Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/1d70c205-aba6-3a2c-affc-5f260fa928c3.roa
File:                     1d70c205-aba6-3a2c-affc-5f260fa928c3.roa (raw, json)
Hash identifier:          7L2b4K95UsTUCtPwKcxaHVH1XdQNJCDeUAqr5EJWXNo=
Subject key identifier:   72:CF:CF:A0:D7:99:CD:8C:82:96:5D:25:AD:AF:27:43:15:54:D2:79
Certificate issuer:       /CN=0b99ce08-7f33-418e-bae3-01cb3673c06f
Certificate serial:       010D0C9F4328584B1D9C2B7FFBD06395C4A63B80
Authority key identifier: C2:BA:EB:1E:1F:85:D7:8F:EF:91:B7:67:E8:16:74:97:1A:3F:1B:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/1d70c205-aba6-3a2c-affc-5f260fa928c3.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     26649
IP address blocks:        192.136.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/0b99ce08-7f33-418e-bae3-01cb3673c06f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/0b99ce08-7f33-418e-bae3-01cb3673c06f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:2b:7f:fb:d0:63:95:c4:a6:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b99ce08-7f33-418e-bae3-01cb3673c06f
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=1f53b21e-9e12-4d61-86d8-4d5d47d3d18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:c6:6d:e2:0a:70:83:d4:44:2c:aa:d7:56:
                    24:0c:a6:d3:9e:65:1d:3a:a2:0a:ae:3e:e3:31:99:
                    c3:00:a8:6b:cf:e8:a8:b8:9f:1f:76:da:ff:17:d6:
                    49:6c:9f:09:bc:d2:69:e2:75:1b:63:bd:5a:cc:1a:
                    d5:f6:a2:c9:ad:fc:c8:e0:5b:3a:f2:c8:03:56:9b:
                    f1:01:97:90:5b:73:be:1f:0d:b4:ec:01:e5:80:63:
                    f2:65:ca:fe:dc:dd:bb:f3:df:b7:99:20:a2:a1:0a:
                    88:bf:11:51:21:b2:78:7b:b1:fc:ff:6c:17:e8:43:
                    09:35:bb:62:7b:f0:34:b0:08:02:25:08:24:00:87:
                    34:f0:9b:bf:b3:70:7d:cb:cb:4a:43:08:93:7f:8f:
                    cd:f0:9c:f5:e4:87:ac:f9:3d:e8:d3:56:fe:eb:ab:
                    e9:15:45:6f:2e:cb:9d:cb:dc:56:52:db:f3:84:16:
                    57:03:3a:f5:25:16:2e:2b:25:6a:4a:bd:2f:8f:3f:
                    d6:a0:58:40:ec:c7:11:ff:32:06:21:c8:4a:6d:39:
                    ef:f1:24:b2:40:fb:73:5c:68:04:0d:bb:e5:ec:45:
                    19:82:f6:45:86:d2:7c:2a:6e:6e:91:c4:09:7a:1d:
                    2c:0a:47:ef:ba:b1:9b:89:8f:e8:df:35:f2:5d:c5:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CF:CF:A0:D7:99:CD:8C:82:96:5D:25:AD:AF:27:43:15:54:D2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/1d70c205-aba6-3a2c-affc-5f260fa928c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/0b99ce08-7f33-418e-bae3-01cb3673c06f.crl

            X509v3 Authority Key Identifier:
                keyid:C2:BA:EB:1E:1F:85:D7:8F:EF:91:B7:67:E8:16:74:97:1A:3F:1B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:c5:ef:fa:05:89:a2:42:92:10:c8:d9:50:5d:86:43:54:
         b9:47:3e:65:1a:42:e7:ac:f4:7d:e7:a1:d8:63:5f:4a:76:78:
         8b:3a:c6:77:f4:8c:87:28:43:33:61:84:f1:2e:0c:a7:10:31:
         ae:f1:4b:6b:86:7e:a9:d3:8f:f2:24:f4:1e:e1:e8:32:14:64:
         ae:54:09:9e:1d:37:e9:b2:32:37:14:e5:cf:50:b4:15:98:6f:
         00:b4:b7:e4:82:5e:f9:ff:ce:72:cc:52:8f:e1:8a:c9:14:3d:
         33:64:9b:72:ea:ea:48:1b:17:23:11:58:39:8e:44:55:de:e1:
         4d:50:10:2c:79:38:94:b5:57:92:d3:ae:28:d0:88:85:4c:65:
         d4:5c:38:70:47:0e:ef:cd:cc:2d:6b:ba:40:09:ab:82:3e:af:
         a0:e2:c5:dd:8c:da:27:85:de:17:e2:89:a4:61:32:fa:70:4a:
         90:16:60:60:b9:f5:36:12:9a:61:41:3d:05:2a:66:4e:45:50:
         14:f0:02:23:1e:6d:30:06:bd:62:dd:b3:09:ef:50:90:84:00:
         1a:53:64:d5:99:2a:9e:02:f0:fd:97:7a:28:63:00:f0:d4:ce:
         60:0a:3a:7d:43:1e:9e:fe:58:85:1e:e5:af:32:3c:3f:8c:39:
         c8:9b:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 22:48:24 2025 by rpki-client