Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa
File:                     bc7b5153-4728-3649-bc82-4499eb9a7abb.roa (raw, json)
Hash identifier:          BkARe0YunXOaiEp3Lmm9ebZNSj9hk5gPco45Ni31zqU=
Subject key identifier:   5C:CA:26:86:11:27:48:9E:F2:B5:73:9A:75:09:1F:DB:38:39:5D:DC
Certificate issuer:       /CN=1a4a4def-a575-48e1-87d5-56942434422a
Certificate serial:       010D0C9F4328584A9E9621016E038094ABAB8520
Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        192.41.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:21:01:6e:03:80:94:ab:ab:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=c51a7569-11c6-4cf9-819d-4998d99c1e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:17:ab:a5:3b:9e:8f:16:4b:5e:c3:af:ce:
                    33:d5:c5:10:9a:b0:00:cf:9e:12:fa:61:23:f8:0c:
                    ec:42:3a:38:59:a9:a3:1d:5a:6e:c4:1c:64:7e:32:
                    81:46:0c:2c:c7:61:38:59:c0:1a:dd:b1:02:97:2d:
                    d3:bd:2c:67:ed:3a:53:46:f6:64:42:6c:05:68:d9:
                    40:b4:21:78:72:26:83:df:03:c4:5b:40:21:a4:f8:
                    e9:0d:f9:aa:b1:2d:8b:d8:66:8f:c7:ff:61:0b:0b:
                    ce:ec:f0:0e:85:bb:1b:a4:dd:b2:f0:cb:dc:6a:f1:
                    42:29:b0:1f:33:ee:2b:31:70:de:b8:bc:30:d1:c2:
                    b4:b2:95:75:d2:9f:db:a0:fd:27:8b:e4:80:81:e2:
                    19:6b:fb:ee:1b:60:f7:76:d6:0f:8d:b1:b3:7a:44:
                    d8:eb:67:23:03:6b:95:23:8a:4e:22:c0:8c:49:b2:
                    b3:10:04:a8:f0:3d:30:74:34:12:66:17:32:97:16:
                    2a:2f:92:28:20:8a:ec:b9:11:e9:51:fd:0d:88:02:
                    07:ba:3a:55:1e:31:d1:16:20:c6:30:7d:6b:a0:6d:
                    cb:a0:08:92:7e:66:6f:35:4c:9a:ab:b4:7f:0c:e1:
                    68:63:92:97:42:e2:71:51:de:7f:d4:d1:7a:b8:b0:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CA:26:86:11:27:48:9E:F2:B5:73:9A:75:09:1F:DB:38:39:5D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/bc7b5153-4728-3649-bc82-4499eb9a7abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl

            X509v3 Authority Key Identifier:
                keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:7b:fe:ad:25:47:81:d5:5b:83:95:a9:40:b1:3d:8f:9f:
         02:7e:aa:25:67:a0:80:ae:3b:7e:df:ba:d6:88:70:45:f5:ec:
         5d:0f:4a:b4:81:c0:ca:e5:d5:e3:86:0b:1b:ea:47:a6:a8:d7:
         f4:9b:6a:cd:49:f7:c8:eb:58:ac:d3:ca:c3:db:13:f6:25:6b:
         a7:8d:ef:d4:aa:48:06:c2:43:d3:1e:fe:de:85:97:56:39:f1:
         0e:c6:58:7c:41:ed:f8:b4:25:f0:be:2b:63:fc:89:07:b2:cb:
         f1:bf:09:07:00:7d:30:cf:57:fa:0a:36:eb:38:fc:56:db:8e:
         14:7d:21:c0:a6:60:ca:06:f6:38:f9:74:8c:fe:ce:1c:29:3b:
         9c:a7:b6:39:49:6c:65:b1:e8:ba:16:2e:37:70:c2:7f:bf:5a:
         ca:30:3f:5a:0c:c9:02:3d:4c:37:54:f7:17:d9:59:89:69:4b:
         b4:59:ac:6c:54:38:51:ff:e6:d7:ee:01:ef:c7:a5:c6:39:60:
         88:fb:2a:91:1f:fb:eb:68:df:3c:eb:85:53:af:1c:0c:ff:f9:
         54:42:b8:c5:4f:6b:73:a4:a6:ad:81:11:f3:35:a6:3e:94:78:
         73:00:61:1a:b3:43:a7:f2:85:37:c8:cc:89:08:1c:b7:7d:ad:
         25:f1:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:08 2025 by rpki-client