Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa
File:                     da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa (raw, json)
Hash identifier:          19LCwyfVboiBjM9QbING50mJdvop/iCGUVEttjIFd+0=
Subject key identifier:   69:C7:88:9B:4C:E8:DB:43:22:F1:12:FB:50:BA:A5:32:43:B9:C8:51
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB650D3839502FF316C43F880
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     30133
IP address blocks:        192.228.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d3:83:95:02:ff:31:6c:43:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=deb65828-e810-4a14-a607-20072b33cd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:34:ae:8e:26:41:2d:d1:cd:3b:05:c7:05:
                    77:57:31:f6:9c:e4:49:2c:32:18:fd:c9:61:2c:98:
                    63:8c:03:89:5b:a4:5b:70:53:da:19:57:b7:30:d9:
                    6e:f6:14:25:23:af:ae:2f:f4:e9:3f:da:a7:3a:09:
                    48:6b:64:c2:46:98:68:e9:f2:2f:e8:99:f5:51:69:
                    f1:1d:f4:be:12:33:79:62:2b:39:14:99:8f:2e:99:
                    bd:92:88:59:6a:c2:49:13:c5:0e:b6:92:12:e6:4d:
                    03:9e:89:f7:71:5f:f4:3b:33:c3:2f:e9:01:f4:3b:
                    8e:58:ce:61:47:5a:e0:dd:7d:04:ef:4c:3a:89:28:
                    db:da:3b:03:64:ce:3e:2e:8a:29:b8:7b:35:d3:51:
                    df:7d:83:94:4a:33:c1:f9:7e:23:ca:8d:b3:d4:dd:
                    c3:4c:46:c7:38:2a:89:d8:a9:20:02:72:7f:43:c9:
                    40:79:55:68:50:15:5f:88:5a:ce:38:9a:f6:d4:d7:
                    14:25:b0:04:53:74:3a:40:90:7c:05:4b:93:98:5b:
                    1b:c4:7a:98:c8:51:57:e2:25:30:66:c8:f4:90:4d:
                    bc:83:25:36:14:2d:b4:8b:92:0d:c9:63:44:40:39:
                    26:84:07:c9:5d:d4:be:25:2f:02:83:8a:82:f1:28:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C7:88:9B:4C:E8:DB:43:22:F1:12:FB:50:BA:A5:32:43:B9:C8:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/da6cd17e-5023-3d12-8b99-a5d4f98dad1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:dd:ae:fc:9f:4a:4e:44:3a:7d:a3:6d:f0:c8:2d:5c:f1:9e:
         52:17:17:d3:5d:95:60:7d:86:5e:df:fe:dc:7d:90:26:16:ad:
         4f:5b:7c:dc:73:81:ea:a0:23:b3:53:7d:03:e5:43:4f:d1:d1:
         52:a2:34:a4:eb:d1:9a:1c:a9:d5:85:d3:4a:51:cb:a4:e9:df:
         9f:91:7b:6e:53:11:5a:66:89:7f:28:8a:69:44:b6:bc:69:05:
         e8:0d:9d:0d:62:d0:fe:09:50:d3:fa:a4:a7:df:8d:55:70:af:
         c3:a1:d7:d0:1a:40:87:24:c0:57:f2:2e:e9:b9:00:8c:b7:42:
         9f:4f:1c:08:1e:c8:fa:0f:63:c0:38:50:a2:c8:c7:18:f4:1a:
         da:38:1e:f4:56:57:c2:5c:b1:a4:c7:e7:ba:d6:bc:44:0c:4e:
         43:9c:d7:52:5b:72:0b:c7:c4:f0:0b:e2:1e:4e:69:0c:cb:7c:
         54:cd:76:9a:db:bf:58:ca:eb:0f:cc:76:6f:6b:d5:17:be:a7:
         16:0e:c8:79:89:cb:f5:7d:39:f3:5e:99:b5:4e:31:f2:a1:28:
         92:22:a1:69:1c:8b:09:3b:d1:97:0e:be:2e:c0:0c:80:6c:3a:
         ef:25:f9:ad:bf:22:57:60:17:96:d5:8a:5e:b7:6f:f6:b4:7a:
         da:94:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:31:27 2025 by rpki-client