Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/99e13c26-f077-3c28-bac7-63bbf2c159ac.roa
File:                     99e13c26-f077-3c28-bac7-63bbf2c159ac.roa (raw, json)
Hash identifier:          IZ7WBcx21+7QVaLTM8vF2q3EvUfmQhEp8RQ9kEaNbJ4=
Subject key identifier:   22:C7:FB:46:A1:EA:E2:52:61:88:C9:9C:EF:1C:55:3C:9B:0F:09:E1
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849D594D4A2021CDB39F9281700
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/99e13c26-f077-3c28-bac7-63bbf2c159ac.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     30133
IP address blocks:        192.228.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d4:a2:02:1c:db:39:f9:28:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=a62a5068-7b3d-4c75-8916-efdf1b94e82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:5c:6a:cd:55:23:b0:32:0f:e7:de:8d:92:
                    c1:9c:ac:41:6d:0a:10:2f:78:a0:21:1e:e4:7d:b1:
                    95:26:be:41:f8:48:c6:e6:dc:81:ec:a6:5a:fe:78:
                    39:41:c4:f8:64:7b:59:b5:72:51:b0:49:64:3c:1a:
                    72:b5:4b:f2:06:ee:69:78:4d:ae:39:f9:e5:e6:2b:
                    6f:25:b0:ea:c2:7c:be:3d:3e:bc:f1:0f:51:cb:93:
                    22:c1:25:ef:84:34:0d:3e:ce:f1:2f:49:cf:8d:ea:
                    86:4c:30:3f:38:3a:35:f6:08:bd:53:c4:f0:dd:dc:
                    fb:7c:40:0f:80:9a:28:a6:9e:17:33:42:c6:4f:d4:
                    87:a0:ca:13:71:f3:55:3a:b0:d0:d2:c4:a5:84:4a:
                    49:9b:97:5e:2a:0f:28:85:bf:ed:f1:8a:0c:b9:2b:
                    03:cd:ea:91:aa:2c:5f:dc:c8:1a:f9:5c:2e:c8:ae:
                    37:e6:df:0e:66:e0:b9:44:20:63:c6:7d:c9:0c:c3:
                    47:5b:74:94:26:7c:75:da:3a:62:dd:d6:5f:48:3e:
                    c2:27:58:13:d4:6b:c3:74:28:42:15:9f:af:71:74:
                    a7:b2:68:08:1d:89:b4:7c:c7:97:a5:47:f2:d9:27:
                    72:87:c6:e1:3f:7d:af:3e:e6:14:69:c1:2f:1c:75:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C7:FB:46:A1:EA:E2:52:61:88:C9:9C:EF:1C:55:3C:9B:0F:09:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/99e13c26-f077-3c28-bac7-63bbf2c159ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4d:69:67:52:a2:cd:e9:50:c9:d5:1f:76:0e:d3:19:56:32:
         ea:8b:c2:6f:cd:37:de:f7:6b:8f:76:e2:f5:24:3b:3a:9b:f2:
         fb:4b:f6:78:51:50:fc:1e:1e:12:94:f9:d7:db:a7:a1:18:d6:
         1d:54:68:99:32:13:98:ea:05:93:90:03:29:72:5b:de:4f:6b:
         68:98:c7:5d:c8:9f:a1:c6:73:f0:43:0e:e3:bb:a1:f4:e3:ea:
         bc:f4:50:3d:e8:58:96:d4:75:4d:d9:94:e0:ab:63:df:31:1b:
         13:9b:a0:67:aa:2f:2a:7c:ae:29:6a:11:5e:8e:a9:c3:f0:f2:
         47:85:93:bb:96:15:a7:57:ff:d1:13:e6:7a:90:67:f4:eb:17:
         22:03:a4:00:b8:9d:12:58:cc:05:3c:5e:5b:b8:f9:f2:71:33:
         90:40:df:e2:00:c2:e6:38:f6:c2:25:63:cc:1a:80:15:77:f9:
         13:ef:01:9a:04:c4:e0:3e:79:34:77:84:7b:74:29:54:1e:22:
         a6:da:d5:7d:bd:0d:2f:8a:04:e3:47:3c:4a:2d:f1:ac:97:45:
         24:25:d1:1b:dd:c1:ad:75:8c:71:13:0f:b4:1c:95:a4:5c:47:
         6b:cd:06:be:e3:81:3a:c7:e6:03:f0:80:14:f6:fe:7d:15:db:
         cf:e7:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:41:44 2025 by rpki-client