Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/0070c0e0-1019-3c1d-bf17-6661ed837c46.roa
File:                     0070c0e0-1019-3c1d-bf17-6661ed837c46.roa (raw, json)
Hash identifier:          7Be7FBru5+tu0dWRELIg1PmRLJbn3GRpVyvedSN18bg=
Subject key identifier:   FE:BD:7E:2C:68:6C:63:F9:B8:BA:76:88:FE:1B:F0:35:19:5F:80:34
Certificate issuer:       /CN=018c659d-c0a8-48c7-93fe-29a288a55593
Certificate serial:       010D0C9F4328584A9900B305110683ADE3751B00
Authority key identifier: 33:2F:12:1C:E9:7D:05:BD:0B:A0:1C:1A:84:7A:05:16:F1:1D:8C:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/0070c0e0-1019-3c1d-bf17-6661ed837c46.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     376
IP address blocks:        192.197.190.0/24 maxlen: 24
                          199.84.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/018c659d-c0a8-48c7-93fe-29a288a55593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/018c659d-c0a8-48c7-93fe-29a288a55593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:b3:05:11:06:83:ad:e3:75:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018c659d-c0a8-48c7-93fe-29a288a55593
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=2d02a02f-286e-4f29-a0e9-a93f128fb212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:13:a2:37:6d:15:af:34:a3:ee:cd:89:ca:
                    a5:ef:0a:3d:e3:c3:d6:1f:0d:cc:dd:46:34:7d:00:
                    af:c7:d9:56:ca:2c:b7:fe:95:1a:e7:fb:2b:36:07:
                    f5:34:53:e2:ce:54:3b:1d:50:33:9a:b6:ba:41:3d:
                    35:7f:33:ba:0f:c2:e4:96:cb:2a:eb:46:30:ff:c9:
                    a1:33:c1:35:b1:2e:8f:9a:df:41:3a:b9:5b:fb:1e:
                    e1:5b:48:0f:3d:8c:49:57:25:9e:33:44:d3:98:42:
                    0c:81:95:e1:df:78:ff:99:e9:d3:0d:10:55:02:72:
                    01:0f:99:aa:72:5f:5d:50:17:3b:10:2b:f7:18:a0:
                    3b:97:b0:1f:9a:42:9e:32:bc:5c:b9:9d:03:73:6c:
                    31:a9:12:42:38:be:28:ac:0a:aa:b0:09:4d:cc:e8:
                    cd:f0:34:c4:54:4e:52:11:e4:ec:df:70:3d:bc:b5:
                    d8:51:4d:7a:9f:c8:2d:45:42:f4:b0:70:de:95:fa:
                    ee:62:6f:20:e4:25:69:83:c5:98:2d:55:21:8f:69:
                    b2:3b:9c:82:7e:32:2e:10:70:05:f0:53:01:85:d2:
                    7c:b0:6d:37:60:a8:e1:31:fe:a9:ae:cf:1a:65:a2:
                    2a:d5:8d:65:69:28:c5:18:83:7c:f7:6f:be:e7:1b:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BD:7E:2C:68:6C:63:F9:B8:BA:76:88:FE:1B:F0:35:19:5F:80:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/0070c0e0-1019-3c1d-bf17-6661ed837c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593/018c659d-c0a8-48c7-93fe-29a288a55593.crl

            X509v3 Authority Key Identifier:
                keyid:33:2F:12:1C:E9:7D:05:BD:0B:A0:1C:1A:84:7A:05:16:F1:1D:8C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/018c659d-c0a8-48c7-93fe-29a288a55593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.190.0/24
                  199.84.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:cd:01:51:84:89:d4:80:dc:ac:2e:d8:cd:c3:96:bb:5f:
         6d:f7:60:92:89:d7:bd:9b:48:9e:a6:4e:14:89:77:08:d8:6e:
         68:22:c6:e1:a4:fc:4f:2f:50:23:ce:28:08:c9:7f:c8:14:87:
         0b:f6:05:92:36:76:8d:7d:c8:8a:09:f6:7a:cb:f3:08:de:15:
         dd:23:c4:e7:31:51:b4:4d:b1:b5:47:9b:b9:5b:dd:d5:da:3e:
         a3:b1:3e:8f:22:53:f4:9b:39:30:da:e2:44:25:2c:c3:7e:f6:
         54:78:b1:a3:35:20:10:e8:39:6b:e6:4b:c3:f5:79:89:e5:21:
         05:b7:3a:82:2b:dd:b6:a0:c0:13:5e:e3:6f:29:47:81:de:74:
         46:07:74:8b:df:c7:5e:7d:c6:b3:4d:22:8e:39:22:8a:6a:e1:
         28:10:b1:84:5d:be:b8:0b:56:cf:a8:ee:e0:9e:00:22:9c:08:
         b0:f3:33:1a:4a:5e:4b:4d:dc:6f:8b:f8:d1:e2:57:53:2d:f8:
         eb:c9:e8:db:0b:84:b0:2d:ac:1d:88:09:f7:8f:0d:9c:f6:c7:
         d6:76:93:23:3a:95:05:a0:13:43:29:8d:99:98:26:d2:13:cc:
         50:7d:03:79:3b:49:69:80:2c:ae:11:59:4c:4f:0e:b5:43:9c:
         c7:aa:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:05:18 2025 by rpki-client