Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79112634-bebb-39be-ab3a-e92c8069e05d.roa
File:                     79112634-bebb-39be-ab3a-e92c8069e05d.roa (raw, json)
Hash identifier:          ewoLZWG+rpEA4NAqnMEY7wGl08aWpgdV7ToJpIOAKgI=
Subject key identifier:   60:5C:A6:23:6E:25:D0:7B:86:D8:B9:03:67:75:65:DA:FA:57:F9:3D
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584A8575F3E41B647C5A23060000
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79112634-bebb-39be-ab3a-e92c8069e05d.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        199.0.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f3:e4:1b:64:7c:5a:23:06:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=b5473aed-1bda-4993-bfc6-1bc087ed836d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:85:04:50:2a:d1:ed:85:72:f5:fe:dd:0c:
                    dd:df:9e:36:f2:40:a1:4c:f2:2d:c5:4f:3e:f9:4e:
                    a8:6e:25:cb:42:e8:9b:b5:7a:87:c1:84:60:7d:93:
                    a7:81:bf:70:b4:ce:96:c1:33:87:17:82:c7:42:5e:
                    b8:0c:fd:79:66:b3:95:2c:42:33:b7:2b:be:f7:5b:
                    f0:d0:81:06:52:bd:43:9c:f5:78:05:6c:c6:7a:1a:
                    ee:3c:b3:df:7a:f7:9c:1a:59:a6:d9:12:7d:94:e4:
                    3d:f7:f6:1a:04:17:5b:db:98:d4:79:df:16:96:a7:
                    01:b2:5f:42:5a:8a:8c:50:11:b9:1a:c7:0e:29:1c:
                    2e:e6:1d:9d:b6:55:11:74:39:f7:32:e9:45:26:35:
                    bf:46:aa:c1:bd:27:e8:3f:c1:bd:95:a7:fd:73:60:
                    fa:34:16:6a:5f:f6:4a:c0:4d:75:7b:28:94:17:cb:
                    a0:74:05:6b:75:fe:bb:95:1a:c1:2d:21:14:5b:9d:
                    75:45:c6:28:51:7d:91:09:eb:ab:0c:f8:a4:da:32:
                    7e:b2:90:8e:54:83:aa:7b:1e:d2:a2:4b:ff:fa:cc:
                    25:50:e5:98:f3:9c:36:ab:b1:92:c8:2d:c8:c8:dd:
                    07:10:31:21:24:39:e6:72:e6:88:bd:b5:4e:b1:d4:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5C:A6:23:6E:25:D0:7B:86:D8:B9:03:67:75:65:DA:FA:57:F9:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79112634-bebb-39be-ab3a-e92c8069e05d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.0.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:16:a8:ff:06:48:77:11:37:2f:33:a6:33:bc:bb:43:86:
         a1:2b:b8:14:77:c1:1f:08:ff:66:a2:e7:ba:72:45:62:30:b5:
         20:8e:e0:18:29:79:4e:e9:5b:cc:39:88:97:c5:07:c8:4e:78:
         b1:40:14:5a:fe:2f:1e:a1:92:37:95:01:c9:be:10:3a:71:5d:
         31:9c:4b:da:b1:36:9a:3f:b7:05:e6:63:ee:c7:a1:53:a3:49:
         82:2f:da:24:64:e2:03:83:59:0b:24:3b:1f:47:77:20:78:43:
         64:ba:cf:a1:06:eb:d5:fa:3e:8f:f5:f6:67:45:2a:fc:4f:e3:
         77:fa:aa:43:56:f8:8c:ff:11:61:1d:04:45:e1:42:aa:84:ea:
         24:d3:0e:51:37:c4:e9:b5:8e:ba:24:ea:e2:5f:d9:72:29:56:
         f6:34:e5:81:5b:3f:99:ed:7d:8c:3c:33:e1:3a:a6:b2:72:92:
         d6:69:2f:da:41:71:bc:36:fa:b7:31:c2:cb:71:d7:20:e8:be:
         c0:7d:53:a1:7e:b8:33:80:89:ce:83:5a:e3:66:63:da:39:c4:
         eb:7e:02:57:08:1f:b0:9f:2f:d4:04:38:f9:21:a7:67:3d:ba:
         33:92:38:39:40:74:bb:6a:14:87:61:6f:c7:ff:f0:ba:2f:2c:
         5e:f7:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:33 2025 by rpki-client