Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/9a4037b2-8eee-396c-9018-b5b3bf590edb.roa
File:                     9a4037b2-8eee-396c-9018-b5b3bf590edb.roa (raw, json)
Hash identifier:          3VPK++3a/EIGEEB6rJZwVmRdJJSLdjdnzJubD2T51PU=
Subject key identifier:   61:BF:68:80:37:F2:4C:9E:62:4D:76:D9:08:EC:30:99:F3:73:2D:BF
Certificate issuer:       /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial:       010D0C9F4328584ADD6680F8692F692B3F504580
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/9a4037b2-8eee-396c-9018-b5b3bf590edb.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     395480
IP address blocks:        192.154.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:80:f8:69:2f:69:2b:3f:50:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=707709da-1acc-4e28-968f-42b859d156d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:b0:5d:b8:c6:44:4a:45:d0:05:d5:cc:63:
                    ab:96:87:8a:eb:87:fa:b9:7f:a9:e9:91:2d:bf:7e:
                    e7:d5:ac:cd:8d:77:de:5b:6b:fb:49:b5:63:e3:7c:
                    15:b3:a9:3b:38:d7:03:e1:a4:cf:df:a4:2d:18:77:
                    6c:ba:cd:5e:2e:c7:00:ae:a7:ff:78:98:7a:11:9b:
                    17:23:46:70:44:6d:8b:1d:ae:ea:43:ba:f9:24:7e:
                    c1:dd:47:10:d0:c2:0f:25:dc:49:60:76:b2:07:74:
                    e1:48:d7:b4:2f:b6:a8:ea:6b:2f:53:54:54:1d:43:
                    9b:72:c4:26:4e:25:ae:23:e8:fa:e2:83:bb:f6:e1:
                    d8:71:20:95:83:fb:1e:09:94:0b:0f:b1:7a:15:fe:
                    0b:fe:f4:a6:f7:db:16:0f:8b:8a:c5:e6:99:00:a0:
                    e2:87:78:b0:1b:7e:84:cd:00:06:f8:aa:cb:1f:4e:
                    60:47:09:df:68:e5:05:91:4a:78:54:1a:0b:d2:c0:
                    0d:56:7d:95:f4:d0:2a:59:81:e5:af:9f:5a:87:76:
                    86:53:e2:43:b7:b3:86:d5:51:25:44:71:05:79:c5:
                    83:9d:b4:35:1b:33:65:3e:5c:c4:94:fe:3e:99:38:
                    b7:6b:2f:aa:6e:60:16:67:b5:be:3d:23:62:b7:dd:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:68:80:37:F2:4C:9E:62:4D:76:D9:08:EC:30:99:F3:73:2D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/9a4037b2-8eee-396c-9018-b5b3bf590edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl

            X509v3 Authority Key Identifier:
                keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:eb:04:2e:91:f5:db:e3:e2:48:13:fb:cc:cf:30:f4:71:64:
         a5:cf:78:0d:40:c8:f6:9a:95:50:22:a8:9d:b9:f6:98:69:d1:
         bd:dd:9c:63:eb:1a:13:33:86:fd:05:ef:52:52:b8:a5:6f:80:
         d3:ef:5c:2c:4a:87:46:df:fa:39:ae:df:bf:e3:23:c9:a3:19:
         c0:6b:7f:c9:e3:e1:b7:08:e9:3c:51:75:e1:44:16:f5:43:b4:
         df:4c:57:e1:a1:f9:a3:36:4a:92:a3:b7:cc:c0:bd:07:56:82:
         b8:7b:49:81:ac:f7:98:e9:26:3a:4e:69:23:9a:d6:10:49:ce:
         34:67:c9:3e:aa:a3:ac:ec:0b:d7:61:66:26:6d:5a:6d:26:02:
         0a:22:50:14:3e:e5:34:5e:23:25:eb:3f:c4:1d:5e:fb:4b:73:
         fd:be:84:45:0a:26:29:94:ca:c4:2d:20:6b:29:f8:09:3f:9a:
         0b:97:b2:24:9a:fd:63:f3:ca:81:ff:ed:9c:6f:03:e2:17:df:
         80:dc:df:d8:64:b0:1a:28:fb:77:6e:08:fe:f4:88:01:8b:b6:
         b9:f2:70:71:79:6e:65:79:8d:ba:a0:06:b0:ca:18:77:63:d2:
         54:3d:d4:ba:64:64:1c:60:27:88:58:c2:6f:a7:66:15:9c:b1:
         54:46:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:40:13 2025 by rpki-client