Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa
File:                     48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa (raw, json)
Hash identifier:          Lu+82ffdlEhVN6Mkuo3ItVp3j9hm6NPliFoUbUBPpy0=
Subject key identifier:   54:0E:B9:10:AE:FB:39:D0:5F:F7:01:AA:D2:D6:56:F2:39:D3:0F:D4
Certificate issuer:       /CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4
Certificate serial:       010D0C9F4328584AE1971B2A1ADE4FA23FB3D470
Authority key identifier: 2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36228
IP address blocks:        192.43.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1b:2a:1a:de:4f:a2:3f:b3:d4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=5a9eef7a-81ec-4423-aca3-55816507213a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:56:f4:0f:d8:54:67:e3:c8:05:58:21:6d:
                    7f:42:fc:49:58:20:77:4e:9f:b4:70:77:f4:3f:c6:
                    a6:12:2d:36:cb:5b:b8:6e:e8:75:be:e8:a8:87:3a:
                    40:dc:38:20:8c:3c:57:1e:bd:62:75:35:9a:b8:0b:
                    cb:71:64:26:36:60:82:46:30:ad:e0:66:50:1b:d5:
                    5a:26:67:73:0e:5b:47:5c:80:ce:40:9d:6b:f0:9b:
                    cb:aa:66:9b:e5:3d:ba:c9:df:45:29:4f:cd:b0:ad:
                    4d:24:08:13:27:70:58:d4:78:a0:da:59:ec:8c:60:
                    21:71:db:7b:78:c3:2c:af:19:40:02:e0:b0:e8:e2:
                    d8:d5:3a:e5:94:ac:a9:ed:04:70:b4:e9:3c:9a:02:
                    bb:ee:7a:40:a8:ca:41:93:a6:95:91:c6:c2:8e:1f:
                    a2:13:c5:8c:84:09:1e:65:bd:01:bd:44:14:b0:96:
                    a5:24:34:e6:56:a9:51:c5:c9:97:f0:d0:ce:34:ee:
                    bb:64:82:e7:44:7c:48:52:c8:c6:d1:c0:fc:bb:d6:
                    34:67:54:f8:45:f6:3b:48:fd:76:a0:67:51:4f:45:
                    de:82:fb:96:64:57:1f:d8:04:b6:07:7b:be:e3:8e:
                    65:d7:75:c0:95:b9:41:cb:9d:0a:67:1e:c5:c2:24:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0E:B9:10:AE:FB:39:D0:5F:F7:01:AA:D2:D6:56:F2:39:D3:0F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.crl

            X509v3 Authority Key Identifier:
                keyid:2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:12:9f:0d:53:4d:0d:3e:83:f6:27:20:f7:49:48:b1:5a:7d:
         04:df:c7:15:aa:35:d9:4e:ce:1e:06:ae:d8:4a:5c:ce:08:31:
         f8:13:43:18:84:1d:91:cc:34:78:2b:b1:9d:e4:56:da:c0:2c:
         a1:21:9a:ce:27:07:aa:b2:21:9c:2a:80:ed:03:a7:74:95:81:
         d2:4f:c1:c8:60:e6:36:eb:44:ac:f0:c4:62:08:42:7a:db:2a:
         76:ff:b2:c8:6e:a7:25:f8:7e:cc:3e:f0:cc:8d:75:d2:6d:6f:
         ec:fd:1c:dd:1d:10:c2:c0:24:4f:48:be:3e:76:22:b6:b0:8d:
         bd:c6:11:65:0e:22:89:fd:90:d8:b3:a9:ab:a4:35:a2:77:fc:
         c4:c6:68:ba:a3:a8:5d:8f:35:32:a5:9c:b4:e3:38:02:80:c3:
         08:b1:34:bd:82:a8:95:de:80:11:a3:aa:a1:fb:62:7b:7c:1f:
         2f:fb:77:be:30:74:33:4e:40:3c:3b:5b:ee:86:57:f1:d6:2d:
         56:a7:5c:6b:21:1b:de:fe:5a:a9:a2:a9:16:64:f3:e8:93:02:
         95:d9:19:0a:07:a8:8a:ec:b4:b3:91:b6:d5:a8:5a:bc:fd:5c:
         cc:7b:8d:dc:cd:a5:7a:cd:42:a5:a4:6a:47:65:08:ce:f7:c8:
         ba:40:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 05:13:41 2025 by rpki-client