Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/eccac3b5-2c7c-3879-9fc5-610d0781a706.roa
File:                     eccac3b5-2c7c-3879-9fc5-610d0781a706.roa (raw, json)
Hash identifier:          GPwHd3FVvbTwi7p9MpdKLT2Yf3Y65SMcn4LV/Hpsy2c=
Subject key identifier:   39:12:15:BF:E3:0E:99:37:BB:AD:5A:09:04:C3:A4:F6:E3:BD:4B:00
Certificate issuer:       /CN=ac4312c4-c891-4a96-86d7-0aca56ee26be
Certificate serial:       010D0C9F4328584A7A4B3890DB8787094104C080
Authority key identifier: 77:12:0F:70:34:8B:06:A5:FD:58:C4:3B:EA:5A:30:30:7A:D6:0D:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/eccac3b5-2c7c-3879-9fc5-610d0781a706.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     14618
IP address blocks:        192.26.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:38:90:db:87:87:09:41:04:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4312c4-c891-4a96-86d7-0aca56ee26be
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=25f67a72-a58f-4ed0-a7b1-b7e8a39ab953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:0e:11:39:89:5f:79:98:ba:70:c2:34:ba:
                    0a:c4:e6:d4:ee:c4:b6:9a:c7:0e:be:dd:65:8c:29:
                    67:24:6b:76:87:b9:92:f1:d6:cb:3c:84:cb:14:c5:
                    6e:f6:bf:e2:6a:da:99:11:33:7a:fe:94:7e:3d:18:
                    9d:17:af:f8:b4:24:69:d0:93:85:92:89:5e:89:7f:
                    5f:1e:76:58:57:a5:25:fb:13:c6:3c:70:1f:6f:02:
                    f9:fc:00:f8:19:c5:06:94:9e:1c:55:f5:5b:c1:72:
                    80:46:bf:04:f8:f4:b5:b0:3f:70:88:be:e1:dc:e2:
                    03:90:d5:76:54:fe:e0:c0:a2:93:18:7e:b9:3f:0e:
                    77:69:8e:90:94:0f:b7:46:30:ff:27:d2:e3:60:62:
                    9f:6a:4d:9c:24:0f:03:6c:ca:09:52:45:2b:d2:92:
                    cb:f7:79:3c:c7:64:7b:fb:17:95:dd:d1:f8:eb:29:
                    76:bf:9e:28:9d:f8:f4:b2:f1:66:1a:07:17:77:80:
                    b6:ec:d9:6c:2a:d2:48:75:f1:3b:0b:63:1a:49:dc:
                    16:6d:71:d9:16:00:c2:e3:46:54:07:dd:3a:29:7a:
                    56:2c:76:08:77:e3:5d:4d:bf:24:a3:40:77:79:c7:
                    ef:9b:7c:fd:2c:42:09:3a:84:ee:e6:5a:8f:39:72:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:12:15:BF:E3:0E:99:37:BB:AD:5A:09:04:C3:A4:F6:E3:BD:4B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/eccac3b5-2c7c-3879-9fc5-610d0781a706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.crl

            X509v3 Authority Key Identifier:
                keyid:77:12:0F:70:34:8B:06:A5:FD:58:C4:3B:EA:5A:30:30:7A:D6:0D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:f7:cb:d0:e0:f4:c2:5c:a1:69:3a:b9:3a:39:5f:da:89:
         9f:c7:7a:28:f3:df:77:e3:35:e3:f3:5a:1d:b7:61:38:5b:fa:
         dc:c3:54:56:33:56:be:e6:2d:a3:d1:e3:80:e0:b3:d5:c1:57:
         f1:f3:74:3e:c6:9e:36:43:d6:65:5e:7a:7c:c7:d5:e2:3f:2e:
         37:dd:34:45:83:05:3c:68:0d:81:e1:21:18:5d:be:e7:51:a7:
         05:1b:0a:f3:c3:07:54:a1:c6:90:66:3d:55:f9:80:8c:86:c9:
         ae:cf:27:10:ab:2a:41:7f:0b:19:21:6d:bf:dc:2e:50:d5:55:
         8c:5e:b1:ea:20:99:f8:4d:4a:4c:d6:de:aa:a9:57:ad:17:d4:
         04:82:7a:d2:14:da:b5:47:1d:70:ea:8e:12:49:fd:e1:ff:1b:
         61:42:77:a9:17:34:6c:2b:04:d4:a4:03:91:88:d6:c0:10:e9:
         79:70:9e:eb:64:bc:5d:93:80:a9:ba:49:00:5c:42:1d:2e:d2:
         f5:a2:3b:13:c5:22:a8:b1:d0:70:73:4b:36:f9:05:c8:8e:f5:
         2b:75:76:5e:4e:65:15:49:2e:99:68:7c:45:e6:9e:a7:10:5c:
         c9:8e:ad:61:cb:90:ae:41:48:09:36:93:e8:98:4d:f7:7e:1b:
         ef:40:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:42:10 2025 by rpki-client