Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/5d616ec8-7340-395a-9d6b-483ceb57914d.roa
File:                     5d616ec8-7340-395a-9d6b-483ceb57914d.roa (raw, json)
Hash identifier:          eFpaoo63v4rJMGEjmF5tyEH9GMnzpDki89b1y0Jt1QU=
Subject key identifier:   62:BC:F3:A6:A8:1C:47:B4:3D:E4:87:BD:D7:36:05:19:79:5B:40:24
Certificate issuer:       /CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
Certificate serial:       010D0C9F4328584AFC1C0B1003E13118C52A8200
Authority key identifier: C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/5d616ec8-7340-395a-9d6b-483ceb57914d.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     48252
IP address blocks:        192.163.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:0b:10:03:e1:31:18:c5:2a:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=6b0c1c97-6ea6-4ca9-b1c9-d5abc2e98a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a0:8b:10:9a:7c:9c:78:87:e7:00:5d:d0:0e:
                    5f:2e:7f:c4:da:23:f8:d6:64:2f:3d:9a:1f:5e:90:
                    a1:d6:16:fa:e6:da:fe:c5:32:95:bd:f0:0a:ee:2b:
                    6a:4c:7b:54:8f:02:46:e3:b9:e6:59:36:6e:51:97:
                    97:fc:6e:18:41:b6:af:ad:fd:0e:69:70:5b:63:4e:
                    a7:55:9f:8a:32:56:e7:21:8f:2b:64:b5:5c:12:a2:
                    d1:9f:b8:33:f9:71:fe:f5:36:63:87:7d:03:10:b3:
                    ea:67:6a:d3:b9:cb:d9:9f:65:c7:ea:73:28:72:c6:
                    84:73:82:89:29:b8:3d:10:fd:d3:ac:85:19:65:bb:
                    70:08:a9:e1:1d:21:f4:3b:e6:40:8a:c8:c6:e5:b3:
                    42:0e:aa:77:fa:37:79:2f:79:c6:5a:c8:ce:5b:b5:
                    2c:b5:f5:82:77:19:85:4b:45:03:36:25:34:f2:cd:
                    fc:4e:5f:ea:b5:70:4f:a5:32:3a:36:e6:40:f9:39:
                    81:49:60:1f:d3:74:c3:b4:ab:24:cc:40:f1:c4:5a:
                    14:26:e0:a6:07:5f:89:bf:c2:d1:7c:17:d3:8b:25:
                    34:9d:02:6f:e2:d0:5b:0d:fe:67:17:78:20:b2:07:
                    66:72:89:e0:12:9a:b0:05:4d:d1:45:c0:52:05:e3:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BC:F3:A6:A8:1C:47:B4:3D:E4:87:BD:D7:36:05:19:79:5B:40:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/5d616ec8-7340-395a-9d6b-483ceb57914d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:76:df:b6:66:ce:40:51:b9:72:e9:62:eb:24:37:d4:1f:
         0a:db:37:e4:6d:68:5c:96:13:49:27:d2:0d:27:18:cf:07:9a:
         95:15:b1:3d:61:53:37:49:bd:11:65:17:34:61:d8:8b:ed:fa:
         2b:34:0d:f8:89:62:6b:66:5b:b1:89:96:29:13:ec:fe:97:e0:
         0b:33:76:93:bf:fa:b7:45:59:1b:d1:0b:49:4c:85:f0:d7:90:
         14:91:48:b5:5c:4e:1b:f4:f8:c3:c1:99:ad:24:82:23:cf:27:
         f8:0a:fc:1a:64:00:6b:d7:61:82:d7:46:d0:04:2a:20:21:01:
         6a:b0:ae:db:05:45:ce:e0:11:cb:bf:32:8d:f0:b8:93:c7:0f:
         cd:86:6f:75:b5:ac:8f:50:0e:fe:05:05:4a:b1:e5:dd:38:16:
         94:ba:e9:45:6a:d0:ec:16:d9:8d:0e:06:1f:59:48:84:dc:cf:
         4d:7d:31:4c:4b:73:25:2b:1b:a2:77:7b:11:05:9c:05:23:05:
         b6:4d:8a:cd:95:fc:2c:85:46:15:8b:c9:7a:69:5d:b2:5a:a5:
         b3:99:48:a5:c7:5c:2d:92:a8:b2:12:31:36:eb:33:27:c9:2a:
         cd:16:25:82:28:4f:49:d4:91:af:4a:ed:d7:e7:51:ea:6d:84:
         03:0b:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:47:21 2025 by rpki-client