Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa
File:                     fbb388ff-402d-371a-b111-12939dcd0b26.roa (raw, json)
Hash identifier:          gXwg6Wpp7nCEoA2KHy7+c+MZXlJPQNt1MNC3m/ljuW4=
Subject key identifier:   9A:E5:30:C6:5E:56:21:8B:2B:F6:DA:11:AE:96:EE:FD:4F:12:1B:46
Certificate issuer:       /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
Certificate serial:       010D0C9F4328584AB4EB8056CBD13CD3611716C0
Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     19201
IP address blocks:        143.223.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:80:56:cb:d1:3c:d3:61:17:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=b0a2eab1-f152-4dc5-9a49-87603c2e7f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:f8:e5:49:49:74:fb:d4:42:1c:2b:f4:b0:
                    4d:79:65:c3:cb:32:eb:7b:5e:b3:7d:0a:92:fa:93:
                    48:d0:96:d1:9e:6f:63:88:b6:cd:48:cd:f6:ab:9d:
                    a9:c8:5f:d6:4b:3a:e6:3d:fa:55:c8:36:e6:a3:34:
                    9c:6a:1e:7b:2c:55:49:9c:d7:0a:46:91:b3:2d:d1:
                    ca:5a:9e:23:0d:f7:9d:b5:65:4f:93:44:83:69:47:
                    28:20:d1:35:62:f5:cc:dc:62:61:8f:0c:16:76:5a:
                    8b:bd:3a:b0:75:03:48:d3:93:96:37:97:30:eb:52:
                    8c:b3:23:f8:49:73:88:56:7d:85:3f:d7:ab:4a:d1:
                    bb:23:7d:c2:21:09:b0:69:23:a2:97:d3:e4:21:de:
                    1a:a2:90:c1:c5:b3:94:17:24:de:87:2d:a2:46:7a:
                    9e:25:6c:c3:d9:5b:ce:f3:a2:6a:70:98:53:4f:a3:
                    f2:af:df:5a:39:c6:b8:96:02:d8:6c:62:70:c7:5f:
                    54:e1:fc:24:e2:42:fb:13:93:0d:7a:cf:2c:83:12:
                    7b:b1:8d:df:57:b9:c2:28:d2:50:a2:3d:5a:6f:af:
                    f3:54:39:04:de:e6:66:77:cd:02:e8:28:b6:4f:f5:
                    62:a2:1f:d9:49:84:a1:d4:b4:49:ca:02:a6:6b:43:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E5:30:C6:5E:56:21:8B:2B:F6:DA:11:AE:96:EE:FD:4F:12:1B:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl

            X509v3 Authority Key Identifier:
                keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:dd:7c:b2:83:c6:cc:32:db:94:b8:a0:92:d5:b2:53:57:
         92:dc:db:09:e8:67:9c:ef:b4:22:d0:7c:d9:9f:20:06:62:ee:
         ba:55:0c:82:45:6c:8e:12:93:8f:ce:4f:c7:e5:78:36:48:be:
         03:9b:93:e9:6e:d0:01:01:95:cb:3e:6b:91:25:f1:ed:17:96:
         5d:04:19:13:05:2b:91:cd:1c:f9:a2:e1:94:9c:d8:bf:af:d5:
         dc:64:19:23:96:6c:24:03:e4:6c:4e:06:56:67:4e:72:80:46:
         80:0a:6a:08:62:49:c1:94:ac:cb:07:df:02:e7:de:a1:95:95:
         6c:c4:63:9e:ab:a0:1f:c0:a0:3f:1b:c8:cb:ed:b5:4f:54:8b:
         2e:18:52:3c:6f:ac:c6:cd:cb:48:44:26:af:10:11:fe:51:50:
         99:10:c6:4b:3f:da:5a:6a:70:48:c4:36:17:c5:83:43:45:06:
         a3:f1:89:e0:dc:5c:d1:21:fe:d4:63:a9:82:14:9c:c2:f0:97:
         a8:07:8d:89:e5:c9:75:62:0b:38:aa:c8:05:7a:75:3b:f1:78:
         9e:8e:66:bc:11:e4:f5:a0:83:a4:0a:3e:07:f0:47:f8:cb:a6:
         bf:7a:32:18:56:f8:80:e3:12:b1:23:4d:8b:45:ab:fc:eb:a0:
         d6:90:00:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:41:19 2025 by rpki-client