Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dd9fcfa7-8c7e-3f99-946b-e22b7cab8967.roa
File:                     dd9fcfa7-8c7e-3f99-946b-e22b7cab8967.roa (raw, json)
Hash identifier:          pml7K0y9N9Nxx4A79uwYssEdf9ciXLvcAgus9zqAQZ8=
Subject key identifier:   F1:81:E2:53:EA:CC:D3:70:19:04:F7:20:47:FC:02:1C:59:E2:41:80
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584A84122D1C480C8042FE05BC40
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dd9fcfa7-8c7e-3f99-946b-e22b7cab8967.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        192.104.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:2d:1c:48:0c:80:42:fe:05:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5ab85e6a-8753-44cf-9b6d-85f8798311f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c5:d3:09:9e:c4:36:27:79:b5:81:85:7f:5a:
                    46:ad:c2:63:3f:84:01:c4:8e:31:12:00:b5:30:8d:
                    65:7e:e3:72:90:1e:1a:78:b3:cc:ce:5c:1a:bb:19:
                    1f:d4:f3:c8:cc:cd:1f:38:3b:0b:af:a0:ef:8c:54:
                    82:e4:05:b1:c9:df:da:f1:39:e9:17:5f:ab:3a:e6:
                    69:f3:6d:33:9f:c5:d4:e0:a9:a2:f1:b3:34:fe:37:
                    e5:66:b9:52:b2:b1:75:28:ec:35:4b:44:18:d6:74:
                    0e:a2:9e:ef:cd:7a:be:46:58:9d:6f:4a:89:dc:2d:
                    c1:26:15:49:28:2a:03:c9:50:56:da:1f:ca:7f:de:
                    ab:f7:4c:9c:3b:69:94:a5:f3:d7:7c:41:46:a3:fd:
                    d6:b1:f1:c7:9b:56:9d:ba:7d:b5:ea:95:c2:74:56:
                    7a:ce:0b:52:b1:81:4d:a9:7e:2c:71:86:e8:ba:23:
                    ae:65:0e:73:19:37:c9:68:dd:cf:dd:72:c5:f7:e6:
                    1d:f6:97:e3:76:0c:26:1d:ff:a0:a5:f3:c7:55:90:
                    de:7c:7c:93:c0:eb:9b:f1:34:b3:48:0b:40:0f:4d:
                    18:55:d2:4a:6b:31:63:fa:3c:e6:cc:57:2e:d0:7c:
                    cf:7a:16:87:4a:2b:9c:8b:ce:63:1f:d6:8b:1f:c4:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:81:E2:53:EA:CC:D3:70:19:04:F7:20:47:FC:02:1C:59:E2:41:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dd9fcfa7-8c7e-3f99-946b-e22b7cab8967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:3b:3f:3a:91:38:50:a0:73:60:76:2e:72:0d:5d:a2:19:43:
         48:84:1d:a9:81:23:1e:cf:96:11:64:11:b8:e6:35:a7:fa:b8:
         e1:fd:84:dc:c6:27:30:07:69:9c:a4:63:6c:42:2b:84:50:e2:
         11:c7:d5:56:cf:a2:30:c5:1e:b0:fb:57:66:5a:5f:b7:f2:3a:
         68:1e:76:3b:e7:3f:f9:e1:b0:75:e4:38:be:2b:d9:79:f3:25:
         42:94:77:12:ab:79:2d:38:ad:88:f2:87:19:86:78:25:63:00:
         7b:51:01:fd:86:bb:52:55:22:43:cb:71:fa:da:2f:ac:89:d8:
         c3:d0:39:e2:14:94:59:35:a6:b8:25:13:8b:a7:62:a2:f8:c3:
         ca:87:4e:91:23:55:c2:b2:0c:41:82:2e:62:bd:70:33:c8:fe:
         10:75:39:f5:5b:68:71:7a:50:8c:37:ea:f8:cf:d4:32:d2:a5:
         db:12:0d:56:10:24:d1:b8:c0:0c:48:72:94:6b:f3:a7:28:a1:
         6f:53:0f:ae:0b:b8:d2:f0:1d:59:46:3f:57:f6:94:cc:00:46:
         98:02:d4:1b:49:de:62:8d:e2:59:a4:8e:b1:ef:f9:24:c9:2f:
         16:a1:38:d3:22:55:b7:90:95:d2:1e:91:01:13:0d:ef:4a:40:
         f4:58:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:20:48 2025 by rpki-client