Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa
File:                     25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa (raw, json)
Hash identifier:          0wuZzqdpdfs/1FXznc80ragfeBSIquueGXO1xESFSqg=
Subject key identifier:   80:6E:61:FE:CC:44:7D:D7:7E:04:36:DF:C1:80:9D:58:63:5D:91:7D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584AF5212EB98857CCEAFE994F80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     206092
IP address blocks:        149.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2e:b9:88:57:cc:ea:fe:99:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=ecfaf01c-d4a4-4fcc-b33e-b868c77ac621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:ff:ad:e2:4d:51:40:1a:f3:a6:93:6a:85:
                    55:12:1d:d2:c0:be:4a:e9:86:ce:2f:a9:e6:18:56:
                    81:c0:d6:90:52:d0:1c:13:58:28:61:b0:5f:9a:e2:
                    1a:65:01:16:fa:6c:1c:19:c9:33:fd:8a:79:d4:96:
                    52:55:28:64:11:09:14:4b:b6:e4:1a:4c:25:46:42:
                    54:97:69:48:ee:ab:05:c8:b4:63:87:23:70:8a:24:
                    40:5b:2d:f1:e8:2e:aa:40:88:78:ef:c7:06:e9:b2:
                    5a:21:21:58:00:bc:f9:4e:80:0e:77:1d:fa:d3:00:
                    97:3a:4d:8a:7d:ca:70:cf:b5:4c:51:11:fc:6a:9d:
                    9f:ef:71:1e:c7:b4:17:a3:7c:f3:56:54:6e:97:0b:
                    a5:f4:91:0c:6f:45:9a:29:93:c3:59:2c:3c:0c:12:
                    a0:5c:1c:3b:6e:15:3b:21:ee:ec:e5:b9:f1:c0:3e:
                    f0:e9:1e:e8:51:c7:88:f2:7e:f8:1a:0d:e4:4b:2d:
                    db:96:c5:89:39:33:9b:92:e9:d2:f8:a6:ea:a9:35:
                    d8:8d:de:c2:24:d5:6d:1b:9c:a9:93:04:6b:7c:7d:
                    70:eb:99:35:2f:75:44:08:f5:3d:d3:af:21:c9:aa:
                    2f:f0:44:76:54:70:d4:f5:b9:3c:c0:fb:30:f5:d8:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6E:61:FE:CC:44:7D:D7:7E:04:36:DF:C1:80:9D:58:63:5D:91:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:4b:98:0d:97:fe:2e:0a:08:df:ff:e9:69:d6:cc:0b:10:
         4f:d1:f7:ee:bf:c5:0d:03:82:be:23:9c:a0:df:90:47:5d:ac:
         2d:bb:9f:39:40:51:06:4d:63:cc:02:c6:d1:e7:24:79:ca:ec:
         dc:b4:f9:6d:5c:97:27:9b:13:4d:e5:1a:56:56:32:8b:54:b3:
         b9:ef:ba:20:ce:66:13:4c:bb:38:0d:30:15:f7:52:e7:91:3a:
         d0:e8:af:55:dc:22:77:48:5a:75:4d:2d:ad:7b:e5:ae:3b:da:
         33:ae:53:06:54:24:b6:33:94:da:63:bb:ec:ad:58:a7:79:a1:
         e4:e2:34:0d:27:0f:c1:d4:2e:eb:98:fa:02:d0:11:c9:46:7a:
         e1:83:e1:0e:bf:83:5b:71:80:ad:e5:ea:16:e2:54:0f:29:15:
         a4:bc:f1:f0:55:19:c1:4b:f4:7d:0c:7d:14:8a:68:36:c3:30:
         c0:c8:cb:b3:a8:fe:37:8c:34:3e:fb:86:6c:d8:cd:01:c8:e4:
         d6:e2:89:8b:4f:db:02:5e:d3:d3:3e:d0:53:da:ad:3c:ed:2c:
         b8:6c:91:ef:99:f5:75:a1:31:3a:7f:d6:25:da:64:8d:3e:fe:
         69:29:3a:a2:72:87:4f:db:a2:09:31:ab:53:ef:f3:ae:8c:8f:
         62:96:8f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:50:12 2025 by rpki-client