Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ad5e405-606a-359b-b3a5-d231ef17b477.roa
File:                     9ad5e405-606a-359b-b3a5-d231ef17b477.roa (raw, json)
Hash identifier:          AWFgD6E9q0K+cpGufmb9g2N0we3Lf6NcZXhIwgNprZM=
Subject key identifier:   7A:02:BB:23:C0:80:D6:33:83:4F:12:9A:CD:9D:8B:AC:DA:1F:5E:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A6C55CCCBED6FEFD465220100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ad5e405-606a-359b-b3a5-d231ef17b477.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     400016
IP address blocks:        199.115.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:cc:cb:ed:6f:ef:d4:65:22:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=53104fb6-1c0f-415b-b650-ffd31372ddfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:4b:ef:64:02:e0:70:84:2b:76:52:29:ad:
                    b6:e7:2f:bf:ab:e8:e7:39:b1:56:c1:c3:4c:e6:db:
                    80:09:55:d1:3f:41:bf:7e:0c:5f:cd:7d:5b:09:52:
                    bf:5f:5c:c8:04:04:45:53:85:5c:46:de:84:b8:ac:
                    a9:0d:e6:56:f8:f9:8a:12:9f:16:6c:ea:67:cb:9f:
                    cf:2f:12:fa:93:c3:af:58:47:f8:32:76:10:31:4e:
                    6e:1c:6f:15:bd:88:30:8d:da:4d:5f:cf:32:e8:30:
                    8d:99:b0:c8:8d:e6:61:5e:4b:62:17:ac:8d:80:1b:
                    42:b5:d6:5e:71:81:8d:77:8b:1b:6c:e1:65:23:a6:
                    16:28:04:52:ef:5e:5f:90:fd:a2:0a:16:2f:f2:36:
                    e2:fb:7f:5f:c1:95:c7:3f:87:62:48:18:ff:45:7c:
                    ca:ae:fe:21:1c:53:8b:f6:cf:f3:06:91:2f:a0:71:
                    ac:71:46:79:49:bc:c7:46:e4:2e:3c:d7:23:96:ed:
                    6d:02:65:f8:04:68:d1:c4:bb:cf:d2:ad:fe:82:83:
                    87:42:40:f0:33:bb:15:61:5b:d3:fc:09:8e:f3:3b:
                    8e:07:58:8a:63:e3:bb:db:25:ab:44:a9:a4:01:d9:
                    4e:1a:31:fb:a2:d5:49:a1:e5:c8:99:f7:69:a2:62:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:02:BB:23:C0:80:D6:33:83:4F:12:9A:CD:9D:8B:AC:DA:1F:5E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9ad5e405-606a-359b-b3a5-d231ef17b477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:21:3c:42:a6:8c:48:4e:95:bb:76:30:4c:0c:12:64:7e:83:
         3c:5b:e3:25:a2:72:a4:63:a5:c2:27:bd:95:17:2d:a5:cc:8a:
         87:85:5c:09:b0:4f:8e:8b:99:29:98:b4:4a:4f:8c:0b:92:c5:
         32:eb:10:ba:d2:78:4e:ba:fa:16:fe:b2:c5:df:db:b0:19:cb:
         7b:0f:c8:96:c1:ee:68:69:38:dd:40:9d:48:2e:55:ee:d4:8f:
         74:cf:c2:cb:55:a6:f8:08:f1:38:1e:fe:26:f9:26:5b:57:92:
         24:51:de:d3:56:76:82:9e:24:9a:51:a1:e3:34:e0:ee:9b:6f:
         de:c6:25:61:e7:39:fa:5b:b3:12:ab:81:59:2a:87:be:f7:cc:
         a1:2d:92:3e:c7:5c:2f:28:76:8c:0b:c1:19:5f:23:c6:bf:e9:
         f0:b4:ed:a1:f7:49:80:07:c6:5b:9f:d6:e7:0d:b0:34:36:55:
         38:c0:1c:42:f0:02:4f:4d:3c:c9:50:30:2d:f5:df:4a:6d:0b:
         f6:14:fb:0c:4c:ff:84:07:fe:b0:02:bf:ac:9c:25:5f:4e:f7:
         9e:36:3f:b6:8d:57:6d:0e:31:d2:ae:72:ce:35:27:68:a1:4c:
         d2:23:20:7b:af:ea:cc:14:be:24:df:82:71:8b:0f:6c:b6:42:
         69:94:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:17 2025 by rpki-client