Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa
File:                     1a8e232f-f83b-3de7-8816-63d5567cf47b.roa (raw, json)
Hash identifier:          qJ3z3TJQuVkqmTmjM/3kr7N31eQzutHsP5tG3RdLYbE=
Subject key identifier:   9C:76:D9:0B:EC:6A:A7:1D:D2:D4:B1:07:A7:3F:1F:6D:05:E4:44:DE
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584AF7EBDA6ACD04E1DC2183C140
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     30045
IP address blocks:        192.75.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:da:6a:cd:04:e1:dc:21:83:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=86c854f3-5b0c-484e-a66b-d9a2cbb628b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:b0:be:35:5f:66:89:0d:da:5e:16:9c:3f:
                    a8:3b:d3:61:75:f0:0e:b3:af:29:c0:85:39:25:61:
                    bc:1c:eb:46:5b:9d:e2:f1:22:7f:65:51:50:19:d0:
                    16:d6:9d:bc:52:88:12:cd:12:a9:b8:cc:3e:e4:91:
                    9a:5f:23:6c:d1:62:e1:06:36:86:96:9a:97:09:14:
                    3b:5c:1f:41:3b:96:da:2a:29:04:cd:d3:88:29:ec:
                    d2:ad:f5:dd:07:f0:4f:d7:81:40:43:6d:9a:36:6e:
                    ff:d8:f3:fa:61:ad:03:21:34:7c:1e:d6:a4:0a:1e:
                    7c:99:68:e5:f6:d4:14:d3:6a:47:3e:5b:5e:15:d9:
                    ad:44:50:a3:cd:ab:6e:ee:80:bb:bf:da:a5:30:b5:
                    f7:ad:85:6c:aa:ca:f2:ee:58:c5:0e:6a:47:28:17:
                    07:e4:c2:86:55:8b:9b:af:bf:6f:63:66:81:8c:b7:
                    d7:ba:ca:13:20:9a:c3:97:3f:e8:77:46:63:ac:df:
                    b9:11:cc:69:e6:c2:27:91:86:da:07:d9:23:40:7e:
                    1e:d9:c2:23:d3:31:5e:7f:5d:6a:3e:03:a3:44:1e:
                    62:51:ec:da:0c:a8:30:8a:ae:fb:6e:a6:52:cb:d0:
                    29:d3:dc:d7:a0:72:1e:68:09:97:a1:e0:1f:0f:3f:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:76:D9:0B:EC:6A:A7:1D:D2:D4:B1:07:A7:3F:1F:6D:05:E4:44:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:79:b3:91:56:00:b9:c6:25:b9:e5:10:77:a4:a1:ee:90:0b:
         45:a9:65:ee:e9:f6:b0:18:45:51:f5:e1:79:73:74:ae:0c:63:
         14:e5:07:bb:13:2d:51:70:19:84:8f:ec:74:d9:f1:41:bc:38:
         a1:84:3b:6c:ba:c8:3f:aa:26:45:38:d6:42:d3:37:ee:dc:76:
         04:fe:60:f7:bc:85:e2:f3:3f:da:e0:5e:45:91:c9:59:66:6d:
         2a:27:d8:1b:18:11:7c:c9:b3:a0:1f:fd:39:98:a5:08:0e:ea:
         ea:aa:ac:56:68:f9:9a:7e:22:24:1d:4a:68:f6:ab:5d:28:c8:
         41:76:f3:6c:93:9e:cd:42:41:9e:73:88:58:40:41:ef:f4:d2:
         c2:1e:dc:57:2d:30:5c:5c:02:3c:39:a9:c4:37:5c:b2:fa:f9:
         f6:81:1d:d4:d6:fd:d4:61:af:b3:0e:3d:31:28:5a:69:f3:39:
         bb:52:4b:47:3f:dc:09:cb:f4:e7:ca:f0:77:a8:7c:a9:45:2f:
         09:7e:8d:c6:7d:e6:9d:47:e0:94:b8:26:22:33:58:7f:32:60:
         71:83:3d:21:14:6a:99:70:f2:79:a1:25:28:53:d6:b2:a3:40:
         45:f7:0e:a9:1b:4e:02:87:c5:90:69:0e:56:4c:78:3e:1c:c7:
         07:1a:87:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 16:23:18 2025 by rpki-client