Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa
File:                     1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa (raw, json)
Hash identifier:          gX2uW0f2drb8OEHIGCGz7wyz6l/07oLnGnV1wesZuyo=
Subject key identifier:   11:9E:31:2C:C5:E4:EB:B4:78:15:30:63:79:8E:23:F1:6F:B7:15:38
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F4328584A96368AE965497D1639083540
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     54054
IP address blocks:        192.110.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8a:e9:65:49:7d:16:39:08:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=81abee41-bedc-4197-a9c7-84c0f033ae04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:ea:e1:59:d3:9d:73:30:fc:e7:73:fb:d6:
                    b0:3b:12:d3:d9:38:30:6d:ce:16:a6:a4:ad:0d:d3:
                    70:00:2d:7a:42:dd:2d:be:1f:75:d8:9b:54:ec:c9:
                    41:4a:b2:23:58:bd:94:c2:31:4a:26:0a:df:eb:9d:
                    10:b5:c9:d8:10:96:be:f8:9c:10:98:6e:ee:ba:af:
                    bd:b7:1c:bc:8b:90:88:03:66:d1:2f:53:2e:bb:9e:
                    d7:7d:30:19:cc:86:3f:df:f8:ba:ce:f6:b2:65:cb:
                    dd:25:37:55:65:c9:e5:e5:d9:15:fe:f5:50:93:5d:
                    b3:da:e8:04:ea:58:30:7e:65:41:77:46:51:46:82:
                    bc:8a:a9:34:c5:d8:73:68:08:00:44:47:9a:5a:01:
                    14:b9:d0:2f:8a:c6:f9:d5:43:94:08:85:67:c2:ae:
                    e0:5e:1d:68:88:47:b2:48:3c:c3:ec:7d:a0:65:2a:
                    8d:e0:28:48:91:96:7c:99:01:2f:9c:be:77:33:a4:
                    23:c2:06:af:53:cc:32:3a:1e:05:ed:3d:78:18:94:
                    62:87:9f:5e:ba:83:88:ba:96:5f:1f:c6:59:98:bd:
                    48:6f:19:06:4e:a0:dc:84:3d:f8:15:26:1c:71:5c:
                    ce:12:59:c9:f2:b7:57:f5:ba:90:4f:90:0e:0e:87:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9E:31:2C:C5:E4:EB:B4:78:15:30:63:79:8E:23:F1:6F:B7:15:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.110.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:04:97:da:a6:d8:30:1f:29:9d:40:9c:39:6e:4d:71:ee:67:
         06:9c:0e:6c:95:16:38:05:11:8d:5a:71:6f:f0:b1:ae:6c:b1:
         10:2c:8e:a3:e3:9e:d8:63:5a:50:e4:41:79:ef:ef:f6:e5:73:
         70:df:51:2f:b7:f2:4e:c1:89:98:21:95:ec:5a:45:0f:e2:9a:
         c2:b3:74:4c:c6:0c:df:01:8b:9b:95:6c:cc:ff:cd:e7:48:b7:
         83:f9:9f:9f:a2:b1:24:2d:83:4a:63:4d:81:1f:5f:cf:d2:df:
         50:cb:e1:e0:d6:e2:aa:04:3f:56:ec:21:8f:0d:66:15:41:c2:
         0f:39:dd:95:69:84:c1:89:50:6a:f8:86:63:5f:bb:55:8f:2a:
         ef:ee:0b:bd:94:9e:da:62:5d:3f:ca:40:64:00:b2:c3:42:39:
         1d:6e:cc:db:0f:b7:37:7b:f7:d3:88:72:c1:bf:2d:1b:97:76:
         5a:2e:1b:49:7a:64:6c:02:73:d4:d3:aa:86:2b:7d:6b:f7:f5:
         e6:b9:2a:4e:b2:91:e0:05:50:4c:af:87:02:17:56:95:3e:c2:
         8b:45:a0:0d:00:5f:4a:4e:f2:26:8c:f7:b1:ad:c8:7f:29:5e:
         68:3b:cb:c7:d7:3c:a5:5d:1a:98:b9:d1:2c:e3:89:34:7e:a1:
         97:44:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 20:27:11 2025 by rpki-client