Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/0a4593a8-d605-356a-92e7-088d956eb235.roa
File:                     0a4593a8-d605-356a-92e7-088d956eb235.roa (raw, json)
Hash identifier:          nJfzT6tRum9a8wQHLqXnvtLiaa9NqmcrDg9h1RCDnN4=
Subject key identifier:   C4:B3:9E:2E:7B:17:0D:08:92:28:5C:32:50:CE:3B:5B:0A:D1:86:E4
Certificate issuer:       /CN=13855365-4e81-429f-91f9-55913aa1d92d
Certificate serial:       010D0C9F4328584A612B174D9ECF843E0C74C560
Authority key identifier: FE:0D:B2:D1:10:3C:8A:74:73:E6:0F:54:BC:B7:D9:54:51:21:09:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/0a4593a8-d605-356a-92e7-088d956eb235.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     611
IP address blocks:        192.75.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/13855365-4e81-429f-91f9-55913aa1d92d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/13855365-4e81-429f-91f9-55913aa1d92d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:17:4d:9e:cf:84:3e:0c:74:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13855365-4e81-429f-91f9-55913aa1d92d
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=a8d47643-56b3-4ac9-991c-2d1992e809ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:12:88:a6:02:7b:7d:38:7e:68:ad:11:8a:
                    a9:64:4c:ff:bc:0a:77:6f:e9:2b:20:b0:c6:fa:c3:
                    5d:79:bd:e8:5a:08:34:4a:8a:1f:73:e8:5e:10:89:
                    70:cd:b0:42:df:85:77:c6:fe:5a:7a:db:ae:03:31:
                    7b:27:57:67:ab:bd:2c:5e:2d:ec:09:87:21:4d:9d:
                    4f:0a:70:b0:2a:d9:60:b3:d2:08:2b:93:2f:7b:1c:
                    56:e7:38:e7:de:ec:c6:ec:8a:e3:bb:d4:48:42:e5:
                    9e:88:1b:7e:e5:95:eb:d2:1a:4c:94:dd:63:eb:fc:
                    4e:5a:6b:1e:7f:6f:71:66:29:32:f1:e0:76:41:71:
                    f6:3c:71:e9:46:5a:30:b2:40:71:61:51:2e:40:62:
                    07:e8:2f:b0:62:ce:f7:b7:57:e0:0c:e4:92:b4:f9:
                    fb:b2:23:86:6e:f5:56:62:06:28:5c:1f:22:8c:30:
                    0c:23:7b:6a:30:fa:d1:1e:91:c1:5a:75:3a:3c:86:
                    4e:89:8f:de:ae:a4:a3:48:bd:34:56:74:fc:35:b0:
                    3d:63:d8:a6:33:9a:fb:d9:2a:e3:c9:dd:bf:44:ac:
                    60:a7:3e:a2:a8:01:dd:6f:ad:e4:b5:75:89:ee:50:
                    1f:78:b5:60:95:23:7e:74:79:b6:79:5b:12:63:14:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B3:9E:2E:7B:17:0D:08:92:28:5C:32:50:CE:3B:5B:0A:D1:86:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/0a4593a8-d605-356a-92e7-088d956eb235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/13855365-4e81-429f-91f9-55913aa1d92d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:0D:B2:D1:10:3C:8A:74:73:E6:0F:54:BC:B7:D9:54:51:21:09:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:1b:0c:d4:1e:44:73:4d:f1:dc:92:dc:aa:f8:d6:9c:c4:90:
         7f:8c:a2:98:3f:03:2f:b0:05:01:3d:87:4c:ee:c3:e1:a4:84:
         29:c5:00:f1:54:db:08:67:ab:9f:06:be:ab:01:92:7a:ad:e1:
         08:2a:fb:7c:85:5f:86:b7:a4:fc:b8:08:15:da:3a:94:e5:33:
         93:cc:49:78:32:74:72:54:00:47:56:39:65:de:2d:80:97:33:
         a7:f7:9b:36:91:86:3c:60:4d:37:f2:8e:69:7f:16:2b:6a:e0:
         e1:f1:d6:f8:57:f3:d1:ef:38:cb:79:9a:f7:79:92:f1:61:b8:
         11:8f:33:06:d1:95:d0:ce:6c:71:db:5c:4a:0c:c2:34:17:ab:
         fa:b0:fa:e0:02:d5:97:cd:87:ee:ad:25:27:f4:0c:06:8c:4e:
         9b:80:b3:58:b6:30:38:38:ff:b2:0a:8a:a3:f8:5b:77:7e:c2:
         f7:29:73:ab:b8:c9:c1:ee:05:af:be:28:ce:59:8c:c8:aa:03:
         fe:b7:61:ea:aa:5c:8d:f2:25:91:2e:64:ca:a4:21:1c:8d:bc:
         0e:17:1a:3c:8a:54:95:63:ae:f5:c7:40:48:64:26:32:52:b2:
         a2:46:0d:ba:29:44:da:2e:cd:d6:54:64:d6:42:34:9f:4a:8b:
         3a:f8:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:07:05 2025 by rpki-client