Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa
File:                     61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa (raw, json)
Hash identifier:          /3GXTYZ/SGRm+6Eelyjje6EzJC6lDtdzUdIT54JlJw4=
Subject key identifier:   14:3F:26:87:1B:13:87:EB:ED:DA:06:33:13:E5:6F:3C:02:A7:EB:53
Certificate issuer:       /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial:       010D0C9F4328584AADF108359C82ADEC6F8DBD80
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     30148
IP address blocks:        192.124.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:08:35:9c:82:ad:ec:6f:8d:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=80c22634-b46f-4b31-b31c-379922c1db9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:54:86:4f:f4:ac:2f:70:7c:ba:fa:63:dd:
                    44:5e:9d:65:4d:d7:f7:9d:ed:08:c2:9b:3a:af:5c:
                    14:8c:a5:a9:74:c7:60:05:bb:50:df:43:54:a1:2e:
                    ab:43:93:6b:ff:aa:b2:59:e4:b0:b5:6b:65:6b:8b:
                    68:a6:43:ae:6d:f0:f9:d6:6c:c1:18:d9:84:8c:7d:
                    32:56:2e:50:e0:48:2c:c0:c1:fe:36:d8:cf:5a:62:
                    4f:fe:2b:af:f0:36:92:84:4b:3a:7c:ab:1c:9b:7b:
                    98:9b:18:4c:71:05:aa:7e:6a:b2:64:c3:1f:b9:36:
                    99:fb:5d:7d:23:b4:41:90:cd:51:4a:d2:59:11:46:
                    1d:43:b2:f7:90:41:3a:39:f6:95:15:91:a2:bf:3b:
                    39:4d:29:3a:b6:2f:f2:03:f9:73:9c:6c:cb:61:a4:
                    72:03:e2:12:0b:99:bb:dc:65:61:83:00:6a:7c:f0:
                    2e:73:c4:44:18:1d:2b:15:0b:c1:0b:2d:01:d9:a2:
                    81:42:4e:13:21:bf:7e:44:50:ec:ec:b8:21:8c:24:
                    b3:98:c4:6b:85:a8:5b:f9:2a:e3:49:b3:50:a9:75:
                    5f:26:8d:ae:9c:38:02:c2:f3:93:c1:ce:de:03:d0:
                    eb:57:05:a5:80:d1:c0:43:44:0a:9c:a3:15:03:03:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3F:26:87:1B:13:87:EB:ED:DA:06:33:13:E5:6F:3C:02:A7:EB:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:5d:6d:ce:62:1b:4f:92:97:1c:ae:b8:c9:c5:f4:37:69:
         47:a0:0f:ef:0b:33:a9:16:3e:65:86:cd:3a:b4:5d:e6:d2:99:
         52:5c:22:a7:1c:96:f0:e1:92:b0:04:a6:81:7c:27:b8:3d:d5:
         14:d1:a9:9d:f6:b4:26:92:08:a5:f4:f7:0a:6f:a3:fc:02:6a:
         2a:4c:12:a3:c9:d3:ed:34:68:57:43:2c:19:bc:f4:33:8d:32:
         9c:79:ab:d2:fc:a4:6f:cb:d2:41:a3:91:b1:6a:23:59:ba:9d:
         8d:d5:cb:e4:06:8c:db:26:65:46:bb:66:79:46:da:18:a5:f2:
         23:bb:2c:f3:55:1f:95:eb:16:9d:2a:e3:25:08:fc:13:8f:5c:
         5c:ed:dc:26:65:84:84:4e:de:7e:86:b8:fd:6f:c5:d6:75:bf:
         aa:33:3a:5d:c1:93:42:5f:b8:18:6d:6f:88:4c:dd:a8:33:f0:
         52:af:26:0f:33:5a:33:a3:fb:9c:74:fa:3f:d0:0b:82:a2:02:
         f4:73:22:52:02:b1:28:84:8e:93:c1:3f:75:86:f8:59:a5:8f:
         19:d1:4a:23:31:90:e7:41:79:51:d3:63:56:42:25:aa:f2:3d:
         08:17:9e:f5:45:13:32:4c:e1:0c:e1:c4:e6:01:47:67:8b:db:
         d6:8e:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:45 2025 by rpki-client