Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa
File:                     9d556077-1a33-38c1-83d3-f523ab48772e.roa (raw, json)
Hash identifier:          7jLn/a5yc42X9CZW5CdsSJfKVzow8D0eZTgda+4DNdI=
Subject key identifier:   46:2A:86:69:3C:A2:2D:78:E6:6F:99:16:AF:4A:E3:24:B9:DB:37:D9
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584ABBE62B2D1F3567D1FAE6D1A0
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     0
IP address blocks:        149.112.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:2b:2d:1f:35:67:d1:fa:e6:d1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=79c7fab4-15dd-4af7-a13a-3d63a5c9fde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:ed:85:c2:5a:17:0d:4c:67:0d:fb:7e:db:
                    28:53:24:4a:00:14:0c:58:1a:a2:83:92:e5:5d:d6:
                    50:3b:af:a4:18:84:f4:34:f1:c8:92:bf:55:59:fc:
                    77:e7:7a:6f:db:90:2f:75:d7:56:73:fa:a9:6a:4e:
                    bd:02:ed:86:20:62:35:4f:13:7b:fb:f3:6a:8d:d0:
                    1f:ad:6b:bf:63:6b:ff:e1:8d:6c:e4:bd:54:d9:67:
                    93:85:f7:19:ee:3c:8e:48:83:17:83:2a:f1:d5:f5:
                    37:17:11:ef:ff:7e:4a:1c:1d:e5:69:e3:ec:cc:a0:
                    b8:bd:f1:2b:17:f9:66:d4:eb:96:40:26:1d:7c:46:
                    0b:6c:39:db:64:30:7c:be:8f:9c:7e:68:1b:94:69:
                    6c:22:48:3f:4b:88:f2:13:f8:f7:c1:dc:73:9f:5b:
                    9a:46:9b:7e:eb:d9:97:fb:ce:c2:60:71:bb:a6:2b:
                    af:41:5a:d2:3e:19:6a:52:0c:4e:73:c4:5d:db:73:
                    56:13:a3:27:92:0e:54:18:36:1e:42:d3:98:ed:5d:
                    d7:5a:61:e2:06:3e:1d:ab:fe:15:15:6e:f3:a7:db:
                    b9:76:8b:98:70:0c:96:1d:0c:48:3f:eb:69:40:48:
                    3b:64:f0:83:52:14:18:5d:10:83:f1:d5:f7:1d:36:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2A:86:69:3C:A2:2D:78:E6:6F:99:16:AF:4A:E3:24:B9:DB:37:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:a9:fc:90:d6:82:3d:40:80:ea:77:b8:1a:2c:cc:10:4c:
         2c:f4:d6:1e:5c:63:21:bd:10:df:8b:59:c7:a2:ad:ee:d6:cb:
         91:98:4d:33:1a:74:5c:4f:dc:1e:0e:64:df:d4:9a:71:02:b4:
         42:a0:61:6f:b7:24:4b:b8:14:b3:67:be:da:03:39:ce:dc:88:
         62:85:80:d9:64:dc:9d:c2:f4:c6:f0:d6:08:7e:83:6a:26:6d:
         11:2d:28:70:51:3d:59:dd:2d:6d:3b:75:b1:f4:59:45:ca:46:
         d4:04:65:30:37:10:32:56:24:2c:e6:37:48:2d:a4:43:31:cc:
         32:66:83:f4:98:b0:21:d1:2a:24:37:3e:87:cc:5b:ed:0e:99:
         2b:ca:e8:5e:72:03:e6:ee:a6:d7:6d:cb:ce:a0:21:9f:f9:d0:
         4b:b8:d4:62:9c:b7:f7:d8:e2:18:7b:86:af:6c:7a:ef:83:a3:
         06:e5:47:e9:87:e3:37:49:f3:ab:e5:fb:32:de:76:8b:e4:73:
         e1:7b:23:58:e5:b5:2e:30:22:cb:fc:f6:7f:e5:90:92:66:7a:
         e6:69:12:8d:77:c9:a7:be:21:79:d4:91:e4:67:f1:c6:88:ee:
         6b:da:41:9e:47:6e:7d:7c:fe:ca:28:50:a3:59:38:b5:4b:fe:
         35:b5:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:36:50 2025 by rpki-client