Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa
File:                     4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa (raw, json)
Hash identifier:          ZBl9aTMkEP008kDpIYoCPTsqlpY+k8Oe+7a0qF90Brw=
Subject key identifier:   D6:D5:70:0C:F9:B2:76:37:30:7F:7F:C8:46:E9:7A:1A:75:1C:F6:D6
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584A94D0EE7AA31F0075AF177DC0
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     30456
IP address blocks:        195.88.218.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:ee:7a:a3:1f:00:75:af:17:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=dc9a08a6-5619-47aa-97d6-bbe6d6ab297b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:32:0c:87:52:42:23:b4:fb:0f:8d:50:7a:
                    64:90:fa:c4:75:28:e6:d5:c2:6f:12:2e:24:e8:94:
                    ef:76:f6:32:f2:92:e0:ff:d3:a7:ac:ad:22:d4:43:
                    b5:49:34:0a:97:63:60:e5:89:07:e0:c9:c3:38:44:
                    0f:7b:45:a6:8d:a1:12:e2:9e:87:2e:d7:c0:80:fc:
                    dd:c0:ae:5c:dd:43:77:0f:57:d5:4f:d1:df:90:64:
                    22:de:18:11:49:00:5d:ca:8a:51:9f:9f:5e:75:86:
                    98:07:d5:65:b5:f1:83:c5:19:ca:40:08:4f:4f:49:
                    3a:0b:38:6f:6a:c0:82:86:0b:f4:b2:47:5b:7f:7d:
                    b1:a9:e7:d9:29:25:c2:fb:04:ad:d2:91:e4:12:e2:
                    28:82:a1:af:c2:3b:7a:5d:33:41:e9:02:6a:f1:b7:
                    51:a8:d6:cd:63:5a:9b:b4:76:16:41:6f:d8:e5:a8:
                    5b:00:ba:f8:41:e7:72:2a:52:85:36:c9:ae:b8:17:
                    a8:b2:34:3e:10:5f:61:20:af:96:45:a1:be:7d:a5:
                    c2:95:4c:97:62:1a:6d:35:77:65:08:d2:ce:ed:8f:
                    14:73:54:1e:75:de:fb:01:f2:9e:c5:d4:5d:b6:2f:
                    d5:f9:e7:13:af:98:c0:ae:7b:e6:0e:63:ae:48:43:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D5:70:0C:F9:B2:76:37:30:7F:7F:C8:46:E9:7A:1A:75:1C:F6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:58:4b:93:88:9d:14:15:59:e0:ef:4a:44:ac:37:67:53:41:
         ea:8f:1a:ed:9b:f4:c8:b6:a8:17:b2:3c:d6:a5:b8:3d:6c:80:
         10:66:59:6d:52:ae:ba:b7:92:7d:94:29:03:aa:0b:0d:fe:30:
         e8:ff:e4:c6:55:91:d1:bb:f2:14:2e:34:11:c3:e2:1c:ab:15:
         82:a9:4c:02:b7:3e:29:9d:4b:d8:ea:ee:ab:24:4b:c0:dc:8c:
         8b:21:2a:19:57:ed:34:bf:79:09:ce:a4:f6:ae:8b:28:a9:36:
         48:50:62:ff:a4:20:7b:53:b0:4e:48:fb:db:e4:7a:1f:78:8b:
         39:f2:eb:b5:df:5a:6e:95:d7:6e:13:c9:23:f2:01:af:18:ae:
         11:46:e7:56:a6:ee:8f:ac:f9:ef:b7:c2:80:3e:70:69:a5:81:
         a7:e1:e7:86:e2:ba:e5:40:99:4e:53:0d:62:30:27:ed:cd:57:
         0a:00:43:53:17:58:a1:d9:2f:aa:02:e2:15:91:bf:14:ab:a5:
         a5:c4:65:33:ae:a1:46:f1:59:53:b4:24:e0:aa:b4:cd:90:dc:
         46:e6:7b:55:d9:b9:5c:d5:3e:51:96:bd:04:d0:67:f9:5c:ba:
         e2:cd:8a:6a:4b:42:c3:bb:5a:84:ce:8f:00:22:ee:df:72:46:
         a2:1d:b2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:55:21 2025 by rpki-client