Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/67d9033b-f7fa-3e87-8748-945557538f21.roa
File:                     67d9033b-f7fa-3e87-8748-945557538f21.roa (raw, json)
Hash identifier:          EYsv0xuFkZoiU1F68dfcvsKJguncGZpj+lBtEiO1SqQ=
Subject key identifier:   6B:6A:C2:6B:EF:3A:F5:87:82:4F:BF:FA:85:C1:41:0B:22:CC:70:32
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ACA7633FFCAC148AE32BCF800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/67d9033b-f7fa-3e87-8748-945557538f21.roa
Signing time:             Fri 08 Aug 2025 18:12:13 +0000
ROA not before:           Fri 08 Aug 2025 18:12:13 +0000
ROA not after:            Thu 06 Nov 2025 19:12:13 +0000
asID:                     31898
IP address blocks:        192.18.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:76:33:ff:ca:c1:48:ae:32:bc:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug  8 18:12:13 2025 GMT
            Not After : Nov  6 19:12:13 2025 GMT
        Subject: CN=5665cbd2-aad8-434c-bc54-bafd630fc954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:97:6e:d6:43:35:ce:94:94:19:f2:db:e1:85:
                    ed:f8:86:17:b9:b2:f6:c5:e1:ae:1d:7c:c0:f3:45:
                    a4:c3:eb:04:bc:76:ad:40:5e:33:69:dd:7d:3b:b6:
                    dc:40:f6:e2:f8:87:da:65:c0:88:69:66:5d:31:52:
                    ba:11:d3:9c:60:43:ab:84:e3:f3:c3:2d:d7:28:8d:
                    fa:ba:9d:6c:55:75:d8:f2:c6:1e:0c:8a:76:1e:1e:
                    00:2b:d9:bc:4b:16:6e:c5:1f:bf:50:ec:8a:b4:ee:
                    65:fa:36:04:62:74:c2:b7:b5:ad:0a:f5:94:bd:ab:
                    31:2f:a2:f1:64:17:75:28:60:90:2a:86:6e:0b:b0:
                    81:1b:e3:4b:e5:71:8c:75:4a:d8:c4:29:bb:f2:da:
                    60:50:0a:b7:2d:17:6c:05:fd:85:9e:98:f0:97:2a:
                    6a:c3:e1:26:b6:20:2e:dd:bb:fc:d7:8b:53:7d:54:
                    3b:38:c3:08:71:b3:19:d4:ae:87:d7:c0:ae:2a:ef:
                    b4:aa:38:6f:d6:1a:21:18:4e:9f:0d:71:6b:42:8c:
                    a4:60:58:b8:86:07:13:5b:97:57:de:ed:f5:f8:db:
                    ef:89:0c:f0:2c:55:43:23:62:45:4f:3c:30:46:e9:
                    f3:dc:60:a1:cd:93:6c:5f:66:36:4d:51:0d:56:41:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6A:C2:6B:EF:3A:F5:87:82:4F:BF:FA:85:C1:41:0B:22:CC:70:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/67d9033b-f7fa-3e87-8748-945557538f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.18.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a3:ac:25:0f:07:9e:3d:d3:ba:d3:e4:14:33:2c:e0:b1:24:
         53:0d:b3:f4:62:84:fd:84:be:9c:16:b9:1e:a6:0d:c7:1b:fc:
         e0:3b:81:64:bf:22:70:8e:b1:cc:fd:c0:fc:f0:df:a7:5e:d1:
         6e:4e:16:de:ce:2b:b2:7e:82:28:d9:d9:c2:7c:4a:81:15:03:
         c0:32:5c:f1:1e:14:70:5c:a2:5c:9d:9d:f8:4e:05:37:ba:83:
         24:a1:e1:f6:19:3e:ac:2c:7c:4f:00:ad:05:d1:ab:9c:8e:14:
         3e:e0:b1:07:52:2d:7a:64:95:81:9e:46:fa:ae:45:9d:0c:ad:
         74:ea:0d:b3:c5:eb:0f:39:90:b3:b9:10:aa:36:71:08:db:f9:
         d9:e4:cd:e9:9f:14:4a:af:d3:7f:5a:7f:c1:06:32:67:df:f8:
         38:44:8c:52:11:1b:24:1e:4e:30:9a:38:e4:a6:70:c5:bb:dc:
         47:a4:97:d7:2a:58:b7:d9:81:32:83:bb:51:f0:42:b5:a5:ed:
         54:34:c0:8d:d2:69:63:20:56:30:cd:a7:3c:80:29:a3:7c:e3:
         b6:20:06:11:86:26:50:c3:8d:f6:ca:03:1b:85:b8:19:ef:a8:
         74:c5:6f:5e:1b:54:43:f8:70:4c:22:f9:53:51:b7:62:92:97:
         11:1d:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:27:16 2025 by rpki-client