Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa
File:                     3048f25b-01bb-3ce6-a347-f94feaca53ce.roa (raw, json)
Hash identifier:          f8+uzxhhpCg+n9zmVDGeaob4bgM0OoRdeE7Rsxv8mMg=
Subject key identifier:   87:1E:3E:95:6B:A4:B3:30:23:84:4C:6B:B2:8C:7A:77:1B:ED:24:84
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F4328584A7780902EEC295F78B0E3C680
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     54885
IP address blocks:        192.102.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:90:2e:ec:29:5f:78:b0:e3:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=03b00575-5c8f-434c-b548-d1bb940cb664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2d:51:9e:7e:9d:5b:dd:23:b8:ea:ba:ee:d4:
                    8c:17:29:e8:3e:7c:59:3e:85:3c:fa:a6:5d:72:a1:
                    22:05:55:84:4f:03:11:68:03:7a:d9:94:9d:1c:d1:
                    73:ea:f8:18:ee:8b:87:34:f0:59:97:a8:b2:97:15:
                    8f:ad:6a:9f:74:a2:cf:ac:d9:38:2b:7e:27:66:23:
                    9b:a3:12:05:df:be:b4:08:fb:ac:43:6a:35:cf:34:
                    fb:d8:49:68:6e:26:0a:a9:60:ac:7e:ac:69:f2:f8:
                    1f:42:6e:62:22:1c:b0:52:7a:c6:5f:29:4e:6c:35:
                    89:fa:39:df:9f:38:44:48:62:3f:b6:99:9a:01:76:
                    46:ab:84:43:02:30:90:64:dc:5e:e1:4e:ba:65:97:
                    b6:d7:f4:fd:91:6a:cb:f7:63:4b:bf:ac:9d:c0:f4:
                    e4:15:d7:c6:41:2c:5d:1d:c8:66:ab:e5:ce:78:a9:
                    11:ed:e1:b3:15:6e:fb:19:81:58:39:27:6f:ea:34:
                    14:fe:b2:53:01:5f:6a:76:a1:05:9a:c0:ac:dd:a2:
                    30:9a:56:0e:c0:af:8a:67:51:de:74:43:2a:d1:ec:
                    a9:3a:d0:20:51:13:65:11:5a:9a:15:3d:f2:9c:b4:
                    25:2e:b4:85:c2:1d:5e:45:d0:55:0d:d5:bc:5e:49:
                    9e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1E:3E:95:6B:A4:B3:30:23:84:4C:6B:B2:8C:7A:77:1B:ED:24:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:da:7a:9c:a1:73:ab:aa:a6:f4:12:65:00:4e:b0:55:d8:34:
         c6:b3:77:15:e1:84:02:df:c4:14:e1:1a:7c:33:92:0d:eb:6a:
         57:28:67:1f:78:23:17:db:78:04:63:82:72:08:6a:ef:88:ff:
         25:30:f6:31:b7:a7:97:bd:4e:46:13:74:ca:ca:67:1c:a0:ea:
         7c:a7:d3:0d:55:b9:4a:b6:64:99:0b:ff:cf:b9:3c:75:82:cb:
         f4:1d:13:59:05:19:0c:c0:bb:93:f1:8a:63:5d:a4:8b:6d:2a:
         35:b5:d7:87:0e:11:41:3a:f1:32:e0:07:30:fc:3f:60:b2:98:
         e8:6d:5f:16:87:40:dc:9b:22:c2:83:f6:66:c0:6f:59:06:f1:
         9f:0c:20:73:9c:fb:74:3d:a6:84:bd:08:ad:09:44:be:eb:0b:
         39:a0:b9:12:8b:aa:3d:23:5b:3c:3f:c6:dc:73:d3:41:3b:f0:
         e7:e3:32:1d:c8:ac:74:8e:ab:ad:1d:10:f3:ea:4b:53:d6:44:
         00:8f:f1:b5:3d:ca:a3:b8:a3:b2:64:50:b0:61:5a:66:cf:da:
         43:14:26:2d:56:68:f6:35:40:bb:24:83:4c:f5:88:b8:b2:85:
         82:ed:f5:34:3f:9f:9b:0a:11:e6:a1:ba:3c:cb:bc:ed:46:c6:
         70:46:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:45 2025 by rpki-client