Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/31409530-14e0-3a8d-b6d7-6af611c15963.roa
File:                     31409530-14e0-3a8d-b6d7-6af611c15963.roa (raw, json)
Hash identifier:          WgvuVVDG/meSrzMC5T9AXFL6w7fROEmyH3mCXxqmmlY=
Subject key identifier:   A6:29:E0:69:63:65:7B:76:5A:64:0D:AF:82:FE:9C:07:17:DE:5E:D0
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584AA85BB29C0A7DA8FD690C5540
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/31409530-14e0-3a8d-b6d7-6af611c15963.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     25899
IP address blocks:        199.91.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b2:9c:0a:7d:a8:fd:69:0c:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=c455737c-8ace-435b-93d8-9549f952696b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:71:00:cf:3f:73:a6:6c:2a:87:40:1b:ad:
                    59:09:b1:35:42:b5:92:0b:31:61:ce:67:a3:f4:cc:
                    bb:c4:bb:93:0b:81:89:c7:d2:0d:68:3e:06:dd:dc:
                    d6:8d:b9:1d:ee:4a:1f:a7:16:c6:77:ec:e5:5c:eb:
                    20:1f:bb:b8:ac:2c:d3:a8:84:f7:97:41:b3:37:4e:
                    d2:60:1f:b3:bd:9a:e8:e6:57:a9:18:c8:89:bd:73:
                    9f:f4:fb:5e:09:5a:bb:05:64:50:7e:06:b7:fc:01:
                    f3:24:e9:c0:f8:12:f1:e8:85:fe:5f:7d:ad:ba:03:
                    68:73:f0:6f:69:9e:40:2d:15:25:14:46:52:6a:b3:
                    fa:ce:6a:f0:cb:55:df:8f:01:d1:ed:02:35:fc:e7:
                    94:47:c7:ed:d2:d4:74:18:bd:f1:df:55:73:31:0b:
                    7e:c1:b6:8d:17:62:d1:fd:d3:6c:88:c2:fd:9e:d3:
                    6f:02:41:0d:99:ed:f2:70:24:d2:d9:3a:e7:f4:b3:
                    76:9c:da:ba:56:ea:ee:b5:01:51:27:91:a2:49:66:
                    8b:97:63:68:17:18:9b:3f:bc:25:94:78:02:a8:b6:
                    a8:9e:10:c0:62:89:e3:3e:7c:f6:2b:c4:6f:00:5b:
                    bc:e7:c4:c4:dc:2b:1e:de:17:79:ea:09:43:85:db:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:29:E0:69:63:65:7B:76:5A:64:0D:AF:82:FE:9C:07:17:DE:5E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/31409530-14e0-3a8d-b6d7-6af611c15963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fb:f7:2d:83:6a:bd:2b:b1:c4:52:05:7f:fd:f6:9c:82:13:
         94:a4:21:49:23:68:25:fc:6a:5f:36:68:d7:b9:7a:76:5a:93:
         50:89:92:cd:b0:69:ea:4d:9f:ee:a5:31:0e:3f:67:a3:d3:71:
         a4:ea:fe:af:05:c9:e4:b9:53:08:bb:c8:40:40:6e:90:6c:22:
         28:86:7b:1f:7e:93:4d:e1:bd:64:34:de:39:66:a9:e3:9f:14:
         45:46:3c:98:ad:a8:f9:0c:13:d2:7d:7d:4a:84:1b:22:5b:98:
         a0:4b:cc:c3:44:34:73:e3:f5:9f:56:39:50:03:3b:ea:20:ad:
         d8:e5:22:bd:86:9c:d9:e9:d4:ba:69:12:59:70:f6:55:81:b3:
         76:01:a5:f4:33:bd:46:51:1a:52:dc:31:bb:ef:bf:7a:f1:93:
         c2:7b:82:0c:3e:44:a8:3a:f4:54:52:84:03:34:55:87:fa:7a:
         52:a7:48:74:25:b4:a0:93:b9:9b:03:d5:35:b6:7a:fa:f8:8f:
         01:5e:2d:9c:3c:a9:da:41:84:be:9a:d3:f8:0e:3a:03:c8:4b:
         db:14:ff:6b:31:ec:70:2f:f1:20:0b:c8:72:21:a8:01:89:6c:
         a2:15:c2:64:28:e8:db:49:da:dd:84:0a:17:0d:f4:1b:00:c8:
         8d:61:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:11 2025 by rpki-client