Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/41914f71-9ef4-3fe3-a531-72a93a74531a.roa
File:                     41914f71-9ef4-3fe3-a531-72a93a74531a.roa (raw, json)
Hash identifier:          1XylA6++ll2vZlBP3YLhps//6YCcDuqWAomrKJwOjVg=
Subject key identifier:   7A:8E:49:8B:F3:22:98:35:2A:72:55:AD:8B:6A:06:8A:FE:14:D2:CD
Certificate issuer:       /CN=d0871315-1c52-46f6-bb0e-2113ca1f139d
Certificate serial:       010D0C9F4328584AA42B7D68CBC7FA3861684700
Authority key identifier: E3:CB:E3:7E:4E:90:9D:3C:13:A3:5E:40:5F:C3:9B:5F:8F:2F:0D:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/41914f71-9ef4-3fe3-a531-72a93a74531a.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     33060
IP address blocks:        192.133.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/d0871315-1c52-46f6-bb0e-2113ca1f139d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/d0871315-1c52-46f6-bb0e-2113ca1f139d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7d:68:cb:c7:fa:38:61:68:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0871315-1c52-46f6-bb0e-2113ca1f139d
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=9c912e8c-d894-4046-84c7-f44be45776cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:d0:2e:d0:01:23:f2:fa:d8:e9:b2:a1:ef:
                    3f:53:f7:b8:f0:06:35:0b:54:bf:f6:9c:01:c6:50:
                    4b:dc:db:10:f2:55:ba:99:d3:78:14:6b:70:e6:1e:
                    df:63:88:ba:c9:61:e7:2c:9f:9a:55:5d:95:e3:c0:
                    eb:7a:19:62:fb:fa:ad:c9:c3:95:32:74:28:89:0f:
                    49:be:14:36:1e:bb:8f:05:f3:97:e2:41:26:ac:80:
                    70:e4:a3:d7:c0:ec:35:a0:b1:50:ab:d8:9a:15:4c:
                    5d:f6:34:cb:8e:cc:11:96:6b:d7:65:d6:04:3a:0d:
                    63:07:bb:de:39:d9:fa:da:61:98:a8:8f:10:ed:96:
                    31:3e:0b:5f:c0:a8:f1:eb:4f:03:49:63:36:fb:73:
                    3a:ef:bc:38:1f:c3:91:0d:dc:a1:f1:40:5b:54:3d:
                    32:2d:94:e6:f7:b9:5d:c3:88:95:00:16:25:20:c2:
                    c9:88:dd:ab:a5:6b:59:ad:ec:dc:60:d3:e9:f4:24:
                    71:ee:e8:c5:30:7d:4e:50:f7:96:9e:3e:97:f6:68:
                    84:de:42:87:89:96:0f:26:dd:4c:e3:e8:2f:07:ab:
                    c1:fb:4c:29:60:c0:71:4a:01:3e:5d:9a:a0:0f:e0:
                    78:ec:3a:76:67:e9:bc:31:a3:5c:a3:b8:4e:43:9e:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8E:49:8B:F3:22:98:35:2A:72:55:AD:8B:6A:06:8A:FE:14:D2:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/41914f71-9ef4-3fe3-a531-72a93a74531a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d/d0871315-1c52-46f6-bb0e-2113ca1f139d.crl

            X509v3 Authority Key Identifier:
                keyid:E3:CB:E3:7E:4E:90:9D:3C:13:A3:5E:40:5F:C3:9B:5F:8F:2F:0D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d0871315-1c52-46f6-bb0e-2113ca1f139d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:12:b8:11:ee:73:16:aa:94:07:77:91:d3:a2:ed:c5:4f:8d:
         ff:52:1a:1a:6b:37:52:98:cc:cf:b0:e1:aa:d1:79:45:2b:7b:
         cd:9e:23:14:c9:fc:7a:23:92:2b:6c:ca:6c:54:2a:93:5f:e1:
         b3:19:8c:54:02:7f:01:80:52:a0:58:80:2d:de:a3:6f:78:99:
         48:de:64:7f:fc:b0:88:5a:01:e4:a1:b3:f9:56:9d:c9:05:cf:
         a7:19:5c:c2:f1:c4:76:74:53:ae:27:92:01:f7:27:3e:4f:6e:
         c0:1d:63:b6:ce:29:6d:27:17:e0:56:77:25:0b:ba:fc:f0:65:
         44:42:07:f0:e9:ee:bd:b6:cc:d6:97:ea:45:76:c5:cd:5a:19:
         c2:b7:5f:f5:e4:64:0d:cc:fe:ca:3b:5f:16:f0:bd:f1:a1:7a:
         60:d6:28:52:c1:3d:be:f1:6f:b1:cc:5c:52:be:5f:74:27:d6:
         2f:77:ca:72:5f:6c:91:79:2b:74:f4:47:ea:21:cb:eb:a5:a8:
         3f:2b:af:41:9c:db:6d:ee:11:9e:67:8a:93:38:23:b0:bd:df:
         db:c3:50:56:be:14:d8:99:b1:da:44:ac:09:32:9e:11:d4:8f:
         54:a1:4c:e3:b1:d4:36:42:41:9b:bd:27:32:8e:5f:b2:55:be:
         1b:61:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:35:35 2025 by rpki-client