Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ec95648-e970-3881-a3ff-16815631726b.roa
File:                     5ec95648-e970-3881-a3ff-16815631726b.roa (raw, json)
Hash identifier:          RAJn8MGazXE+eRJ+xuWwk/8ZDkcMllolcfxK0KMitz8=
Subject key identifier:   01:64:B1:E5:9C:37:87:60:6C:D5:AE:D4:1C:E0:10:07:C3:F0:13:11
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584A6DBB43BC352DD108D578B3C0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ec95648-e970-3881-a3ff-16815631726b.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     204325
IP address blocks:        192.228.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:43:bc:35:2d:d1:08:d5:78:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=cdb15e61-3a3d-459b-97fc-c65a7c8c71c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:81:70:6c:9c:e4:ec:95:3f:1a:56:1c:65:
                    7e:4b:73:f4:7a:cd:0d:d0:7d:91:e4:b2:f0:33:62:
                    d5:8f:19:77:2f:a8:c4:53:78:d5:12:da:0c:98:3d:
                    b4:67:25:0b:38:e5:04:40:af:6e:02:c2:7d:0e:9c:
                    ce:f3:42:6f:14:f9:2b:b2:66:99:22:88:9b:30:53:
                    cb:f3:76:90:8b:47:a3:22:52:7b:72:36:a8:5b:c4:
                    cd:21:c6:3d:08:6a:55:ae:c1:53:d9:0f:1c:00:b4:
                    5f:83:2f:7f:a5:ba:0e:d4:e3:28:21:e2:26:26:eb:
                    7a:ee:d5:3a:f7:db:93:b4:1a:81:a3:ee:3d:f1:69:
                    16:49:85:d0:dc:a0:68:f0:70:10:56:0a:9b:49:b0:
                    2d:c8:ab:a0:c8:97:bc:88:6d:20:11:b1:0a:ed:9c:
                    32:4c:be:e8:ac:df:9f:af:87:ad:92:c8:5d:93:79:
                    59:2d:a1:c2:d4:6d:0a:5c:71:56:26:4a:b8:6b:19:
                    19:ef:68:09:76:40:0e:84:55:2a:e2:d8:d8:f0:6e:
                    cc:c7:f9:1a:37:66:d1:f6:9b:3e:42:c1:ef:68:e3:
                    18:db:0c:ce:ec:8c:c7:6e:0f:61:65:3b:21:f2:2f:
                    7a:bf:d5:7c:a0:d5:01:6e:b5:9f:e1:90:04:ac:e5:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:B1:E5:9C:37:87:60:6C:D5:AE:D4:1C:E0:10:07:C3:F0:13:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ec95648-e970-3881-a3ff-16815631726b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:52:d1:f7:70:6e:13:6a:0b:b3:af:01:48:f0:7c:dc:d3:37:
         dd:bb:39:e8:11:0b:ea:af:a8:35:ae:52:cf:3e:a5:07:2c:d3:
         aa:b5:97:ee:f2:f5:5f:64:ca:da:5c:ff:c7:c1:db:85:db:2b:
         b5:35:01:d7:67:91:ee:ad:bf:ef:3f:98:31:80:c3:ca:9d:04:
         21:9d:be:29:45:49:6f:5f:b0:97:fe:1a:d9:67:24:76:9d:99:
         2c:12:6f:8b:49:db:4c:b7:02:57:3c:71:51:3f:c8:68:da:2b:
         1d:fc:c5:22:f3:66:8b:5a:21:19:b9:be:7a:03:cd:07:66:85:
         4c:d1:e8:e2:99:94:5e:b8:8d:e6:a0:da:28:98:2e:84:c2:81:
         c6:68:64:09:b7:0e:d2:49:75:46:25:4a:f3:65:7c:1e:c5:e2:
         cb:3d:af:34:38:95:c1:05:a4:a4:9f:aa:4d:1e:7f:f2:1e:b1:
         ff:79:34:bf:5d:19:52:40:bd:80:c4:04:93:5b:25:ca:84:bc:
         39:2b:1a:14:21:8b:93:63:b9:58:9a:2e:63:12:fb:fc:46:71:
         62:26:ca:5d:e0:7c:17:b8:43:58:62:26:c1:42:b6:e1:5c:5c:
         94:67:3a:37:6a:43:ec:b9:de:f6:cf:ec:95:70:79:f6:a1:ad:
         08:6e:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:29:40 2025 by rpki-client