Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/7267e47f-9290-3848-8c1e-a76112771bc7.roa
File:                     7267e47f-9290-3848-8c1e-a76112771bc7.roa (raw, json)
Hash identifier:          9nNWQQV3koXmcE1GDO1aNeFlo7dnlgnRtQOBLshXpTQ=
Subject key identifier:   3C:B6:BA:AC:EB:0F:33:9B:98:3E:A4:5A:D6:6B:F5:F3:DD:A7:0A:A5
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584A1465720755911AAE7EA2E320
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/7267e47f-9290-3848-8c1e-a76112771bc7.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     33392
IP address blocks:        199.101.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:72:07:55:91:1a:ae:7e:a2:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=be6098c2-0f22-4eb1-9da1-e8e100a5906a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5a:0a:e9:d8:bd:b2:fa:3a:38:db:df:c6:22:
                    b6:ea:14:d3:1a:19:79:b9:52:d7:9f:03:6c:e2:9c:
                    58:88:04:9d:1e:e9:29:4e:af:2e:60:5e:c2:20:f5:
                    0a:5e:43:a9:74:10:2c:34:10:a4:0e:05:0b:c7:4f:
                    59:9b:f7:09:18:0e:dd:66:15:69:9e:b9:52:3e:be:
                    a6:b3:a0:42:ea:e5:b5:99:cc:31:c5:25:f2:c5:a3:
                    08:16:0f:ce:d4:7f:e9:3a:2c:cd:1e:88:20:ec:65:
                    6d:8c:38:7d:09:35:cd:5f:2c:a5:50:bb:18:ef:47:
                    eb:b3:d1:3b:c1:91:0f:67:80:7e:05:3c:e0:98:82:
                    f8:78:d4:e7:24:c7:33:6e:8f:d1:af:7a:5c:10:0b:
                    db:99:9b:b7:93:c3:8d:4e:e1:b5:5e:9a:6c:fa:a5:
                    cb:a7:31:e6:56:40:b8:12:c0:ef:83:f1:3d:d7:88:
                    73:b6:6c:74:14:e3:ff:73:1a:76:b9:22:3d:08:d0:
                    ed:1a:e1:74:cf:c1:1c:1b:59:63:c2:68:ec:e2:f1:
                    d3:26:98:7e:31:8a:ab:28:fc:21:0a:22:88:e0:ea:
                    ad:2e:a9:cf:38:5b:68:0d:20:43:c8:72:58:ac:fb:
                    f6:c6:fb:74:01:db:3a:1c:03:b1:72:ac:d7:c7:da:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B6:BA:AC:EB:0F:33:9B:98:3E:A4:5A:D6:6B:F5:F3:DD:A7:0A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/7267e47f-9290-3848-8c1e-a76112771bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:03:fd:50:6b:b4:93:c8:40:44:3c:8c:0b:67:e7:d1:8d:cc:
         38:b6:7f:ee:99:e2:b2:3b:22:59:e2:fb:84:4a:9f:52:b7:23:
         a1:b1:20:c3:d2:81:e4:83:8e:30:ef:7a:91:5c:91:61:3b:ca:
         10:b8:21:92:d7:d1:8f:ff:08:86:11:20:fc:ef:3d:c1:21:d7:
         83:5e:26:1a:46:75:eb:a2:39:4e:a1:8a:06:a8:f5:50:f4:15:
         f1:3c:ca:c4:5d:91:af:27:ed:55:28:c8:2f:ca:2d:1f:ba:e6:
         40:59:63:2b:50:15:bd:45:80:96:60:f9:65:ed:86:0d:fa:ce:
         6b:a6:23:52:c7:b3:b8:30:76:ae:a9:2c:89:2f:15:d7:b2:37:
         59:4e:37:b5:53:bd:9b:26:9b:5e:88:b5:e7:4a:00:ef:f3:40:
         73:72:7c:a4:9e:e6:bc:eb:46:ed:8b:9a:d1:98:5d:66:5b:be:
         54:bc:48:d8:59:86:8f:24:c7:50:cc:d3:8f:11:a1:68:47:38:
         3f:04:2a:dc:5f:e3:17:78:b7:4e:15:35:9e:df:f6:d7:8e:35:
         bb:56:24:99:e0:18:ca:ce:5c:7e:de:e0:81:06:3c:c1:26:df:
         fb:c2:96:07:b3:c2:cc:05:a6:fc:2f:23:a0:d3:6d:c0:5d:2c:
         c9:94:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:16:56 2025 by rpki-client