Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa
File:                     72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa (raw, json)
Hash identifier:          aVadU7i5dMCjmnQJB9mwmO93mWcOXZaB7mhZsEjMt0w=
Subject key identifier:   76:F2:2F:D9:C0:B8:89:03:1E:DC:B0:F5:09:56:40:DD:48:D4:BB:5D
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584A146571CE6CCF8892DB187AC0
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     33392
IP address blocks:        192.149.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:71:ce:6c:cf:88:92:db:18:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=bcabddc5-a521-4e8f-a69e-6fb0ddadf309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:ab:48:58:e9:da:20:80:68:65:de:d4:ee:
                    e6:e2:b2:b0:3a:82:09:25:d0:e5:cf:9e:5c:b0:18:
                    ab:d8:3a:40:3d:6e:75:6e:95:84:1a:16:24:65:69:
                    5a:5e:da:b5:e1:8a:96:1e:cc:27:e9:03:9b:d6:8f:
                    87:b8:25:68:6d:97:a9:71:90:59:b4:8e:fc:e4:6a:
                    71:a6:18:ed:e0:b4:d8:26:1a:7c:48:55:1c:31:78:
                    b8:cd:9b:cf:a2:15:f2:4c:58:38:5b:94:c2:22:d6:
                    b1:1f:2c:fc:fc:d8:87:dc:b5:0a:f8:61:3e:55:13:
                    85:70:98:20:22:f0:47:1a:49:6c:33:85:6d:36:53:
                    38:9c:bf:d0:d7:40:67:b2:71:3a:3f:69:3a:3f:5b:
                    f5:a0:77:6e:0a:b2:44:43:53:cc:c0:72:f5:66:e1:
                    98:1d:8d:2e:e7:e9:82:0a:21:ee:20:7c:dc:57:a8:
                    b6:ab:18:ea:a5:85:43:cf:9c:ec:1c:66:4c:80:73:
                    0c:55:fb:bd:1e:c7:ad:1c:64:7d:74:18:59:6b:bd:
                    2e:03:23:c5:3d:20:9a:99:c4:1d:5a:de:12:d4:b2:
                    c6:12:5b:29:45:2f:ac:70:bd:e7:00:a5:28:32:81:
                    94:46:40:76:b9:a1:eb:c4:9f:9e:a8:10:6e:45:c6:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F2:2F:D9:C0:B8:89:03:1E:DC:B0:F5:09:56:40:DD:48:D4:BB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/72bbd88d-151d-39cf-9d65-955b5c8b2da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d3:9d:71:48:15:8f:a9:0c:d0:97:d4:89:a7:dc:20:9c:81:
         4b:34:19:ee:71:6d:1d:96:08:c9:11:a9:db:93:27:3d:42:05:
         68:f2:f0:e9:7f:1f:bf:02:42:4e:59:11:06:07:ea:98:60:b0:
         ff:07:95:ea:f3:2d:e6:3f:bc:2f:4d:02:56:6b:1f:ad:4a:18:
         23:03:23:55:ac:24:d4:7b:1b:d4:a2:6c:fa:51:e7:22:12:9d:
         d2:d3:43:34:fb:fa:7d:f2:11:2e:26:d3:3e:23:a6:6a:cc:9f:
         3f:2d:c9:9e:0f:b6:e2:23:f5:b6:aa:0b:e5:72:64:b8:0e:61:
         03:8f:b6:e2:fd:f9:8d:eb:34:b8:1e:73:45:11:2f:ea:48:98:
         fa:5e:d6:f1:90:07:d2:fb:e4:b7:a8:a3:ce:29:5b:59:dd:c6:
         19:44:77:2f:ff:87:8c:a1:b1:70:6b:1b:7a:3b:8e:20:5c:ab:
         d1:f0:a1:d9:62:72:e8:91:b2:d0:ae:54:ca:5f:86:f1:34:93:
         ad:6b:f5:56:42:d1:7c:cb:c1:e2:e6:65:05:55:f1:e6:3f:df:
         87:c3:dc:9c:26:b3:12:ac:27:1b:12:78:88:a3:f0:ae:48:bc:
         a2:9b:3d:d6:fa:04:b9:24:a2:75:9d:99:f6:f8:02:c4:17:53:
         3f:90:fc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:14:40 2025 by rpki-client