Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/75a35e35-c125-35da-a95b-175295e2aa67.roa
File:                     75a35e35-c125-35da-a95b-175295e2aa67.roa (raw, json)
Hash identifier:          ZYvaAcUZnMtBKBJDMi/ef0Kf3Si/yKFOv9UQwJ4etPQ=
Subject key identifier:   E4:EC:52:07:7E:FC:D9:57:5A:CF:62:6C:FE:7E:32:9E:3E:5D:C6:72
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584A94D0EED5B8FEB5CEB9E1F580
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/75a35e35-c125-35da-a95b-175295e2aa67.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     30456
IP address blocks:        185.199.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:ee:d5:b8:fe:b5:ce:b9:e1:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=5aefa135-4f8c-4278-aa90-d2af9490a84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:8e:8c:af:9d:97:dc:aa:19:a0:22:55:df:
                    33:49:9a:cf:41:a6:f9:81:de:ec:0e:76:21:3e:ec:
                    fd:ce:9a:d2:53:03:58:b6:3b:a8:fe:32:3f:3c:74:
                    d8:9a:d6:e7:f5:67:3f:4e:a5:1d:33:92:ba:ef:e2:
                    a5:8c:de:76:1d:d6:0d:ef:db:66:df:88:72:62:c8:
                    dc:e0:28:ad:05:ab:52:2e:49:7b:03:67:f5:07:45:
                    4e:44:96:28:b1:e5:a3:dc:66:1a:b7:41:c5:2c:21:
                    0e:0f:17:c1:6a:6d:b5:0f:9f:04:22:e0:22:65:cd:
                    69:ea:4d:63:5a:74:4a:3c:d5:17:39:c0:f0:0f:4e:
                    3f:17:9e:9f:a3:a4:a3:62:ee:88:b8:ab:cc:c3:3a:
                    01:36:c1:24:fc:eb:a2:a2:65:9d:ea:5d:8c:9b:b1:
                    1c:cc:fd:71:9e:a2:d0:61:42:00:b3:57:41:86:6a:
                    d6:ed:85:f6:a8:77:eb:98:15:7f:44:d0:94:7f:01:
                    5b:81:0b:24:8d:d6:d7:15:50:a3:e3:5a:09:2a:f1:
                    90:ed:8b:5c:bc:85:5e:71:4e:2b:20:3e:88:a7:96:
                    64:12:92:b8:07:c5:0d:d9:2d:e5:e9:44:e3:6c:e6:
                    89:cc:de:dd:80:ad:7f:04:da:e9:26:6f:29:e1:4b:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EC:52:07:7E:FC:D9:57:5A:CF:62:6C:FE:7E:32:9E:3E:5D:C6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/75a35e35-c125-35da-a95b-175295e2aa67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.199.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:60:de:a2:af:1f:4e:bc:ad:b6:99:8f:0e:07:45:2d:b4:9c:
         49:1a:08:66:9d:f7:b3:a8:53:35:26:24:a5:64:4a:ca:7e:e1:
         51:ad:ea:c7:7b:86:3f:30:67:88:ad:55:67:1d:6f:fc:a8:e8:
         0b:0f:67:80:84:1e:c5:1a:e2:f7:e6:a9:d5:4a:74:46:31:21:
         33:33:7f:25:4d:66:16:27:89:07:c4:9d:85:96:f9:b2:f0:37:
         22:1a:e9:c1:61:78:23:4a:54:57:df:fa:de:7e:b1:6e:ca:85:
         53:6e:e3:27:d6:d7:7b:2a:2d:f1:17:46:af:4a:aa:e2:22:68:
         3b:7d:dd:de:cb:1a:2c:50:e7:a9:94:37:30:7f:1d:dc:b3:8f:
         23:e1:85:b7:d0:df:9e:6c:a1:7f:59:82:1d:ab:03:95:a3:2e:
         1b:31:63:26:67:3f:14:8c:f5:2b:bf:c4:16:01:b2:bd:25:42:
         2e:5a:e9:c2:bb:7f:5c:e8:48:18:b0:6a:09:fa:28:e6:0c:72:
         3d:b5:f9:0a:57:bd:28:95:1e:29:74:8e:51:f4:d8:41:49:1e:
         11:2a:5d:e1:36:97:22:e8:03:d3:df:8f:20:46:c4:6a:28:72:
         51:d8:c0:65:ec:97:6a:21:0f:b3:bb:27:e5:c5:f2:ab:f2:63:
         0f:07:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:36 2025 by rpki-client