Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa
File:                     8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa (raw, json)
Hash identifier:          0tIT7FFylpBXPfACSWclHQWuO9DwlXrWIgBqvRCsNlo=
Subject key identifier:   23:6D:0B:FF:D3:D4:8A:01:67:33:59:6B:AF:90:5B:30:DE:B3:4C:42
Certificate issuer:       /CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
Certificate serial:       010D0C9F4328584B21CC1B633BBF14CCF993B500
Authority key identifier: 09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     14155
IP address blocks:        192.208.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1b:63:3b:bf:14:cc:f9:93:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=aca91708-df72-4c68-a52c-683942e8788d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:4c:ac:de:65:48:94:31:3c:be:fb:47:d5:
                    fb:03:bc:7d:3a:d3:91:1d:c2:62:f3:2e:8c:a4:90:
                    86:e4:be:ff:b1:89:30:43:93:3e:f0:5e:62:3b:dd:
                    9f:04:66:11:0b:f7:eb:fe:07:c4:73:d6:dc:6c:1b:
                    ea:70:23:c4:2c:ab:d3:74:1c:65:67:1d:26:15:6f:
                    67:c2:ec:b5:63:f7:7b:f0:ac:ce:62:39:4a:f2:ae:
                    14:9e:32:b0:3b:41:4c:e0:6b:73:ec:53:45:81:f6:
                    2f:b9:86:bd:7f:a3:98:df:c4:a5:58:b5:08:3a:8f:
                    76:d0:bf:a7:fa:f4:3c:8e:f1:ad:3e:fd:bc:e1:85:
                    31:c6:11:af:67:68:05:f1:d3:0c:67:3e:b6:72:1d:
                    60:81:4b:59:66:c2:f9:b1:a4:e8:97:b2:4c:a0:64:
                    93:5e:ab:a2:62:fb:94:3f:f5:2b:42:d4:de:da:32:
                    d0:f3:63:7a:e0:f1:27:97:af:48:11:f6:c3:9c:0d:
                    cc:fb:bc:8a:f0:7c:94:d4:0f:85:70:7b:55:62:cd:
                    5f:5e:03:4f:91:33:7b:de:62:a7:90:1c:ae:59:41:
                    3d:5b:c1:65:99:62:56:dc:68:d3:91:9b:fa:23:68:
                    8b:81:f2:21:d2:cd:82:24:f1:24:f4:ca:7e:7f:a1:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6D:0B:FF:D3:D4:8A:01:67:33:59:6B:AF:90:5B:30:DE:B3:4C:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/8ebf2fea-2a55-36d0-9103-e20032a52fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl

            X509v3 Authority Key Identifier:
                keyid:09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:cc:0b:bc:c4:50:89:02:e0:74:66:1e:38:4d:07:0d:54:36:
         12:cc:6f:5a:f1:d8:16:a6:09:ba:79:31:0a:9a:64:69:1c:de:
         fe:01:87:77:6d:f1:32:6f:2d:f5:60:29:08:d7:93:c3:25:5d:
         2b:46:de:9c:41:78:1b:41:61:bc:d1:4b:96:da:aa:82:0e:ee:
         be:41:b3:06:21:1f:32:ea:b7:ae:96:67:d7:5b:e0:a4:4c:40:
         56:c5:7e:63:1f:51:10:eb:53:32:3e:ea:6a:fb:73:7e:7b:a8:
         2f:27:10:23:cd:d7:4d:6e:4e:9a:5e:8d:f3:09:e9:8f:85:1b:
         f8:d7:92:8f:68:7e:a5:d7:70:86:67:e2:47:2f:75:e1:d9:0f:
         1a:87:a3:4e:82:d8:fb:23:e2:22:7a:31:9e:db:c8:a1:46:38:
         82:b9:e2:4c:ac:64:c2:fd:b4:05:f5:d6:8d:73:33:3a:8b:bb:
         90:0a:40:f1:a3:e7:78:8a:fb:1b:84:71:53:0b:67:3b:f4:1e:
         52:11:a4:19:ed:84:3f:19:20:6b:d3:d5:a6:ce:cf:e1:d3:21:
         e9:94:3a:71:86:c4:31:f6:24:4f:e2:c9:6f:e2:8c:3b:9f:b9:
         24:87:69:00:dc:d2:5e:70:7b:4b:6a:c5:31:7a:4d:4f:a3:56:
         9a:50:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:57:56 2025 by rpki-client