Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa
File:                     bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa (raw, json)
Hash identifier:          FOulCz02dv5O2kGBG6KNksJaRHyH1NWpAxJGdDipaGo=
Subject key identifier:   C2:63:8D:15:5F:67:09:C5:55:21:4C:64:BA:B7:DA:AF:03:B5:15:2B
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F4328584A612B1E674F765F407C692000
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     32709
IP address blocks:        168.92.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1e:67:4f:76:5f:40:7c:69:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=5583e083-b834-45de-bd92-b2f8c202d501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:0d:53:70:ec:d9:24:12:ab:da:18:f2:95:
                    77:aa:53:0f:00:e8:0b:b0:8b:1e:c7:ae:d9:19:76:
                    61:a2:8f:38:64:bb:42:00:ad:c2:b8:fd:be:62:54:
                    4a:02:33:e2:b0:e4:64:14:9f:1b:1f:8c:ab:33:20:
                    5c:9b:a4:72:34:d5:7f:2f:26:7e:8e:9c:ba:d9:c5:
                    6b:8e:2f:a6:82:6f:1d:52:01:ce:b6:06:dd:78:3f:
                    25:8c:d5:21:a5:8e:78:61:d9:11:7b:9f:8b:4a:44:
                    01:27:3b:37:48:0e:de:cf:a5:ed:12:f1:91:51:e8:
                    e7:5c:ef:09:40:8b:6c:9b:f0:56:9a:0c:dd:81:33:
                    52:00:0a:82:f1:bb:03:c0:87:c1:3f:a8:7a:db:9d:
                    cc:4e:3a:c1:11:25:24:5d:9b:4d:11:97:b0:e7:7e:
                    78:74:1d:90:aa:17:43:7d:37:b6:2e:db:dd:e8:49:
                    79:10:31:90:01:41:32:8b:28:66:cc:50:76:81:89:
                    d0:52:83:78:2e:c3:9e:63:1d:fe:89:cd:bd:6f:ff:
                    7b:8e:f5:91:dd:13:18:98:f7:18:2b:15:7e:44:64:
                    0d:2b:41:3b:78:17:f2:65:f6:90:5d:a0:22:5e:56:
                    14:ca:e9:4d:23:75:be:10:79:e0:18:f8:86:4e:48:
                    c8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:63:8D:15:5F:67:09:C5:55:21:4C:64:BA:B7:DA:AF:03:B5:15:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.92.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d2:dd:ad:ee:42:26:4b:3f:76:d8:d7:80:ae:84:dd:6e:1d:
         35:48:39:4f:6a:33:51:13:bf:13:e2:33:c0:ca:63:c5:c9:e6:
         5e:a5:49:4c:e0:f8:0f:4e:1e:0b:45:d6:b2:3d:ce:1e:17:7b:
         0e:4c:db:61:35:b8:2c:fb:e6:0b:55:8c:88:92:dc:6a:51:28:
         34:d6:1e:07:a3:af:f2:9e:fc:a0:38:e3:31:00:b5:57:9b:16:
         06:09:16:24:cc:7e:b2:e1:67:93:c7:77:12:f7:2a:d7:97:da:
         b1:73:b2:7d:b8:ee:84:6c:e4:ad:bb:ad:3a:4e:33:4c:ed:02:
         6d:99:4c:f1:33:12:5e:65:21:a7:36:a0:3e:a5:6c:da:a6:24:
         be:0e:da:06:05:d0:5d:d7:bf:3b:10:4e:f6:fc:ca:78:66:06:
         83:01:2f:46:c7:56:35:1f:32:fb:d9:98:6f:2b:fc:ff:ff:7a:
         15:07:1f:5c:55:a0:16:1b:12:49:37:35:e2:27:1c:0e:13:0d:
         88:96:67:58:d2:2b:cb:49:f5:dc:7d:7e:80:13:be:d5:55:25:
         75:47:de:33:f6:b5:6b:3f:03:7c:bd:2b:1a:b2:90:9c:f6:70:
         55:17:88:88:05:3f:58:c5:ed:59:e6:d6:74:e6:94:d7:23:38:
         f2:e0:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:13:07 2025 by rpki-client