Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/accb8eb5-8eac-38d6-b382-61138ad997cc.roa
File:                     accb8eb5-8eac-38d6-b382-61138ad997cc.roa (raw, json)
Hash identifier:          Rlg4s2naaYIfVHd90SlvXFNfoypUN5FhohVndrW5C6g=
Subject key identifier:   8C:B5:FF:72:6D:25:AD:52:D4:88:9B:47:23:02:FF:2A:B9:33:DC:B9
Certificate issuer:       /CN=141b1a76-b2c0-444e-a0ce-919d160454f9
Certificate serial:       010D0C9F4328584A9636989050DC6FB6037EA4C0
Authority key identifier: 6D:A8:5E:92:86:AF:29:2B:A2:B2:37:9A:0B:44:7D:D7:89:F9:FB:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/accb8eb5-8eac-38d6-b382-61138ad997cc.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     29802
IP address blocks:        192.214.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/141b1a76-b2c0-444e-a0ce-919d160454f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/141b1a76-b2c0-444e-a0ce-919d160454f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:98:90:50:dc:6f:b6:03:7e:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141b1a76-b2c0-444e-a0ce-919d160454f9
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=eed839c1-90d5-4046-b8fe-76e4ac1e485e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6a:85:68:2e:d0:45:dc:b3:59:aa:86:12:de:
                    da:06:5a:ae:ca:0f:6f:82:dd:9f:62:55:b0:79:46:
                    a7:87:98:69:2c:4b:67:6c:5e:eb:02:37:10:ea:a2:
                    d9:98:31:f6:f8:d2:45:b7:66:ac:a8:79:a4:d8:86:
                    de:36:a8:d9:0c:32:7c:58:09:55:c1:1b:3f:d0:85:
                    e5:8c:b2:fa:ca:ca:41:ba:36:f8:27:75:ea:48:41:
                    4c:a4:2b:46:f2:b5:6b:90:01:92:2a:4a:0a:1f:62:
                    21:e4:00:c5:eb:e3:37:6f:ed:c0:86:ff:2a:e5:5d:
                    04:ce:a9:96:53:a1:4f:7f:87:b7:af:e0:d6:b1:13:
                    1e:97:4c:62:6f:76:e8:50:63:95:84:dd:0c:21:bd:
                    e9:58:35:22:cf:aa:cb:fb:1d:98:7a:2c:71:8f:4f:
                    7f:e4:a0:7e:70:ab:ba:9f:0c:5b:11:50:ee:65:3d:
                    d8:b0:da:89:83:bd:58:e8:66:24:38:02:eb:07:82:
                    6a:40:8b:17:c4:9a:1c:88:86:ae:82:0d:ee:aa:16:
                    3d:0e:92:48:13:0c:08:84:f4:52:8b:9d:3d:e2:91:
                    aa:23:39:4c:1e:b3:d9:08:09:09:cb:19:39:42:d9:
                    b9:2a:ae:93:c7:db:4a:ec:57:e2:54:5a:d1:cc:e6:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B5:FF:72:6D:25:AD:52:D4:88:9B:47:23:02:FF:2A:B9:33:DC:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/accb8eb5-8eac-38d6-b382-61138ad997cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/141b1a76-b2c0-444e-a0ce-919d160454f9.crl

            X509v3 Authority Key Identifier:
                keyid:6D:A8:5E:92:86:AF:29:2B:A2:B2:37:9A:0B:44:7D:D7:89:F9:FB:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.214.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:16:07:85:b0:fb:4c:2d:b6:90:a1:dd:70:bd:98:2d:24:7a:
         b9:ed:c1:59:dc:5f:e2:51:b5:bb:37:9e:3b:29:dc:a9:10:d7:
         76:84:69:35:aa:48:7a:e1:28:b8:7b:94:2f:b2:71:ec:b6:50:
         bc:61:99:0b:bb:c5:e2:3d:7c:50:8c:1a:7c:38:7d:d3:1d:9a:
         7f:ae:41:51:11:1e:95:65:80:c6:cc:d0:db:7b:70:6b:b6:29:
         b2:c9:77:b9:db:e6:5f:93:51:d5:73:4e:96:1c:85:74:84:b6:
         28:d4:6e:10:cd:7a:c8:c3:c1:da:96:dd:76:e8:22:50:94:48:
         b9:88:fc:b0:41:6d:87:71:ce:cf:17:a7:a1:78:1e:da:aa:4e:
         7d:14:b1:e3:28:55:43:ed:ce:c5:51:64:b7:4d:46:76:2c:db:
         a9:5f:bb:f5:6c:d7:86:2d:9d:fe:3c:8f:9c:6e:fd:86:19:3a:
         ed:e5:ca:7f:cb:c1:aa:1c:c8:5f:ac:48:e5:9c:6a:e5:c5:c1:
         8f:6e:5d:b4:29:41:b9:0f:44:32:a4:be:0c:d8:37:e9:3f:d5:
         88:a5:02:61:84:91:ae:4c:97:60:2b:74:4f:4b:22:d5:b2:e9:
         ab:32:ef:39:f2:37:3d:ed:69:10:4c:3e:4b:45:c6:ac:7b:44:
         c0:9a:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:54 2025 by rpki-client