Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/1c8ba7df-065f-36ef-a89c-c2f1165723ed.roa
File:                     1c8ba7df-065f-36ef-a89c-c2f1165723ed.roa (raw, json)
Hash identifier:          xu22oi+dH/Nj9rir/ljd76AmL31oQsVeMcn24F+Ajkw=
Subject key identifier:   65:61:4C:74:4F:D7:F0:2C:17:0A:BE:B1:05:1C:2E:8A:20:BA:1E:62
Certificate issuer:       /CN=c11747a4-18b0-432b-af7c-5612a6efe7ab
Certificate serial:       010D0C9F43285849EEB5021620E94F21AA12B880
Authority key identifier: 3E:E7:76:10:FE:35:9E:E0:62:B7:3F:DE:62:40:8C:E2:71:45:48:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/1c8ba7df-065f-36ef-a89c-c2f1165723ed.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     14618
IP address blocks:        192.197.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/c11747a4-18b0-432b-af7c-5612a6efe7ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/c11747a4-18b0-432b-af7c-5612a6efe7ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:02:16:20:e9:4f:21:aa:12:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11747a4-18b0-432b-af7c-5612a6efe7ab
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=54697715-23a2-46b9-b907-76208b409a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6e:fb:59:8f:fd:7a:22:1b:95:60:9a:4e:0f:
                    44:a7:0b:f4:10:7a:4b:96:89:9c:ac:d7:f6:67:74:
                    99:cd:48:67:2f:3f:46:69:79:b3:af:47:66:14:c6:
                    34:db:35:b2:16:23:bb:3b:71:a7:31:8e:9f:fe:70:
                    e9:e4:ca:ff:fa:d9:f0:bc:97:9d:a1:70:bd:49:16:
                    68:41:60:f6:20:d9:7a:c7:ba:fe:e9:a5:63:6c:b6:
                    2c:48:99:44:b4:42:82:d2:e3:90:5f:5e:f7:38:ce:
                    a4:ea:85:7a:9d:28:3b:ad:5e:3f:c8:7d:1d:a5:94:
                    81:22:7b:f9:d6:ad:db:f5:53:3c:59:7e:92:7a:c2:
                    20:09:ce:cc:49:fb:08:01:a4:73:9f:d0:22:fd:ab:
                    6a:20:a0:c1:ad:46:1e:53:2f:71:1c:81:22:37:48:
                    57:18:a6:64:41:d9:9b:20:c4:0c:98:53:99:ae:89:
                    92:a4:45:21:e3:d8:a4:85:a8:0f:39:8e:eb:d6:f5:
                    72:08:3b:78:48:8b:94:b1:01:9e:89:42:06:99:cb:
                    85:e5:47:69:3e:04:92:80:fd:31:66:93:68:bd:1e:
                    3b:6f:9d:c8:61:2f:83:3f:d4:17:90:0a:ae:4a:3d:
                    6a:db:9e:b2:fc:e3:f1:cd:09:83:dc:34:7c:9f:31:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:61:4C:74:4F:D7:F0:2C:17:0A:BE:B1:05:1C:2E:8A:20:BA:1E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/1c8ba7df-065f-36ef-a89c-c2f1165723ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/c11747a4-18b0-432b-af7c-5612a6efe7ab.crl

            X509v3 Authority Key Identifier:
                keyid:3E:E7:76:10:FE:35:9E:E0:62:B7:3F:DE:62:40:8C:E2:71:45:48:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:28:29:1f:3b:fe:27:bc:db:3c:85:85:b8:08:ac:ca:70:
         aa:f2:a4:11:a2:78:b0:16:56:f1:07:e0:14:1f:22:dc:9e:dc:
         40:02:f6:06:f9:85:61:27:c2:61:ba:8a:bb:b1:8f:55:e2:73:
         23:cc:39:a3:ab:7f:e6:42:7d:e8:24:a4:7f:fb:83:66:b9:c0:
         23:3a:ca:eb:ec:f1:2a:f8:d5:11:cf:84:eb:f5:71:e6:70:28:
         88:74:28:f5:81:7f:83:b7:86:25:92:0f:45:0d:2d:54:f1:a8:
         be:de:db:8a:61:78:3f:d7:50:d9:c1:57:e2:fe:6f:5c:79:92:
         b4:dd:c7:5c:17:98:71:7b:0b:d9:85:c7:90:0a:ff:ce:60:f3:
         64:3b:3e:99:0e:f6:cb:de:6e:0c:75:4b:c7:76:ee:48:62:50:
         98:a5:63:05:15:c7:ff:82:86:47:3b:d9:0d:88:1c:b4:db:99:
         de:a0:f0:c6:ba:ba:e4:13:10:f6:80:31:3e:82:a1:78:b7:52:
         7f:fc:ed:d9:2d:b6:1f:72:4a:0d:0a:0b:07:d5:13:56:5b:c7:
         17:fc:d0:a8:39:c9:d4:2e:66:2d:fe:c3:dd:1c:11:c6:69:63:
         02:c5:4d:eb:3c:9d:5f:6d:71:10:4e:ec:7e:c8:c4:e2:c0:2d:
         24:b7:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:43 2025 by rpki-client