Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb553300-85e8-4e9d-8abe-9f877c9951f4/a06ead79-ec2e-3300-af52-72c689c3faae.roa
File:                     a06ead79-ec2e-3300-af52-72c689c3faae.roa (raw, json)
Hash identifier:          3TZ3buBZhg4TrS6RK05yqWwtzofaqXoF4b7f23A5VQs=
Subject key identifier:   43:38:65:34:2D:7A:00:33:7C:98:B4:00:88:E3:9B:8E:AB:AF:85:66
Certificate issuer:       /CN=eb553300-85e8-4e9d-8abe-9f877c9951f4
Certificate serial:       010D0C9F4328584AA85BA84581C75B94DB5C2AC0
Authority key identifier: 90:20:69:3A:37:A2:6D:EB:3A:8E:D8:71:4D:A6:0D:F0:F8:E9:5D:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb553300-85e8-4e9d-8abe-9f877c9951f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb553300-85e8-4e9d-8abe-9f877c9951f4/a06ead79-ec2e-3300-af52-72c689c3faae.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     18944
IP address blocks:        141.193.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb553300-85e8-4e9d-8abe-9f877c9951f4/eb553300-85e8-4e9d-8abe-9f877c9951f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb553300-85e8-4e9d-8abe-9f877c9951f4/eb553300-85e8-4e9d-8abe-9f877c9951f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb553300-85e8-4e9d-8abe-9f877c9951f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:a8:45:81:c7:5b:94:db:5c:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb553300-85e8-4e9d-8abe-9f877c9951f4
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=ae8cda17-5ee1-442c-98e1-4068e080f1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:ae:de:b0:36:10:da:3a:85:1c:2e:88:3a:
                    9b:60:92:a1:ad:b9:12:00:3c:ec:a8:01:ef:88:cf:
                    32:6a:74:35:bf:19:b2:e3:5f:63:4a:92:2f:f1:a4:
                    47:d7:ec:fb:d5:2d:12:a7:22:d9:6f:61:ae:bf:8b:
                    f6:33:fe:b9:b4:4d:52:9f:db:06:14:64:8d:c9:96:
                    db:18:b4:05:fd:a9:77:45:9b:00:91:01:32:10:8d:
                    2f:23:a9:47:82:6b:c9:bf:8b:0e:40:c0:f7:be:7a:
                    be:fb:68:6a:bd:a6:d0:d8:fb:98:f1:95:c7:4c:ee:
                    ef:53:8b:cb:5c:87:89:97:3b:70:78:7c:d5:6d:6d:
                    08:18:07:d3:40:36:9f:53:44:a8:87:c7:13:9d:4e:
                    3e:87:e7:70:55:9d:40:60:9d:a5:80:ab:70:cb:85:
                    b7:36:bc:1b:dd:21:4b:57:27:56:68:45:28:cf:f7:
                    20:7c:2f:e2:c5:80:0e:5d:ba:5a:c3:cb:b8:6b:df:
                    9c:4a:99:0f:23:38:51:87:e6:20:74:5e:f0:2d:fb:
                    99:74:82:fe:9d:22:fa:51:ba:58:75:bf:c9:3b:68:
                    05:53:80:77:86:3e:e7:98:03:72:d0:ab:04:2b:e6:
                    ef:dc:7b:25:f4:7e:c4:a7:34:f0:44:e1:85:02:95:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:38:65:34:2D:7A:00:33:7C:98:B4:00:88:E3:9B:8E:AB:AF:85:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb553300-85e8-4e9d-8abe-9f877c9951f4/a06ead79-ec2e-3300-af52-72c689c3faae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb553300-85e8-4e9d-8abe-9f877c9951f4/eb553300-85e8-4e9d-8abe-9f877c9951f4.crl

            X509v3 Authority Key Identifier:
                keyid:90:20:69:3A:37:A2:6D:EB:3A:8E:D8:71:4D:A6:0D:F0:F8:E9:5D:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb553300-85e8-4e9d-8abe-9f877c9951f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:5a:f1:83:10:34:a4:7b:3e:f2:3f:f0:85:32:cc:7a:be:
         17:15:6d:21:41:83:eb:cb:f3:46:a8:ab:28:e1:94:6c:a8:63:
         f0:a0:39:93:c0:7f:62:e1:90:14:e3:3c:1c:6a:81:00:b9:f1:
         25:d9:3d:5b:66:ad:df:26:23:f3:d4:80:90:f2:06:6d:bb:0f:
         3e:d5:cd:e1:1c:08:d5:28:2e:0c:1d:e0:ef:5e:de:0c:dd:b4:
         c0:7e:93:a3:6b:99:23:25:de:19:05:d0:93:0f:f4:2a:81:04:
         db:92:7b:e7:80:9d:3b:18:c1:0c:85:5f:95:ec:bb:8f:a0:06:
         31:88:cf:06:82:1e:b9:9d:eb:0e:e5:4b:94:eb:1f:1f:d2:42:
         20:7f:e0:b2:ba:a8:b9:79:9b:6f:83:65:55:31:6b:47:06:06:
         b2:0e:04:56:ff:50:05:9d:0f:4a:18:7e:ff:48:95:da:b1:a2:
         88:87:ae:e9:d3:28:8c:5f:8d:47:ab:99:96:2b:04:ba:53:9b:
         5a:6a:72:4b:5f:43:23:6e:85:30:c3:35:cd:ae:32:16:d0:96:
         9d:64:0d:ef:57:6d:3f:b2:11:a4:d5:88:8a:7e:76:fb:5e:99:
         84:ea:30:15:98:e9:fd:07:ff:c3:2c:a8:54:92:ef:80:26:1c:
         e6:00:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:08 2025 by rpki-client