Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
File:                     fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa (raw, json)
Hash identifier:          WAOgzvrtnj7VqQ4m4Nu7IvnvXaUebTyppObvAkJiDJU=
Subject key identifier:   EF:CB:78:F4:90:6A:74:42:62:8E:80:D1:83:36:70:4D:04:B8:08:4C
Certificate issuer:       /CN=800a3455-ccc0-4a37-976d-54fe22d7fb52
Certificate serial:       010D0C9F4328584AB220DDB4117EA73401E6BC48
Authority key identifier: 02:B5:A0:07:CB:1D:46:8B:9C:A1:4F:82:F8:F7:66:8F:5D:33:4A:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     33137
IP address blocks:        192.189.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/800a3455-ccc0-4a37-976d-54fe22d7fb52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/800a3455-ccc0-4a37-976d-54fe22d7fb52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:dd:b4:11:7e:a7:34:01:e6:bc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=800a3455-ccc0-4a37-976d-54fe22d7fb52
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=a1496676-b680-459a-a22b-c81409a10c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:aa:d9:40:0e:36:52:c7:dc:f1:4d:44:88:
                    90:d4:88:61:da:a3:2d:66:14:41:97:49:7c:aa:2e:
                    8a:52:7a:49:70:95:df:f5:dc:fc:be:7f:b6:47:ba:
                    0b:f7:ac:9d:08:55:d3:f3:53:25:f5:88:04:0c:13:
                    54:c6:bf:c7:cc:e3:cc:cf:eb:93:4c:47:b4:5b:44:
                    c8:61:21:28:52:62:bf:13:76:0e:35:44:7b:7c:5e:
                    d6:0d:2b:e6:8a:e8:df:a3:d6:7b:54:e0:a1:53:17:
                    37:16:f1:ff:f5:4f:c4:3e:7c:1d:ac:01:90:52:32:
                    5d:03:c4:c9:d0:74:92:83:83:b0:da:eb:c9:31:90:
                    7d:b2:fc:07:73:9d:f2:42:da:86:5d:8b:a0:d4:c9:
                    89:ea:4a:d5:da:89:d0:13:fd:e3:62:84:ef:5a:55:
                    e0:8c:7c:74:75:7a:3e:f7:4c:4b:24:11:bc:45:f6:
                    a1:ef:82:ad:98:ab:9b:96:a3:6b:3b:33:05:2c:c1:
                    4b:76:92:50:5d:85:5a:b5:eb:05:55:20:5c:24:78:
                    e3:26:fe:c4:9e:48:57:b7:03:97:ae:9a:e7:9c:21:
                    f0:38:3c:4e:b4:37:3f:ee:4e:c1:a8:37:44:f6:7c:
                    2a:13:3d:c2:c4:f9:1c:b2:3f:cd:1f:81:fb:15:16:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:78:F4:90:6A:74:42:62:8E:80:D1:83:36:70:4D:04:B8:08:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/fa5a2b8a-7e15-3186-85ae-003f6e4927ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52/800a3455-ccc0-4a37-976d-54fe22d7fb52.crl

            X509v3 Authority Key Identifier:
                keyid:02:B5:A0:07:CB:1D:46:8B:9C:A1:4F:82:F8:F7:66:8F:5D:33:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/800a3455-ccc0-4a37-976d-54fe22d7fb52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d3:e5:46:b9:cc:de:58:97:2b:c0:b9:86:d4:2f:2c:f5:7f:
         ec:e7:a8:fa:72:87:70:31:fc:42:b7:3a:81:3d:9a:ab:e4:f3:
         35:e1:45:9d:dc:26:78:58:cd:ff:d1:94:cc:6d:f1:04:d1:6b:
         8e:17:f6:f8:ee:72:b7:37:3f:d9:fd:dd:1c:d6:87:7a:93:58:
         22:34:0a:3e:99:e4:a0:6e:ad:4d:90:8e:73:ce:9d:a3:7e:88:
         a6:dd:eb:48:e0:57:3c:b9:e1:0c:c9:fa:fc:69:54:95:2b:23:
         85:84:29:72:eb:45:87:7a:b7:ce:f1:e1:c9:42:21:b3:72:82:
         d7:7d:7d:fe:59:e7:e4:a4:bd:c9:6e:3d:0c:82:40:f8:19:94:
         c0:c0:85:c2:76:dc:25:a3:c1:8a:52:c8:3b:31:46:49:f7:f1:
         e5:d8:9d:e0:bb:80:b7:9b:2c:04:38:3a:63:5f:54:e0:44:80:
         f7:eb:b0:6b:52:7e:62:aa:c3:13:b0:78:d7:89:e2:8d:f4:3c:
         01:31:a7:0b:8a:64:17:6d:d8:3e:76:49:7d:9b:81:ce:1a:cc:
         f4:c0:ac:8c:11:ec:2e:aa:94:d6:bd:0f:a5:9a:78:b3:e1:ab:
         13:9d:8c:8a:1a:fe:ce:0a:41:b4:5a:84:ee:07:82:79:46:87:
         87:90:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:28 2025 by rpki-client