Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/4a22aa0c-164e-338c-b284-0e4f40ef468d.roa
File:                     4a22aa0c-164e-338c-b284-0e4f40ef468d.roa (raw, json)
Hash identifier:          GkHth2Who3VKNsMLTPuDamWtLTzxMIqVM7na7J62Mi0=
Subject key identifier:   DF:5D:3D:A7:29:03:34:5F:49:55:4C:35:25:31:6C:D7:1B:5F:92:56
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584A90A0B30D9B79FC6E9DEADD00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/4a22aa0c-164e-338c-b284-0e4f40ef468d.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     395960
IP address blocks:        192.184.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b3:0d:9b:79:fc:6e:9d:ea:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=51f962db-ab1e-4188-9cbb-7bea334ca317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:b4:38:e5:40:63:0a:bc:71:75:c4:d7:06:
                    7b:f8:58:18:4f:64:d8:9f:ba:18:2d:e5:33:d9:54:
                    3e:21:6c:ef:b2:b7:b4:0c:9c:9d:20:f4:99:b5:9a:
                    42:50:d6:d4:98:eb:bc:e1:b0:3e:8d:61:d0:f2:a1:
                    0b:1b:a6:52:f2:a9:e8:43:ae:24:d3:05:a7:28:ba:
                    b4:ae:f7:36:fe:d9:9e:73:8d:08:a4:91:70:9b:d1:
                    be:f5:df:e3:44:e6:e9:82:10:2a:be:6f:be:5e:81:
                    d0:f3:b7:40:2a:9e:57:2e:42:b8:4a:94:4e:e1:e4:
                    cf:97:47:e2:38:84:f1:2f:b7:12:42:a7:32:35:25:
                    1a:1c:f6:e2:f5:31:19:9e:49:6a:7d:16:91:76:49:
                    09:f3:bc:a8:16:f1:aa:8a:55:8c:b9:aa:f9:0b:a2:
                    fe:69:2b:f9:d4:9d:05:58:77:a1:81:dd:b2:fe:41:
                    09:87:1f:fb:c5:43:b6:62:cd:75:fc:06:35:91:04:
                    c2:16:1d:a4:cf:8d:24:69:cf:f1:9f:89:0c:c7:c5:
                    d2:53:96:f1:b6:44:c0:56:45:d1:5a:1d:95:48:de:
                    d0:f9:56:9b:f0:a3:d3:a3:a1:c2:ed:0d:95:21:b5:
                    a8:3f:33:b7:e6:ad:ed:0f:05:22:3c:59:49:72:a2:
                    be:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5D:3D:A7:29:03:34:5F:49:55:4C:35:25:31:6C:D7:1B:5F:92:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/4a22aa0c-164e-338c-b284-0e4f40ef468d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:44:0c:c0:6c:5a:ea:2e:f2:18:a8:81:68:22:c3:5c:e6:a1:
         62:38:20:e0:18:2a:e2:14:03:77:5a:9f:6a:65:da:46:dd:f9:
         ac:52:00:f1:fe:3b:99:65:79:4e:99:f7:d0:ac:b5:88:72:77:
         15:f5:04:e4:f9:47:e3:38:af:a8:43:c7:51:2c:5e:19:3a:50:
         dc:26:82:f5:e4:54:f8:42:ea:a0:5d:c6:f7:e9:b3:6a:fb:de:
         ba:eb:37:18:73:13:a8:91:cc:11:ec:f0:a3:8c:43:c8:35:28:
         cf:32:66:4b:9e:66:91:9e:d4:d2:8d:c4:39:e8:0a:8a:2f:e9:
         f4:f8:0f:31:66:0e:e0:d7:81:ac:bd:da:54:28:83:8b:87:65:
         d4:9c:dc:2a:2a:9d:c9:23:19:88:f1:b3:52:47:73:c4:ca:d9:
         db:93:42:26:7c:28:5b:6d:79:6b:ee:57:01:15:a4:46:6d:3f:
         77:d2:ea:d6:c7:ec:8a:d8:08:a6:65:b2:ae:b6:24:07:23:4a:
         a5:9d:84:26:f9:7e:91:69:a4:5b:b5:3d:0f:58:7c:ce:46:a8:
         b2:24:1e:09:e0:d3:71:73:c5:35:b7:ec:ed:4b:e6:e9:93:6d:
         5f:d5:a5:b0:94:bf:3b:03:40:6c:43:7b:2d:4b:cc:3e:4f:af:
         5d:98:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:51 2025 by rpki-client