Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/ba50671d-5d04-3117-96b8-c41c4c1e09ea.roa
File:                     ba50671d-5d04-3117-96b8-c41c4c1e09ea.roa (raw, json)
Hash identifier:          q5coZbU8tzO2aqpwlHQba1UKcvOmKnBcfOxol2BfKsA=
Subject key identifier:   CC:35:63:6D:0E:74:B7:10:F0:A6:18:1C:BA:35:74:35:7D:3A:2D:A0
Certificate issuer:       /CN=dfc88768-1b58-474d-a340-376827992098
Certificate serial:       010D0C9F4328584A46A5AF0E84692B1FBF1AA900
Authority key identifier: F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/ba50671d-5d04-3117-96b8-c41c4c1e09ea.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     401387
IP address blocks:        192.149.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:af:0e:84:69:2b:1f:bf:1a:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc88768-1b58-474d-a340-376827992098
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=08261225-e7ef-4ed8-b182-588c90b14910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:8e:57:ea:62:c6:50:75:c4:a7:c0:fe:a2:
                    eb:d6:54:6c:89:ce:60:52:06:64:47:e8:92:b1:a9:
                    b4:51:19:cb:52:9e:ba:74:3a:c1:5d:dc:e0:84:62:
                    8b:d9:6b:17:c2:42:bc:1c:e0:82:59:fc:97:b1:50:
                    f1:fa:71:35:d7:4a:f5:d2:a4:23:31:55:fc:48:25:
                    e0:09:86:4d:32:ae:3c:9a:70:63:86:4d:ce:0f:13:
                    45:64:23:4e:29:8f:ad:ce:cb:0b:1d:96:e6:8f:2d:
                    27:48:06:b4:46:fe:d6:92:47:b6:42:4d:ce:cb:66:
                    6a:c2:1c:49:11:73:44:c7:05:84:5a:39:d5:ca:b0:
                    13:d5:94:ed:38:ee:53:64:5e:4c:e6:57:0f:e4:8e:
                    c6:72:31:fd:bf:b3:79:05:fe:68:66:28:3c:4d:40:
                    41:4d:8b:f2:84:ec:88:18:cd:1f:30:fc:3f:47:6e:
                    60:16:a0:7a:9e:74:6a:33:ad:d9:d1:14:9a:5c:60:
                    79:5f:a6:67:86:2a:3d:c8:cb:71:c6:92:1d:95:3b:
                    ad:a1:0e:8b:dc:0a:0e:b0:7b:f3:80:f6:9d:a8:4b:
                    9f:eb:2c:fc:b0:21:1d:9e:e0:e0:c6:c2:76:e0:f5:
                    fc:3d:df:74:f7:88:39:ba:fe:df:ba:fc:a3:c0:6a:
                    b3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:35:63:6D:0E:74:B7:10:F0:A6:18:1C:BA:35:74:35:7D:3A:2D:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/ba50671d-5d04-3117-96b8-c41c4c1e09ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl

            X509v3 Authority Key Identifier:
                keyid:F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:62:d8:bb:06:26:dc:29:ab:a0:72:3e:90:49:19:d3:c7:54:
         f0:52:36:ac:a8:7b:ea:60:51:3d:4c:a6:91:59:96:75:53:2e:
         11:db:6b:a4:82:a7:ac:05:df:50:3d:fc:31:8c:35:be:dd:5f:
         9d:53:a1:8a:de:0b:df:ed:de:02:23:99:d2:9b:12:b9:60:65:
         0c:5a:e1:c4:12:bf:36:10:b5:d8:f8:6e:7e:d5:0a:9c:da:49:
         69:c7:ba:71:3e:04:de:37:c6:46:f0:6f:73:e1:18:23:9c:ad:
         7c:b4:0f:b0:60:5a:e1:e2:bf:f1:7a:ac:bc:18:7f:c4:23:d0:
         46:56:49:74:24:3e:a0:9b:0f:7e:be:e8:ee:1b:a3:ce:1c:0c:
         95:27:47:50:70:c4:f3:6d:44:79:c7:9a:e8:b1:a7:0d:b5:28:
         9c:ea:6d:e0:13:58:60:e4:a9:91:57:59:0f:88:6c:83:f6:b5:
         19:07:44:b1:22:fb:fb:0a:83:a3:94:7d:c3:28:75:90:5b:56:
         6f:72:fb:88:19:dd:f8:93:99:9d:2b:45:1e:07:a6:ce:cb:0e:
         79:e4:65:b4:36:7f:36:10:1b:24:1e:22:f3:d6:7e:4a:f5:ee:
         b9:ad:f1:3e:32:ef:f1:0a:c6:a3:2b:a0:5b:ff:ee:83:e8:44:
         26:47:2f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:19:51 2025 by rpki-client