Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/c933b5ce-7beb-3446-9fd7-c6d659f71ae1.roa
File:                     c933b5ce-7beb-3446-9fd7-c6d659f71ae1.roa (raw, json)
Hash identifier:          XknemgSdBkb0XcsKCAd0Dx5Hf7hHqnXArWSWoUa2rGA=
Subject key identifier:   DF:91:49:62:15:2B:AC:44:3B:31:B3:98:38:30:0C:87:E1:EC:3E:FB
Certificate issuer:       /CN=e8c42b27-ff84-461c-86a9-f001dd639713
Certificate serial:       010D0C9F43285849FCAA72CC564708943AA8A6C0
Authority key identifier: EA:A3:EE:F6:98:43:43:D7:D2:28:CD:D6:27:14:52:6C:A9:42:92:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/c933b5ce-7beb-3446-9fd7-c6d659f71ae1.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        192.195.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/e8c42b27-ff84-461c-86a9-f001dd639713.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/e8c42b27-ff84-461c-86a9-f001dd639713.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:72:cc:56:47:08:94:3a:a8:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c42b27-ff84-461c-86a9-f001dd639713
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=ffeae045-b8e7-4bc4-9f4e-9d075c15e14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:4d:f3:b7:1e:4e:cb:bc:ef:7c:92:3d:13:
                    0f:e1:97:ee:3f:33:5d:a6:e7:3c:bc:b0:50:62:c4:
                    f6:ec:f6:7a:d6:19:5f:7b:45:1a:c9:54:10:84:ba:
                    5e:01:fa:27:28:f0:91:b8:cd:a4:ba:d8:19:89:21:
                    25:0e:db:a7:8c:05:c3:54:1a:5a:bc:c9:23:03:94:
                    b1:8b:a9:36:5e:cf:74:bf:05:fe:74:40:50:1c:df:
                    b0:1f:35:ab:c6:09:55:0b:8c:33:3f:ed:b4:e5:6e:
                    6b:25:53:f5:e7:28:1e:65:bd:83:bb:db:b1:23:c2:
                    15:37:d8:f5:61:ed:eb:b2:60:b4:dc:83:1d:f5:71:
                    af:49:49:d1:df:04:36:3c:69:9d:44:12:d7:76:12:
                    ab:88:d9:af:c3:e0:84:96:87:4e:43:92:f8:47:a2:
                    aa:db:ea:d2:36:2b:aa:99:00:a9:76:86:b7:dd:08:
                    11:21:93:38:78:fd:f2:af:3a:69:fa:26:48:4c:1b:
                    65:db:e3:eb:64:fb:03:32:75:1d:2a:db:ba:b9:c4:
                    d9:5c:f6:46:b4:e5:48:88:34:00:12:3d:27:40:c4:
                    09:c9:a0:ad:0c:ee:05:50:c2:f3:89:9d:72:60:a8:
                    a0:99:2e:0b:bf:85:6a:b6:3b:c3:fd:71:d2:11:f2:
                    08:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:91:49:62:15:2B:AC:44:3B:31:B3:98:38:30:0C:87:E1:EC:3E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/c933b5ce-7beb-3446-9fd7-c6d659f71ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/e8c42b27-ff84-461c-86a9-f001dd639713.crl

            X509v3 Authority Key Identifier:
                keyid:EA:A3:EE:F6:98:43:43:D7:D2:28:CD:D6:27:14:52:6C:A9:42:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:43:01:00:5a:fd:52:11:e6:96:55:68:b9:bc:30:ce:c8:2c:
         7b:ff:9c:47:81:8f:42:9b:1e:45:32:9e:42:4c:2a:ca:28:98:
         bc:a2:4d:fb:e8:be:57:23:70:d5:38:d0:72:5f:a9:89:2c:a8:
         ad:91:fd:13:e5:d0:ce:b9:96:47:7e:62:92:eb:0c:5f:87:fe:
         f5:33:94:e6:e8:47:48:65:75:e8:6b:55:79:18:e7:bc:9c:76:
         25:17:7e:67:38:e8:52:28:6e:ef:75:3d:ff:eb:9d:9b:8f:b4:
         9d:18:e3:2b:a9:0b:27:38:a0:65:e6:5f:c2:78:7f:7a:4e:96:
         09:44:1f:8d:6f:2f:d7:28:5a:35:87:37:20:33:97:0c:57:c2:
         b8:53:71:3c:f1:cd:21:d6:ff:fe:75:30:e5:b8:b3:75:35:61:
         f8:03:43:39:e4:56:a8:a4:ec:c7:d1:f8:22:01:56:56:e6:3f:
         f7:16:c0:79:75:d9:9d:63:d7:3f:fb:a6:5b:6d:4a:1c:f4:f1:
         0e:b1:65:1b:1b:a9:dd:cd:18:c9:6f:f5:c1:9d:8a:df:9a:0a:
         60:95:67:c7:67:a2:d5:c4:a1:be:c3:51:81:03:e5:da:64:ca:
         a1:a1:ca:35:4b:99:e9:ac:7c:04:90:ac:6c:bc:d9:a2:0e:a1:
         00:69:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:35:09 2025 by rpki-client