Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f83947ab-f36a-38be-9a4b-09bba7867eff.roa
File:                     f83947ab-f36a-38be-9a4b-09bba7867eff.roa (raw, json)
Hash identifier:          tJJA1p7QiaucJREuLkpE9K87/XLE2YIGLPXPIFQSRT8=
Subject key identifier:   7F:A9:87:FF:A4:E9:59:C2:65:08:60:4E:29:7C:7A:68:C6:F3:4A:AC
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584ABD4B8FFFC5349B0F03914580
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f83947ab-f36a-38be-9a4b-09bba7867eff.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     174
IP address blocks:        199.48.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:8f:ff:c5:34:9b:0f:03:91:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=25e2b6b5-61ac-4c55-86fe-9bb306c7c03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:e3:92:72:9c:90:37:85:f6:21:c6:78:ea:
                    dc:7b:1d:9c:6c:71:63:05:01:04:26:34:22:a9:9f:
                    07:2e:33:c4:b2:d6:d1:45:9c:9c:57:d1:ef:f9:b8:
                    3b:c6:4d:f9:40:fa:0f:ba:ce:75:8c:e1:7f:41:1e:
                    b9:c8:54:78:79:98:8e:34:09:9d:cd:95:db:c7:a7:
                    f7:b9:70:e4:76:75:ad:72:d1:a5:ca:72:cf:64:18:
                    30:05:e3:7d:b2:59:83:81:a4:0a:98:e8:2b:cd:31:
                    09:78:84:f8:60:4c:d0:88:4a:a0:44:86:e4:92:7f:
                    40:4b:df:e4:a9:34:ff:48:81:32:db:b4:00:63:08:
                    2b:ef:85:a1:6b:f6:21:68:8b:22:e2:4c:56:18:f1:
                    82:09:39:1c:6c:ad:16:9a:a2:c6:15:52:9f:d9:19:
                    5b:8e:d5:00:fe:8e:2e:f3:a8:50:f3:52:ea:11:f0:
                    df:fe:da:11:9b:eb:34:05:11:4a:4f:2d:cf:de:9e:
                    3f:9c:9b:54:8f:65:0b:56:d1:9b:91:33:a5:d4:8a:
                    ab:b2:bb:1d:18:4a:3f:8d:10:f3:8f:cb:e8:37:e9:
                    de:31:a4:16:51:1f:00:39:7b:76:ca:c9:ff:01:35:
                    50:a4:94:b0:93:32:45:31:1b:0a:d7:f0:25:6e:e6:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A9:87:FF:A4:E9:59:C2:65:08:60:4E:29:7C:7A:68:C6:F3:4A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f83947ab-f36a-38be-9a4b-09bba7867eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:11:89:23:3d:d0:c8:af:0c:1e:44:4f:cb:e2:74:5f:81:b7:
         6f:91:4d:4d:a0:d1:5e:51:c4:4c:94:85:5f:f9:48:1c:73:41:
         f6:74:80:63:12:96:04:80:dd:38:f3:f5:6c:ac:87:61:ef:d1:
         36:25:ec:51:b5:eb:3e:cb:f6:6e:e6:20:5c:59:c3:17:f7:03:
         5a:80:b2:20:f8:0e:49:92:5e:a0:40:4b:33:7c:d2:5d:84:77:
         10:07:59:73:72:55:84:2c:69:7c:23:1a:7a:6d:36:b8:90:71:
         fc:89:a2:90:6a:1f:1e:e1:18:dc:20:e6:28:06:98:51:51:62:
         8b:11:93:b6:6a:6e:69:f2:47:5a:49:fd:8f:60:bd:ee:25:58:
         35:12:e5:9f:d4:41:ac:45:94:f9:ae:df:42:df:5b:b9:f2:69:
         37:93:5b:1a:ca:85:53:17:e3:44:bd:7e:7b:32:46:bd:3a:08:
         e8:98:26:54:53:6e:7d:97:ff:64:c5:61:96:4a:03:28:32:46:
         51:50:31:0d:f7:a4:cf:0e:f1:84:5d:26:2b:df:2f:93:4f:e5:
         af:b7:fb:41:7d:a3:1e:64:31:1e:df:8c:18:15:29:74:27:84:
         7c:1f:de:3c:62:c1:66:2b:f6:99:67:6d:ca:8a:9b:25:3a:58:
         57:45:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:25 2025 by rpki-client