Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/fad4678f-31ab-3e19-9ff7-ae8e486571fa.roa
File:                     fad4678f-31ab-3e19-9ff7-ae8e486571fa.roa (raw, json)
Hash identifier:          GaxiapBolQkZsQNmT77kP52g7f1q4Qs1mx0/HwQxVkk=
Subject key identifier:   84:B1:A4:33:51:40:E9:66:D4:3C:92:77:EE:F2:B2:DE:92:F4:CA:0D
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584A3A158F96A4D270D34507D2C0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/fad4678f-31ab-3e19-9ff7-ae8e486571fa.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        192.94.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8f:96:a4:d2:70:d3:45:07:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=1f2d04b3-2104-4de4-a421-2880ea34c124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:92:0f:45:ec:f0:ef:28:a9:13:b9:f1:23:
                    ec:64:2b:df:dd:1d:58:67:9c:92:94:de:6a:bb:54:
                    67:c3:94:d3:a8:70:9d:27:1c:9c:c7:ea:dc:b5:6a:
                    47:b5:41:71:3b:6e:47:2c:ff:bb:55:ad:87:f3:59:
                    14:dc:85:37:0d:25:0f:86:95:10:6e:45:93:81:1f:
                    2b:ee:76:ae:95:45:a8:40:2a:7d:a3:f0:16:cb:9a:
                    3f:23:9c:4c:76:14:dd:19:d1:f6:65:0d:58:8e:37:
                    de:aa:03:0e:8c:61:fb:42:48:a2:bc:48:47:e7:6d:
                    21:2f:ac:a4:8b:07:4a:70:22:55:5e:22:81:53:66:
                    d2:2a:0a:b3:c3:cb:eb:fb:9d:c5:0f:76:d1:23:84:
                    27:23:07:35:65:ae:8b:42:17:73:63:2a:55:30:6a:
                    5e:85:46:6d:58:94:ed:33:c2:03:4e:a2:3a:54:4a:
                    a0:21:42:98:34:36:35:c0:18:88:08:78:ee:79:c6:
                    c6:55:ed:e9:79:d4:b7:6d:1c:f4:da:c5:05:c3:a1:
                    f7:dd:7c:c9:e7:72:7c:bc:b7:aa:f4:0c:e3:80:af:
                    6e:e3:7d:a4:b0:14:9c:60:76:9e:af:0d:4d:e6:a3:
                    dc:a6:03:1e:e4:2c:ee:fd:3e:a7:05:82:41:f6:aa:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:A4:33:51:40:E9:66:D4:3C:92:77:EE:F2:B2:DE:92:F4:CA:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/fad4678f-31ab-3e19-9ff7-ae8e486571fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:74:5b:a8:9b:01:c6:a0:dc:dc:7c:f4:fe:01:44:98:91:
         06:4d:06:aa:0c:23:61:43:62:51:7a:ac:a5:c6:b2:3f:71:ef:
         e5:82:6c:88:c6:18:c2:86:cf:a2:7a:db:1d:e0:33:96:91:1f:
         1d:e7:6e:fc:cb:89:e0:97:90:a8:4c:52:7e:7d:f0:5d:6d:ea:
         c5:0c:9b:02:2c:4e:11:44:07:f0:c2:4e:31:5c:ea:f6:2d:97:
         49:5b:8e:34:33:8f:12:ae:80:8b:36:9a:65:b4:d0:84:22:f1:
         80:33:e2:69:45:0f:6d:fd:52:61:f2:c0:e6:4a:28:d9:ed:62:
         a3:56:3f:85:94:1d:3e:29:2d:5f:f5:02:6b:73:fb:00:5c:0c:
         5c:fb:a0:c4:8b:06:26:d6:81:47:05:d6:fe:f2:98:c1:49:48:
         b9:60:02:3e:68:8a:ca:c4:22:cc:56:9c:47:8b:0b:2b:b1:c6:
         65:7a:47:f2:ce:19:59:3c:f8:c1:ea:67:da:89:23:7d:65:d4:
         c6:b6:83:96:40:70:b6:2d:f4:38:d1:10:fe:07:42:55:48:d8:
         72:49:fc:b9:ec:61:97:46:5b:bb:6a:c4:3b:a9:72:cb:a8:5d:
         a4:2f:36:10:b0:60:32:b9:a4:5a:30:78:40:09:15:c6:02:b1:
         d4:12:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:56:04 2025 by rpki-client