Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/187ff54d-5d78-31ff-ab6a-b0a417dde416.roa
File:                     187ff54d-5d78-31ff-ab6a-b0a417dde416.roa (raw, json)
Hash identifier:          9GpCpZ5/ZusKqke00tDxrQpjePHAe6F4JjblpzRhn+M=
Subject key identifier:   BF:91:39:57:3C:40:CB:42:AC:6D:85:FD:F3:3B:3D:22:53:EF:76:2A
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F4328584A9FFB9F92F383A5812307A800
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/187ff54d-5d78-31ff-ab6a-b0a417dde416.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     393960
IP address blocks:        172.93.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9f:92:f3:83:a5:81:23:07:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=8ebafcfb-15c8-4c66-9f4c-500c9224b64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:34:c0:ae:7e:8e:45:6b:a8:9b:80:d4:bc:
                    fd:70:64:6b:34:da:91:67:f9:91:9f:fb:9b:21:58:
                    2d:d9:e6:3f:a5:d1:53:c2:3d:44:77:1e:d0:b5:4c:
                    72:b1:d1:ec:56:ac:a1:5d:2b:8c:4f:0a:ba:0f:c0:
                    2b:06:c0:ac:fa:2a:79:1f:00:a7:16:5a:1e:5f:6f:
                    68:0b:6b:17:4d:be:02:4a:c1:f3:ea:3d:ab:af:5e:
                    52:16:02:28:b2:87:82:89:ca:76:9b:e0:ee:83:51:
                    87:35:27:5b:7c:48:3f:55:62:52:2a:66:4c:9c:73:
                    c4:0f:52:f0:28:e6:85:65:a7:be:32:6c:73:3e:d9:
                    0f:b5:c5:c0:81:a3:91:43:6c:d3:a4:18:14:6f:72:
                    c3:84:38:b2:b9:91:65:ff:88:64:8d:6f:13:18:c9:
                    13:bb:82:57:f4:c0:09:38:b4:91:8b:02:4a:b2:d7:
                    22:f2:26:cc:de:17:a2:77:02:0c:af:32:e2:ae:ff:
                    a7:30:65:da:07:3f:ae:52:db:56:25:9f:ac:ed:11:
                    c5:00:1d:a3:ce:a3:39:2b:d2:96:40:b2:3d:f3:87:
                    1c:f1:8a:3b:bc:d1:a8:f3:c8:18:15:df:f3:47:8e:
                    b7:d3:6a:2b:aa:29:da:1a:53:6d:ef:2a:03:65:37:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:91:39:57:3C:40:CB:42:AC:6D:85:FD:F3:3B:3D:22:53:EF:76:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/187ff54d-5d78-31ff-ab6a-b0a417dde416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:86:5a:f8:19:01:6e:3b:b5:cd:8a:a6:54:01:7b:2d:ed:66:
         32:f0:c4:15:d6:24:4d:1b:d0:bf:0d:cd:5c:ab:3b:a5:1f:bc:
         42:55:9e:ae:98:71:d7:67:51:87:62:df:31:fb:6a:1b:9c:25:
         18:58:2f:0e:8b:e2:fa:d3:c1:51:42:c6:c1:66:81:2a:d5:ce:
         7a:5f:09:b7:b5:1c:af:c8:78:02:64:77:7d:99:b9:5f:91:cc:
         24:b4:64:50:bb:69:ee:42:24:6a:32:93:0e:71:bb:8d:10:12:
         49:e8:2d:3a:12:30:6d:bd:fa:fc:33:6d:ea:8c:16:39:0e:07:
         80:32:34:dd:c9:ba:94:f2:24:bd:70:14:35:f4:0b:08:7c:6d:
         fb:dd:28:d4:f8:71:68:52:21:b9:0c:c9:32:53:75:b9:b9:aa:
         8f:ff:e3:b8:6a:9c:8c:e7:3c:bc:83:c5:d6:92:27:79:ee:32:
         06:90:99:a0:f1:5d:34:c1:43:df:eb:33:f3:e0:5d:0b:57:05:
         f1:dd:bf:e5:27:c1:ef:56:a7:ab:01:ad:0e:ba:c5:88:33:7c:
         fa:1c:d7:45:c6:40:94:dd:04:7b:a7:aa:7c:83:b6:67:56:55:
         f1:6a:41:59:0b:58:7b:fe:4d:73:0c:f5:80:e9:18:2d:5f:63:
         62:af:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:07:04 2025 by rpki-client