Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/49ac362d-3824-3360-87e0-c976f5b7ec1a.roa
File:                     49ac362d-3824-3360-87e0-c976f5b7ec1a.roa (raw, json)
Hash identifier:          VkG2OguiRJXya12yOrXx1pS4+ZuEw6//ZRZERrC1IWk=
Subject key identifier:   9A:F3:92:B9:DA:83:78:BF:61:3E:C3:40:4F:BC:8A:CB:9D:01:74:8E
Certificate issuer:       /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial:       010D0C9F4328584B2CF6E29689165D3370D0B600
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/49ac362d-3824-3360-87e0-c976f5b7ec1a.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     394840
IP address blocks:        67.219.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e2:96:89:16:5d:33:70:d0:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=5aa65138-7ad7-4342-83d2-3d3a08b84147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:de:83:5d:19:5c:08:c1:29:e9:ad:83:c4:
                    53:ef:b7:4b:61:8a:52:5a:9a:ee:89:78:c5:71:fe:
                    2a:da:92:13:9c:76:eb:8a:d2:2e:1f:29:9b:9a:19:
                    a8:3a:8b:98:93:39:b8:ce:e3:05:01:c2:fa:4e:41:
                    f2:88:16:3f:f6:9f:f9:1a:21:26:8d:e1:63:3d:e5:
                    e6:74:8b:99:ca:30:fe:3d:a7:ab:da:b2:a0:02:a9:
                    30:3f:5a:0d:1d:67:0f:51:6d:44:9c:8d:63:ed:04:
                    2a:b4:f9:a4:23:10:1e:81:a4:51:0c:08:c2:87:ad:
                    8a:4c:94:a2:e5:ff:05:c1:2d:50:18:cd:d4:cb:24:
                    32:90:21:69:6d:f7:b2:b0:8f:ab:8b:99:aa:11:07:
                    05:5a:18:d9:c9:1a:32:9a:68:77:c8:6d:44:e8:75:
                    c4:37:5b:28:c2:14:40:af:5d:aa:97:87:89:07:15:
                    9c:30:04:cc:43:0d:03:5e:9b:de:b6:68:e7:92:58:
                    84:00:53:4f:21:32:4d:26:78:51:e4:f8:0b:d6:58:
                    1f:05:a8:da:f4:02:41:68:70:80:98:1e:f7:42:d4:
                    70:8c:39:ac:a7:35:73:01:f5:6a:38:eb:ca:31:c4:
                    5e:16:8f:41:de:06:3f:81:b3:64:f0:b4:8c:4a:17:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:92:B9:DA:83:78:BF:61:3E:C3:40:4F:BC:8A:CB:9D:01:74:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/49ac362d-3824-3360-87e0-c976f5b7ec1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2d:15:e2:9b:dd:4d:ec:5f:f3:8e:e9:68:0a:87:dd:e2:3d:
         11:86:a2:48:74:47:32:72:84:23:8f:17:29:76:f4:cf:b2:41:
         63:ff:98:0b:38:7f:03:e1:0a:f9:94:f1:32:2a:4c:8f:d0:0a:
         6a:96:29:a1:b3:6f:0f:0b:6d:54:86:1f:d6:cc:5d:c5:42:f3:
         60:63:90:ec:07:13:df:0a:32:bd:22:0c:85:85:47:e7:db:56:
         4f:f5:8e:f1:1d:66:ff:3d:62:65:10:a7:4a:37:61:01:12:b9:
         23:7c:22:b9:04:9a:54:83:cc:b3:a7:9b:99:20:73:9e:0d:a1:
         3f:9c:41:84:f3:f3:eb:78:38:ab:81:ef:eb:31:e1:1e:76:2b:
         09:4e:bd:30:b0:6e:73:63:e9:91:a5:22:d4:25:a8:94:a7:39:
         ab:a6:fc:d3:80:0c:20:41:03:14:06:ef:0b:ea:fb:eb:6d:cf:
         e4:1a:53:77:ac:7a:ec:1c:c8:18:47:15:c7:0f:1d:02:10:21:
         ae:be:ba:4e:a3:dd:9e:a4:32:c3:e7:20:a2:77:15:9a:57:64:
         cc:03:9c:b6:81:8d:e4:0f:74:72:75:a1:d9:8e:ac:05:0a:2f:
         83:b5:ab:20:95:ee:ae:7e:26:56:61:45:e4:74:b0:b6:b2:d3:
         1b:80:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:45:36 2025 by rpki-client