69:bc:ce:24:
                    7a:03:d4:a8:02:26:65:3c:3a:19:7f:a6:c5:55:7e:
                    a2:71:c8:4e:6f:87:94:e6:ec:3a:0f:a8:7e:e3:e0:
                    2a:48:51:53:16:23:b6:b4:0f:8a:62:32:88:8e:e4:
                    d8:6f:83:1c:9e:83:bc:42:22:d0:94:9e:10:9d:07:
                    f0:15:84:d5:dd:05:28:e8:4d:40:78:0e:32:7e:23:
                    30:28:be:f5:12:44:94:87:a9:5d:b1:5f:c4:b2:bc:
                    46:68:88:bb:55:e7:94:1a:bd:68:e0:d4:56:73:b4:
                    9c:09:9b:4f:2c:5f:ee:09:a6:f3:0e:fd:1f:81:c6:
                    f8:6a:a6:e8:f3:84:ff:3c:d3:15:c7:60:c3:e4:54:
                    26:be:9c:72:8c:99:a8:b1:0a:75:6f:e3:a3:e8:32:
                    db:7c:28:08:b4:82:45:c6:37:fe:56:3b:78:d1:ad:
                    e7:54:19:d4:df:36:ac:36:d8:34:7f:c8:64:af:7c:
                    24:04:a6:72:f2:bf:8d:de:8d:d6:c0:ff:ec:bc:c0:
                    d8:e2:78:e2:05:fe:09:9d:38:c4:1b:4c:e6:06:19:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8B:66:60:0C:EF:EA:CD:4A:71:7C:67:83:24:84:6B:AF:87:D4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6aec93c9-2a44-409f-934d-4c4ca9b2c389/7ce70a64-3280-308f-86cb-cb129f018127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6aec93c9-2a44-409f-934d-4c4ca9b2c389/6aec93c9-2a44-409f-934d-4c4ca9b2c389.crl

            X509v3 Authority Key Identifier:
                keyid:32:89:8C:6D:08:A2:F9:82:F0:6C:A7:32:E4:03:85:5C:0C:C4:68:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6aec93c9-2a44-409f-934d-4c4ca9b2c389.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:fb:0b:c7:a5:08:35:d1:eb:0a:7a:8e:64:50:be:34:e0:
         c6:f8:4b:2e:b2:68:84:6a:b9:d0:05:c3:cd:60:92:8e:22:bb:
         9e:2c:13:b2:06:39:bf:81:53:3b:1b:30:cc:81:9f:7e:74:23:
         f3:6b:56:5e:21:91:da:dd:66:38:18:06:64:57:7b:a0:bc:85:
         92:26:96:35:85:02:ba:2d:c7:b1:9f:8a:ed:4d:90:fc:1c:ef:
         c8:f4:31:55:23:d8:7e:2c:fa:19:f9:12:3e:b3:d2:5e:d4:36:
         dd:b2:66:0d:0b:30:d1:6d:ad:68:d5:d2:92:e2:69:82:e6:72:
         5e:30:12:af:00:67:48:af:ef:04:5c:55:a5:3c:75:09:2e:b0:
         16:78:77:94:4f:90:4f:82:fe:09:40:47:02:ae:c5:0b:83:06:
         1a:65:6d:40:59:8a:2d:48:f8:ae:16:1b:3b:39:f9:28:84:8f:
         d1:e5:c1:97:61:d6:dc:c8:4e:76:05:36:90:89:2a:6a:af:33:
         33:fd:67:01:04:59:c9:c3:a2:c4:d5:60:c6:16:6d:86:72:00:
         b0:75:90:be:75:6d:c7:0e:50:96:62:00:a9:e5:50:69:9d:05:
         49:49:92:d9:22:2d:aa:ff:dc:a4:4b:d0:79:05:cb:85:04:77:
         d0:f7:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:21:25 2025 by rpki-client