Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/d1c8e9a3-24cf-3529-a567-e444eb557798.roa
File:                     d1c8e9a3-24cf-3529-a567-e444eb557798.roa (raw, json)
Hash identifier:          CFmIHyFy8SxF+5an1GwmRt4Hg4rfzVh78uRj7RVz2os=
Subject key identifier:   03:3D:0B:E6:14:D0:4A:0E:28:37:90:FE:30:59:FE:15:8D:15:E0:F4
Certificate issuer:       /CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Certificate serial:       010D0C9F4328584AB7B620F5F1C7FCC36C766628
Authority key identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/d1c8e9a3-24cf-3529-a567-e444eb557798.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     394868
IP address blocks:        115.84.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:20:f5:f1:c7:fc:c3:6c:76:66:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=01c583c8-6c82-4cae-8417-46257ba13958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:f8:9e:55:b9:22:88:52:6c:ff:9e:4c:e3:
                    b2:ee:b6:c2:5a:b3:61:3f:aa:6a:ee:3c:23:ab:a6:
                    36:63:c7:27:b7:1a:b8:d0:82:77:35:44:23:15:9e:
                    7d:12:4b:59:8c:2a:57:ad:50:b1:b9:92:6a:14:3d:
                    d2:a3:75:31:ac:b2:b4:91:5d:fb:3b:2e:43:a3:1e:
                    fd:8f:58:68:6c:d3:ed:b5:e6:40:cf:56:75:5e:b1:
                    0b:53:5e:f2:9a:81:de:38:a9:95:1c:7f:45:b4:f3:
                    c8:b9:8d:e8:dd:04:d9:30:79:29:31:a0:5b:40:90:
                    18:d8:e7:33:ea:88:a5:a1:68:ab:b9:8b:8d:26:e2:
                    31:3e:aa:bb:18:df:1c:d4:9e:f7:3d:d0:89:26:30:
                    94:46:05:74:8c:cc:50:b8:9b:da:1b:d7:8c:5a:a8:
                    73:95:f5:c9:27:5b:54:e8:c3:6a:5d:59:0c:e3:c1:
                    15:b6:62:84:4a:da:e4:ec:be:0e:db:40:75:1b:87:
                    e6:bc:08:e0:48:5e:0b:96:0a:a0:47:a4:12:70:44:
                    6f:72:08:52:d6:f6:bf:e1:60:f1:26:e2:79:af:eb:
                    4e:99:93:c9:3c:21:bc:d1:6b:6d:40:04:62:3f:af:
                    7e:d3:72:ed:6b:35:0b:d4:6d:4b:1d:af:40:73:3f:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3D:0B:E6:14:D0:4A:0E:28:37:90:FE:30:59:FE:15:8D:15:E0:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/d1c8e9a3-24cf-3529-a567-e444eb557798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl

            X509v3 Authority Key Identifier:
                keyid:70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.84.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:bc:fa:46:d1:90:c9:c0:40:07:14:de:0e:56:8d:4f:f9:51:
         6b:9b:6f:d4:ae:e1:cb:19:1e:8a:f7:12:f9:99:0a:ae:ed:42:
         98:ba:d2:a8:9c:4d:02:3d:d2:89:fa:96:09:29:70:d9:c2:9c:
         ee:27:6f:44:d5:ca:71:68:13:8a:1a:fe:69:ef:d1:37:f3:58:
         d0:fc:7a:9c:b3:4e:17:e7:bb:ed:f4:c6:dc:4d:f9:3c:24:4d:
         30:7d:bd:0f:43:42:89:e0:22:cb:51:30:e9:6d:ed:8d:07:20:
         2a:8d:df:aa:04:d5:e0:fa:07:2d:64:60:e7:bd:0c:ad:93:25:
         3a:ca:a3:02:d8:29:91:23:ea:7c:c3:c9:2b:7e:97:15:90:76:
         ba:3b:77:c0:4b:23:13:d6:a6:ca:ea:02:a5:bb:d0:d7:bb:7b:
         c5:eb:b6:cb:7a:70:58:b0:19:5e:18:06:e1:54:4c:17:c7:6e:
         07:ca:91:b5:23:06:7e:6e:53:64:ea:1d:2d:9e:f8:b3:a9:8c:
         aa:72:dd:ba:17:e0:dd:47:f5:bd:2b:3d:0e:2c:9e:11:ee:2b:
         28:de:15:c6:07:b5:5f:13:51:b5:d7:24:0a:2f:ce:61:96:9a:
         dd:23:a7:9c:7d:84:6a:b6:05:5a:cc:30:97:fc:b6:23:1b:86:
         d7:ca:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:13:48 2025 by rpki-client