Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1329a6fe-9f7c-34b7-aec7-f02a5464d8c6.roa
File:                     1329a6fe-9f7c-34b7-aec7-f02a5464d8c6.roa (raw, json)
Hash identifier:          ARZ7CLO1Sjut7OjSrXlCr89V6nKK8wIxAgKyZVZ5DDo=
Subject key identifier:   F0:4F:94:EE:19:54:31:B6:F7:00:26:2C:C9:0B:FD:20:1D:64:CE:66
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849CBCFA13333BF9BA97236BE00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1329a6fe-9f7c-34b7-aec7-f02a5464d8c6.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     203
IP address blocks:        192.56.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a1:33:33:bf:9b:a9:72:36:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=7147eb09-0ac6-4936-8d60-976f5cb1fe24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:4d:95:0d:e2:04:81:33:2e:48:24:42:7e:
                    ec:30:75:24:ef:67:04:cf:4f:99:a4:00:78:29:b1:
                    63:b3:5a:fe:d2:1e:f8:16:80:b3:ee:f9:21:bd:dc:
                    23:99:73:6c:4f:68:2b:8b:ad:f5:7a:13:63:81:a5:
                    66:66:b0:85:46:04:62:d2:c5:f2:f9:6c:f8:0c:c5:
                    7d:b9:d0:34:3e:97:6b:1e:75:c9:25:79:75:be:86:
                    34:c8:9e:ed:11:e0:aa:13:ba:bc:ac:d9:1c:19:3d:
                    c9:3c:ac:88:49:28:cf:11:84:c1:d3:0c:bc:00:00:
                    41:64:a2:ea:83:a8:01:a5:49:2f:bf:65:95:a8:05:
                    98:84:df:98:29:b8:7c:29:e7:7f:02:ba:f9:19:9d:
                    78:ea:f6:49:80:21:8c:3e:c9:e3:cd:95:b4:a2:9f:
                    fe:2d:a1:e8:97:43:51:ad:47:4c:36:7c:62:ec:89:
                    a2:eb:cf:b9:40:2a:7c:24:68:1a:9b:8b:ae:d6:44:
                    a3:29:01:f7:57:dc:0f:e5:a7:20:fd:a3:fd:66:ad:
                    d6:4d:9e:9e:b7:8b:2d:38:ec:25:ce:0b:a1:4b:12:
                    3e:58:ad:39:82:c4:42:d5:f9:05:9d:9a:84:67:c8:
                    c9:a3:48:23:67:2d:7c:5a:97:1e:91:2e:b4:35:02:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:94:EE:19:54:31:B6:F7:00:26:2C:C9:0B:FD:20:1D:64:CE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1329a6fe-9f7c-34b7-aec7-f02a5464d8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.56.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9d:24:f1:7f:bd:be:03:67:ac:10:3e:24:f9:a5:c4:2a:61:
         54:b9:b8:72:33:39:63:32:ad:66:8c:06:7c:9c:62:91:c9:5e:
         3d:b1:74:53:64:6d:5c:a0:a0:ba:dc:13:c9:50:e2:bb:38:e1:
         65:aa:92:dd:bc:9d:0a:d7:fb:e9:fa:a5:53:fd:a6:9b:05:00:
         8d:5e:6a:78:f9:fe:e9:37:08:bd:33:f8:cb:d5:6d:a4:dd:8a:
         ed:25:07:f9:47:ad:47:b6:30:40:de:ed:99:ce:47:f4:3a:7b:
         12:a8:e7:f6:65:cb:b8:3c:00:e9:30:16:14:f4:d3:58:dc:9b:
         ec:61:4e:57:57:3b:ed:21:c5:23:4f:2a:32:b2:e9:9f:97:50:
         36:93:5a:df:70:07:4a:f6:c6:ae:1a:6b:bd:97:5d:fe:07:54:
         19:8e:ea:aa:24:21:bd:3b:f3:f0:b1:b9:59:53:fd:f1:27:02:
         f5:88:49:c6:ca:34:7e:34:92:f5:3d:48:df:2e:19:58:3d:d1:
         e4:3a:d7:c4:77:5d:20:c9:da:58:f8:10:26:48:7b:2d:0f:f3:
         1a:f7:cf:bf:5e:fa:b0:07:cd:fc:b5:0e:0a:1a:54:fd:df:45:
         44:ae:9e:51:35:66:3d:28:42:4b:b8:fa:87:d2:16:f8:f6:3f:
         a9:d0:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:57:57 2025 by rpki-client