Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cfe38164-9925-3474-b313-5d1f2f118da1.roa
File:                     cfe38164-9925-3474-b313-5d1f2f118da1.roa (raw, json)
Hash identifier:          ZbA2ejsf+h8FT32i9oUjYelZ3tuBTssy1vNo04tI2L0=
Subject key identifier:   74:B7:1E:4F:E8:24:23:3A:95:D7:5A:22:8C:82:2F:05:AA:04:18:87
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584AAB266308EAD2B7710A187FC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cfe38164-9925-3474-b313-5d1f2f118da1.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     202
IP address blocks:        192.56.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:63:08:ea:d2:b7:71:0a:18:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=31f4082f-14a8-4b97-b9f3-42552b81fd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:e8:de:5a:18:64:de:4b:48:64:19:4a:c4:
                    a3:42:02:33:30:61:5f:d6:13:77:9b:8b:b5:6b:3e:
                    ca:e8:31:87:09:4f:d4:66:38:a2:bd:ad:5f:52:e2:
                    94:8b:0d:c4:5c:cf:cf:ad:a7:12:8b:81:a9:68:d0:
                    80:3c:21:9f:59:05:85:45:b8:40:7f:8e:07:a0:0d:
                    68:ac:33:54:fd:4f:91:7a:ba:19:50:14:fa:57:d4:
                    15:51:bd:f3:bd:e2:32:40:7c:b5:55:e7:95:51:f9:
                    cd:26:b1:a1:7b:95:42:c7:e9:a2:2d:23:84:cf:ea:
                    0d:6d:e9:3c:5c:5e:b0:ea:15:3e:b8:03:20:02:c3:
                    fe:34:6a:36:17:e1:e1:39:3d:7b:48:19:b1:b8:a4:
                    d3:c1:56:68:82:94:1d:54:ba:a8:dc:63:24:0b:12:
                    53:c6:bd:b0:66:ce:68:93:48:e1:11:67:57:19:2f:
                    7c:2f:45:ee:cd:3b:7c:60:b3:3d:5c:f6:93:3c:b8:
                    59:84:b0:32:9b:10:3f:7d:19:ed:da:52:10:0c:a4:
                    59:5a:68:9e:ff:e4:94:e3:bc:91:46:c1:8f:02:70:
                    d4:6c:46:41:ec:44:75:d8:0b:21:b5:ff:c5:11:7e:
                    d9:0c:7a:f6:82:a4:47:a9:ff:14:02:6a:ef:88:40:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B7:1E:4F:E8:24:23:3A:95:D7:5A:22:8C:82:2F:05:AA:04:18:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cfe38164-9925-3474-b313-5d1f2f118da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.56.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:09:3d:78:d8:78:81:68:ed:79:b9:4f:fe:a6:5e:0b:21:76:
         4c:ed:ed:13:ca:03:f9:d3:17:f5:d1:67:68:43:05:95:e7:7f:
         3e:bc:37:af:ce:4e:36:ca:52:9c:14:b2:64:4e:da:6a:da:7c:
         d0:91:c9:34:43:60:9f:80:19:af:9c:8f:2d:f4:8f:f3:c8:14:
         7d:fc:be:26:86:79:e5:fe:82:eb:a2:d7:b7:4d:4c:ed:e7:b2:
         d0:28:30:1c:29:fa:ff:9c:ee:bc:c7:c8:db:84:ae:2b:3a:fa:
         87:d4:9a:28:ff:49:bf:ff:ff:a6:6d:35:da:dc:52:80:49:06:
         1e:b6:50:2b:b4:c2:72:da:b3:7d:e0:52:4c:c8:7c:68:5e:9e:
         f9:c4:28:80:38:a9:54:5d:e9:07:8f:8a:13:fe:da:74:38:1b:
         49:fc:1b:82:70:32:46:4e:99:4e:4a:50:eb:39:2f:e1:e5:ed:
         97:5b:20:a6:27:60:b6:8d:5b:c4:99:3d:91:5f:79:67:aa:70:
         fe:88:7f:13:c2:4f:cb:ed:f1:f0:99:39:37:88:e5:dc:0f:85:
         b1:a2:4e:3d:bd:ae:33:a5:c1:26:fa:b3:82:d8:10:83:2d:dc:
         3c:94:40:bf:9f:62:e9:54:6a:f8:20:42:82:bb:d5:0d:50:e2:
         02:0e:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:14:45 2025 by rpki-client