Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/c3d6db81-42ef-35f3-85d6-505ba44b7ac6.roa
File:                     c3d6db81-42ef-35f3-85d6-505ba44b7ac6.roa (raw, json)
Hash identifier:          cxF29hrMtP/2+ppRqfnBQodeTIlas7fA00RgcFj0jxE=
Subject key identifier:   B3:90:E3:28:19:20:D4:8D:CE:FA:69:8A:64:B5:8E:0A:84:71:1B:AB
Certificate issuer:       /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial:       010D0C9F4328584AFD81306223399EEDDAEB3380
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/c3d6db81-42ef-35f3-85d6-505ba44b7ac6.roa
Signing time:             Wed 27 Aug 2025 01:00:32 +0000
ROA not before:           Wed 27 Aug 2025 01:00:32 +0000
ROA not after:            Tue 25 Nov 2025 02:00:32 +0000
asID:                     36858
IP address blocks:        192.188.135.0/24 maxlen: 24
                          192.188.137.0/24 maxlen: 24
                          192.188.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:81:30:62:23:39:9e:ed:da:eb:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
        Validity
            Not Before: Aug 27 01:00:32 2025 GMT
            Not After : Nov 25 02:00:32 2025 GMT
        Subject: CN=7ed33a37-ca3b-49b2-a133-4511ad660894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:9b:b6:e2:c8:46:13:41:ed:40:71:cf:92:
                    55:15:2b:5d:e5:da:7e:fa:33:e5:00:de:0f:40:ec:
                    13:83:f0:53:9a:5e:57:cd:68:51:ed:38:7f:41:54:
                    4b:f0:5a:76:f8:48:b9:de:26:f9:45:dd:93:ac:e5:
                    5d:02:10:4e:ba:6d:9a:e8:64:1b:74:e8:a8:80:0a:
                    74:ff:5b:a7:dc:99:ae:a0:36:8d:ab:7d:b8:a1:2f:
                    12:21:69:57:c0:00:f6:a9:4a:59:7a:f8:cd:31:a7:
                    a5:f7:dd:0b:74:a6:36:ba:06:96:92:80:1d:fc:b1:
                    f8:a2:ae:29:34:7a:82:19:34:32:75:05:af:9b:ac:
                    4d:d2:3c:f2:a4:a8:90:96:ee:2e:df:6d:48:52:25:
                    12:a6:c4:91:86:df:f1:00:c9:41:e7:f2:7c:a3:63:
                    44:29:09:ab:2c:9c:6a:08:77:da:f2:df:7e:21:20:
                    18:b7:24:dd:c0:a4:c9:7f:ea:4a:86:97:3c:f1:8d:
                    ef:f7:e6:fc:e3:26:9c:a0:ed:60:c1:08:91:ce:af:
                    00:14:22:7a:d6:15:3e:15:1d:27:93:66:a6:ab:8d:
                    2e:52:01:06:90:11:3d:ac:73:a6:a4:14:4f:08:78:
                    38:2d:70:9e:4e:64:67:6a:41:2d:e3:dd:f7:63:19:
                    57:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:90:E3:28:19:20:D4:8D:CE:FA:69:8A:64:B5:8E:0A:84:71:1B:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/c3d6db81-42ef-35f3-85d6-505ba44b7ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl

            X509v3 Authority Key Identifier:
                keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.135.0/24
                  192.188.137.0/24
                  192.188.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:22:6e:1d:2c:fd:ff:04:47:a6:62:04:53:e0:5c:6f:44:1d:
         15:5d:03:86:bc:6c:6c:b0:8a:a5:99:ee:f6:16:2e:d8:51:86:
         f0:d7:ab:4d:46:95:42:26:a3:22:2d:87:c7:78:6f:b8:02:83:
         58:4d:08:af:3d:af:d2:88:0d:61:5c:39:b3:2c:bf:c3:23:96:
         d0:67:28:33:63:90:c0:0d:16:23:c3:33:47:8d:5a:46:96:60:
         a8:61:5b:19:98:b3:fc:4c:09:9d:36:e7:12:c8:b5:07:9c:5a:
         26:9c:6c:2d:e6:f6:b5:b9:44:b9:af:76:94:88:e3:34:48:1a:
         c1:75:4b:9f:ae:c3:97:40:bd:3c:e2:10:89:c9:00:35:83:9f:
         4e:3e:62:1a:f4:d1:a6:80:7d:a1:a0:6a:47:de:35:dd:f5:f4:
         20:d9:50:20:cd:c5:f0:75:be:5e:1e:3f:5f:7b:ff:31:df:91:
         da:eb:d2:57:6a:d2:25:8a:b6:f0:6a:5e:d3:7e:e4:1b:41:3c:
         60:50:11:c5:e9:ef:82:cc:c1:67:90:70:47:95:88:bd:3b:64:
         d5:e1:91:65:6f:c9:fb:fe:30:dd:94:62:aa:4d:5b:91:e7:8b:
         5e:38:78:52:1a:f4:b0:f3:6d:cb:02:d6:85:7b:1d:25:cb:35:
         67:97:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:21:48 2025 by rpki-client