Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa
File:                     4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa (raw, json)
Hash identifier:          qF6OcIf6K1wZFQ2knK/fOcvLQO0Ry6PX+gPgeSCd52c=
Subject key identifier:   A3:C3:9D:B8:7C:9A:62:DF:5E:83:11:40:5F:98:E0:1E:99:00:A5:C2
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584AF7EBDAEF1833EAE05927E100
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     30045
IP address blocks:        192.219.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:da:ef:18:33:ea:e0:59:27:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=779c3b00-2b2d-4b1b-91eb-be0dd9522a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:7e:4e:9f:de:d2:55:f1:3b:e9:79:0b:ae:
                    cf:ed:a7:82:b6:22:82:5b:15:c2:83:50:c5:18:80:
                    20:3f:a9:fc:03:8e:89:58:bd:8a:46:0c:67:a9:16:
                    a2:4e:01:3e:b8:4a:b7:49:34:17:39:b8:0b:31:e0:
                    be:22:ee:9f:f4:85:a3:98:43:66:6c:56:ff:21:17:
                    32:2d:45:74:36:e4:8f:3d:83:14:62:81:22:22:d6:
                    6c:6d:4c:44:91:6c:82:3b:64:f5:5d:49:f8:77:41:
                    b5:1d:0c:db:0e:9d:e2:c3:4c:ed:b2:19:20:7e:e5:
                    6e:3b:52:9b:3b:99:74:b7:d3:5b:3d:b1:7b:0c:5c:
                    1e:60:73:0c:34:e5:86:e8:2e:11:b3:03:aa:2d:f6:
                    c3:59:eb:ab:66:96:82:bb:ad:dc:f2:43:d2:d9:90:
                    c5:4d:8d:e3:40:fa:70:f2:09:80:ee:2b:35:c1:d7:
                    84:8b:88:a4:ab:c8:cd:88:93:49:cb:c9:96:e4:ef:
                    90:b1:86:89:99:72:22:ee:78:d7:74:0a:2b:2b:fb:
                    87:5c:dc:72:b0:9d:4d:73:00:15:d0:9f:61:cc:73:
                    8f:88:ca:79:06:20:9c:c4:f1:b2:b2:62:5b:39:ce:
                    44:ae:1e:bf:72:ec:64:9e:43:2e:ff:e3:72:f6:08:
                    fe:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C3:9D:B8:7C:9A:62:DF:5E:83:11:40:5F:98:E0:1E:99:00:A5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/4ff2818a-7e07-3796-b6a7-ef39d891bdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:a5:ff:b4:0f:d8:b0:16:85:dd:49:b5:53:a2:d9:19:4a:
         7e:16:69:c6:07:05:99:14:1d:66:ee:c3:db:4e:e4:bf:48:cf:
         36:51:b9:88:32:37:62:38:07:f2:51:22:21:f6:b6:1c:14:71:
         81:56:5d:89:db:31:f4:0c:ef:61:a1:08:54:c0:65:d1:d3:0e:
         c7:47:70:02:e4:78:a3:e4:8f:8a:1b:e3:96:9b:20:56:e5:6f:
         68:5e:a1:24:e2:ab:03:c8:8c:ab:1d:6b:2b:c1:f5:ad:51:c0:
         7a:2b:dd:ad:cc:b7:cc:21:f7:9f:53:db:0d:61:86:57:fa:10:
         bf:8b:bf:f5:74:4e:c0:04:ae:fa:3f:b0:bc:80:8d:34:7b:90:
         2b:12:0c:a6:a3:88:18:65:93:b3:38:0f:91:05:02:43:94:5f:
         da:11:c4:1a:24:4d:d5:0a:1f:5b:bd:90:12:76:bf:0c:3b:1e:
         3a:3d:6e:ae:76:e7:0d:8a:dd:de:45:34:82:80:68:ab:17:0d:
         24:ac:61:37:5f:41:71:65:07:1a:2d:01:1e:f9:87:14:8f:aa:
         bb:f6:6d:07:43:08:bf:b1:60:bf:d6:1b:3c:ab:c9:90:81:17:
         8f:0d:83:31:bd:74:19:09:93:99:18:e0:33:5c:3f:85:7f:36:
         57:87:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 16:26:43 2025 by rpki-client