Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/5922d6c0-2307-3d06-bf32-7cbc12eaf61c.roa
File:                     5922d6c0-2307-3d06-bf32-7cbc12eaf61c.roa (raw, json)
Hash identifier:          6VdYj46wn//e5Q5Sactgid7P+N4AA+bEGzV3j9JIcjw=
Subject key identifier:   85:50:20:99:02:DB:74:CC:11:E0:7C:40:AC:D6:A0:C7:38:C8:8B:15
Certificate issuer:       /CN=8fdaa083-5b1b-4810-b0a5-c4984449067c
Certificate serial:       010D0C9F4328584A89A61BF90D1E41341BC33800
Authority key identifier: 0A:F4:7C:8F:CE:19:1C:E6:4B:91:4D:0A:58:20:35:39:A4:8B:CB:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/5922d6c0-2307-3d06-bf32-7cbc12eaf61c.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     327782
IP address blocks:        192.69.19.0/24 maxlen: 24
                          208.70.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:1b:f9:0d:1e:41:34:1b:c3:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdaa083-5b1b-4810-b0a5-c4984449067c
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=1b967aa3-8ec0-42f7-b3f9-3d1e69066282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:31:f8:70:30:fe:af:c2:22:37:c1:a1:4a:
                    df:86:70:81:e3:a8:8a:7e:7b:09:7e:6e:ba:7e:a0:
                    37:ae:5f:f8:4d:a2:27:b4:b3:85:53:ed:e3:13:f1:
                    89:29:3d:0b:e0:3f:32:7f:3f:64:0f:29:34:88:b6:
                    71:b8:e1:9f:fa:1f:aa:7b:5d:1a:b6:c8:a2:fe:bd:
                    3d:cf:c1:6a:01:fe:3d:cf:79:00:e6:4d:9d:ab:f8:
                    f9:15:d3:23:a8:65:ad:dc:70:17:55:51:55:4a:98:
                    d1:07:17:1d:7a:50:e5:cc:f6:36:d7:f6:69:f5:6d:
                    ea:d1:be:76:4b:58:7a:4b:dd:78:b7:b1:86:f6:39:
                    2a:80:aa:eb:70:e2:6b:40:1d:26:4e:ab:c5:00:3e:
                    82:b6:d4:67:09:cd:ec:d8:38:8f:a3:9f:7a:3b:4f:
                    77:c5:d6:29:44:a5:d5:bf:9b:71:7b:e2:9d:e9:b0:
                    ab:21:ce:cb:15:9a:14:d0:3e:52:1e:d9:18:bb:08:
                    af:ce:18:ff:f3:41:09:16:54:6f:c9:08:ba:dd:b9:
                    8f:10:6e:d5:5c:b6:04:a8:a9:cf:7b:6c:10:58:f3:
                    90:e2:02:ef:92:69:73:96:54:de:ff:2a:59:c3:90:
                    40:79:a2:bb:f2:ac:a8:41:7d:98:bd:cc:71:51:0d:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:50:20:99:02:DB:74:CC:11:E0:7C:40:AC:D6:A0:C7:38:C8:8B:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/5922d6c0-2307-3d06-bf32-7cbc12eaf61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:7C:8F:CE:19:1C:E6:4B:91:4D:0A:58:20:35:39:A4:8B:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.19.0/24
                  208.70.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:25:da:bb:c2:e0:a2:03:a7:7f:e0:ca:45:16:94:ac:46:3e:
         f9:88:7b:78:eb:c6:15:d7:2c:0a:06:51:67:2b:e8:12:53:49:
         bc:26:80:73:ee:ec:10:a8:6e:08:2f:af:10:a9:6a:90:cd:50:
         d0:04:f0:90:6a:3a:6f:90:86:6a:85:a6:7f:0a:a5:3f:51:5b:
         2e:47:eb:c2:17:e6:be:e6:b6:cc:e9:e0:cf:37:0f:2f:d9:43:
         f3:9d:28:f6:27:f6:69:69:ce:0c:e7:9c:2d:44:ac:86:9f:a5:
         c7:45:6d:d3:ac:d5:90:27:07:2c:94:ea:f0:cd:06:70:d4:1d:
         de:bc:97:36:b9:f0:de:96:ee:36:65:c0:bc:0c:39:6f:aa:cb:
         bd:6a:f8:01:9e:43:50:78:4e:65:ba:20:94:ef:06:e9:b9:d0:
         b7:0e:be:40:18:7a:0d:33:a4:8a:4b:9b:59:37:69:63:bd:45:
         d3:7b:d4:e2:ca:d0:69:26:00:80:d2:25:3c:cb:55:4e:02:87:
         da:90:88:47:e5:e5:c5:04:10:c1:0e:96:ba:56:f0:e9:a5:fd:
         5d:d1:07:0e:0e:37:6e:24:72:02:38:2c:82:1e:54:11:0b:ef:
         9f:f5:2f:84:27:a3:d8:f1:4e:40:d8:14:31:c0:38:8d:cf:51:
         57:6d:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:27:20 2025 by rpki-client