Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/76774694-686a-3a76-afb3-b7fb5ffb887e.roa
File:                     76774694-686a-3a76-afb3-b7fb5ffb887e.roa (raw, json)
Hash identifier:          hBuCj7zqYXlUqtAy6mxGCRulP4lQWrn8aT3S8GH7kRQ=
Subject key identifier:   1B:1E:F3:8F:72:A4:B4:D9:F9:62:82:29:3B:E9:9A:F6:E3:DC:CF:4F
Certificate issuer:       /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Certificate serial:       010D0C9F4328584B0B76B9131F00EAB778C552C0
Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/76774694-686a-3a76-afb3-b7fb5ffb887e.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     199563
IP address blocks:        132.190.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b9:13:1f:00:ea:b7:78:c5:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=46e54119-025e-49d1-ab94-e85922982ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f8:75:d8:40:c9:27:ce:cf:aa:69:bb:0c:02:
                    b1:7c:22:ab:89:7e:1d:bb:de:8a:46:57:de:1e:72:
                    cd:c9:c0:74:b3:2e:bf:fb:5e:36:ed:11:86:40:00:
                    35:2d:6a:41:77:f1:ee:2e:22:34:00:dc:d3:a3:9b:
                    34:6c:49:d7:21:55:51:b4:7e:0f:ee:4f:f8:bd:d4:
                    77:9b:c2:6d:1a:9c:37:38:07:a3:1d:5c:bc:12:e5:
                    72:32:29:49:6f:98:81:f0:ed:35:88:ca:cc:a0:17:
                    92:23:7c:10:cc:ce:a9:38:e6:7a:54:ad:7f:64:9d:
                    f5:fd:ae:0b:4e:ac:42:76:98:81:c1:e9:f1:69:70:
                    15:5d:1b:dd:b2:35:6a:59:b0:36:74:17:a8:33:b8:
                    a6:05:30:9d:ca:e2:44:9b:85:2f:6a:17:fc:94:f7:
                    f1:d4:2d:eb:29:dc:c3:ab:d7:2a:8d:d9:93:e2:8c:
                    68:e9:18:5d:7d:f1:71:80:af:4d:f1:d2:d3:fa:9c:
                    96:b2:ce:ef:d5:e2:09:2b:6f:40:6c:20:82:14:a2:
                    0b:6e:06:eb:ac:8b:70:4e:a8:1c:0c:2b:45:01:4d:
                    97:bb:a7:56:67:76:c2:94:ef:6c:eb:4b:5f:57:73:
                    a8:9e:90:0c:15:48:dc:b8:cc:89:08:7c:95:9f:00:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1E:F3:8F:72:A4:B4:D9:F9:62:82:29:3B:E9:9A:F6:E3:DC:CF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/76774694-686a-3a76-afb3-b7fb5ffb887e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl

            X509v3 Authority Key Identifier:
                keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.190.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:29:8f:65:31:e9:4c:74:83:07:29:86:19:27:c3:30:d9:63:
         bc:4b:06:77:37:02:b2:01:73:c9:9a:38:74:87:7e:f9:ec:3f:
         12:37:05:62:ab:3e:62:41:71:85:85:04:9d:ff:7d:c6:23:d1:
         39:c5:24:97:b5:85:79:03:a1:87:77:8a:fd:7f:16:89:1b:b2:
         fc:45:42:6a:d2:57:15:d4:c8:c1:56:19:9a:4a:ca:95:ba:66:
         51:9e:9b:d0:6a:20:35:1b:7e:1d:b3:c5:bf:71:09:2e:5b:89:
         b8:c8:a2:5f:9f:55:5c:40:2b:30:4f:39:a8:a0:8d:51:57:21:
         44:e1:51:ff:ad:de:78:b1:e6:c4:49:df:77:b6:6e:11:f8:53:
         78:4e:06:81:f8:c3:22:7f:66:1a:aa:0c:4b:44:f1:80:be:0d:
         4a:a2:f7:fa:0e:e9:42:fb:bd:76:d0:20:7e:4f:33:8e:00:dd:
         58:ff:48:26:8d:db:89:a8:85:36:26:e4:79:4b:0a:67:f5:96:
         0a:f3:0d:e3:0a:96:14:e7:e5:f0:a6:93:03:3d:ef:da:54:43:
         32:9a:ec:35:8d:96:f4:fb:f7:19:09:e1:e0:24:fb:b2:91:d2:
         e2:bc:9a:22:23:38:61:b2:94:c0:59:0e:49:40:64:24:61:06:
         15:04:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 04:11:12 2025 by rpki-client