Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa
File:                     82081b1c-a2de-357f-81fd-69a40673670c.roa (raw, json)
Hash identifier:          vaADe+d/brBB4oNldxqPUz0dNa3dFw7rxshAQmY0aCs=
Subject key identifier:   2D:4A:5E:9D:EA:EB:0E:87:FA:C3:EA:ED:28:A8:81:E4:2A:1A:4B:6C
Certificate issuer:       /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial:       010D0C9F43285849EA852073C91F2A93A7894380
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     160
IP address blocks:        192.5.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:20:73:c9:1f:2a:93:a7:89:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=0c74e85d-3e41-46d2-8209-a78369654aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:8d:3e:64:4b:41:f4:46:c1:41:b1:7b:d5:
                    ca:02:6a:45:1e:1d:74:f0:89:87:08:1f:dd:58:df:
                    14:7a:e2:29:ed:3a:a3:e5:aa:d2:66:af:b2:cb:36:
                    62:62:7d:93:b1:68:d8:3b:e7:18:65:52:83:67:53:
                    3f:63:d8:cc:62:4a:a9:ed:64:40:c1:f2:11:72:30:
                    82:75:68:ea:13:7a:13:97:6a:c8:e6:1f:a8:8c:d1:
                    d6:4e:25:ff:83:7e:6e:b5:9d:50:ca:e2:31:af:a6:
                    e1:7f:d0:86:7d:ab:8a:1d:a3:17:74:4d:75:8d:c4:
                    3c:95:97:77:b1:23:bd:28:41:fa:f6:46:a0:20:e6:
                    38:28:2d:c9:f5:4a:e0:af:05:3c:c2:dc:6d:27:1c:
                    5c:23:a4:29:39:40:e6:6d:e2:38:07:2c:27:d1:f4:
                    11:2d:91:3c:27:e2:39:3a:b7:1b:fe:6d:ee:f6:cd:
                    86:ad:ff:45:48:55:d2:8c:75:08:68:81:ef:39:d0:
                    96:9b:27:15:55:d1:d5:ec:03:c0:9c:5f:18:d5:bd:
                    85:41:e4:37:8c:cb:30:8d:f1:a7:63:6e:1a:ad:87:
                    40:6b:04:36:8c:01:71:72:50:e5:1d:e3:fd:3d:ed:
                    c9:7f:73:73:d1:c2:30:72:10:1b:c5:53:35:8a:c9:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4A:5E:9D:EA:EB:0E:87:FA:C3:EA:ED:28:A8:81:E4:2A:1A:4B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:57:7e:14:dc:86:92:49:9c:fd:f6:e3:bd:a3:86:f2:41:
         ac:f5:a3:91:0e:19:7b:19:ec:d0:c7:c6:e5:dc:39:26:cb:68:
         48:56:16:a0:67:8c:46:35:90:39:9f:69:4a:f9:b4:a7:5c:46:
         11:f0:44:a2:51:22:85:94:57:ed:95:ca:c9:5c:e1:f3:99:53:
         02:25:c2:1e:98:42:e7:8d:fe:93:df:31:a9:c6:fd:03:4f:ec:
         73:c3:2e:65:12:3f:ff:30:7d:0f:ad:f5:9b:5f:d6:74:cd:f4:
         8b:61:e2:89:df:f4:43:81:67:ce:c9:5d:1b:59:c1:34:dc:13:
         b5:bf:70:02:d1:da:e0:5b:4b:88:d9:d3:ae:2f:5d:b0:53:d9:
         aa:cc:60:f6:10:5d:4a:49:be:ab:f1:9a:64:27:c2:7b:28:81:
         a2:8d:38:15:2e:38:20:6e:e7:3d:d9:ed:43:6d:ac:a5:f4:e5:
         5f:90:4e:4b:e0:5e:5a:c0:32:e6:98:46:e7:0b:02:c5:4d:99:
         71:4f:69:a1:5d:95:dd:cd:f4:e1:f1:74:a4:8c:66:c5:78:23:
         bb:c2:3b:75:b5:f0:6d:e0:bf:c2:94:c5:fb:4b:31:63:cd:6f:
         2a:88:5e:ba:f1:b2:5e:3d:79:43:af:fa:29:b1:ae:4b:ba:d3:
         5a:02:53:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:51 2025 by rpki-client