Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/07706698-5649-37c4-bc98-745fb276fa6c.roa
File:                     07706698-5649-37c4-bc98-745fb276fa6c.roa (raw, json)
Hash identifier:          iZsD/y8hCIBVwwjBoxYHl7HJtCqolmqKDH1bMognAhQ=
Subject key identifier:   44:96:B6:B6:2B:6C:50:F0:DA:C7:7B:1E:59:5F:B8:44:B4:BD:0B:37
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A9900C0A71FDC0640E4387700
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/07706698-5649-37c4-bc98-745fb276fa6c.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     397422
IP address blocks:        199.193.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c0:a7:1f:dc:06:40:e4:38:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=dd131efc-e6be-4e2d-bb35-6a88002ec1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:60:37:5b:4c:10:9d:f0:0d:00:86:43:6a:
                    af:6c:e7:1c:cb:81:78:d9:6b:b0:70:5b:ff:90:5b:
                    3c:60:db:78:b6:28:6c:89:6b:6b:48:ac:1b:fc:7d:
                    5b:93:d3:be:7e:a5:b8:fc:ce:73:2a:a9:d1:b8:1a:
                    47:8e:96:b4:2a:86:1a:46:ba:56:0b:1c:b0:b4:1d:
                    b4:03:a1:50:a0:b7:1b:3b:a9:f4:03:c4:cc:b3:b7:
                    00:6b:63:8c:b1:c9:91:ec:76:22:eb:98:0c:30:27:
                    d1:bf:46:64:75:4e:16:94:6c:9c:44:04:67:f8:22:
                    a2:8b:30:14:fb:6c:b2:0e:84:7c:b0:b5:3b:f9:e3:
                    8e:a5:da:e6:1b:17:24:6a:4a:52:6a:46:56:9b:a3:
                    59:fe:02:9f:94:20:df:ce:2a:5b:17:2c:a9:71:24:
                    5f:97:c3:1c:8b:7c:a4:10:fd:b9:42:f3:0a:47:74:
                    1d:a7:58:44:0c:df:d8:3a:0b:3f:45:b8:36:9c:b7:
                    bf:e2:6d:fb:e7:59:a6:dd:19:51:d6:5c:79:22:c6:
                    14:79:55:6c:9f:fa:df:93:76:3d:fb:9f:6c:e5:46:
                    ed:ca:c5:3a:8d:7d:96:9f:d2:3c:db:98:3f:dc:40:
                    9c:53:9b:0b:11:15:89:6d:1d:3a:27:f7:55:7f:73:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:96:B6:B6:2B:6C:50:F0:DA:C7:7B:1E:59:5F:B8:44:B4:BD:0B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/07706698-5649-37c4-bc98-745fb276fa6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:fc:42:e1:c1:6f:87:8c:4a:ac:8e:52:01:9a:e7:96:e3:
         0e:94:43:b8:6a:47:97:5b:7a:6d:bf:52:a0:f5:9b:77:75:1b:
         94:d6:38:97:77:30:b6:bb:dd:e7:18:6d:48:e7:b0:54:85:3e:
         66:d7:cf:18:1b:ce:95:5d:a5:f9:8a:56:7f:b9:96:be:18:a8:
         95:c8:5f:d6:fc:9a:45:78:e4:3b:60:0d:8e:87:01:91:1b:24:
         e8:17:8a:b3:29:5c:74:33:93:da:a1:ad:ab:7f:ab:57:e6:4a:
         7f:e2:63:8f:7f:8c:d3:13:4b:69:e5:55:2b:53:6a:7e:94:e3:
         30:19:ad:bc:82:98:08:ca:55:69:98:9a:24:e7:29:bf:3f:f5:
         cf:c5:a2:81:49:3d:18:15:80:49:06:bd:1a:98:72:54:a5:c1:
         c0:01:62:59:67:d0:ae:39:5b:5b:cb:c5:c6:38:49:e9:9d:f8:
         64:71:ea:66:ec:1a:1f:b8:7a:9f:84:28:db:4d:fe:63:da:1e:
         da:0f:e7:ab:83:4d:73:c3:22:76:56:c5:f8:b3:31:20:e4:44:
         14:58:82:2e:cf:84:66:39:80:3a:25:02:eb:21:be:20:66:2b:
         7c:fd:40:9a:54:5f:6f:3c:02:8e:69:0a:88:cc:bb:c7:a9:51:
         68:8d:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:52:41 2025 by rpki-client