Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
File:                     6bb9aaee-b794-32ef-9cbe-5db764601630.roa (raw, json)
Hash identifier:          OX37BXKEmPkcwfvUZW7wx5CBiOvn6cvFytDhrQHjbpM=
Subject key identifier:   BD:F9:F9:B6:3D:CE:95:E6:C5:33:38:0A:34:9C:71:5B:88:31:5D:94
Certificate issuer:       /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial:       010D0C9F4328584AADF10F6C8B58A8135A9998C0
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        192.190.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0f:6c:8b:58:a8:13:5a:99:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=acbbaa30-b307-4f52-a7a9-3d25342386ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:14:f1:f2:96:b9:ca:6b:34:ed:e7:c3:fd:
                    b7:48:67:5f:66:cb:f4:d0:8c:c4:6d:3c:84:11:c1:
                    1e:b6:6d:91:5a:04:8c:96:0c:1b:23:a5:7c:f9:f0:
                    c7:b5:e2:43:7a:00:8c:26:14:5a:fb:24:1b:14:2c:
                    2a:a9:62:81:9f:13:81:ea:a2:8e:cc:6d:5a:36:6d:
                    d3:a5:95:a3:e2:6e:b7:fa:84:86:35:39:35:0e:ba:
                    b1:c8:ec:d8:d8:af:92:1e:7c:12:e9:55:04:9a:9c:
                    51:f3:50:9a:bb:2c:0e:6a:4d:22:6a:e8:26:4f:73:
                    77:8b:cf:5a:da:08:8d:5d:24:df:79:fb:1f:9b:a8:
                    b3:cd:c7:f3:64:7e:87:09:ec:74:8d:f2:25:b5:9a:
                    66:39:41:85:11:f8:1e:48:c2:e9:e3:47:fa:aa:5c:
                    a0:7b:de:9f:8c:94:a9:66:49:e9:fd:1d:84:f6:fa:
                    cb:e5:6d:fc:24:db:12:ed:21:29:d8:35:b8:51:34:
                    c9:41:03:7d:44:2d:6c:d2:be:38:95:96:48:e8:0a:
                    42:52:f7:79:01:69:21:bb:2a:02:b6:56:dd:53:c1:
                    fe:a5:b5:3f:3a:bc:7f:29:15:a7:61:cb:5f:50:17:
                    96:89:9a:df:60:de:9a:ba:c6:b9:6e:e1:d3:27:99:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F9:F9:B6:3D:CE:95:E6:C5:33:38:0A:34:9C:71:5B:88:31:5D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl

            X509v3 Authority Key Identifier:
                keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:20:bc:a8:c5:a4:9f:50:f6:7e:27:14:51:82:e1:f4:39:ec:
         68:66:86:e9:3f:9e:21:6b:e5:31:44:8f:e3:fa:da:6c:09:33:
         a4:d9:14:73:61:27:34:21:c0:b0:c8:14:13:12:b8:5c:86:ec:
         16:35:9d:33:0b:df:8b:81:a5:eb:f7:73:83:4d:e3:16:5d:98:
         2a:4e:66:4e:8b:f8:7e:6e:b4:b6:24:29:b6:b3:a7:84:ef:7f:
         6d:e7:7e:02:27:81:f7:7c:c1:2b:4d:c1:bd:f6:cd:fe:4b:cc:
         e9:b4:71:5b:82:27:05:4c:37:08:fd:3b:3b:31:fa:94:f5:c9:
         31:2d:c1:c3:9a:4c:6f:3a:1a:49:28:9c:55:e2:6c:11:4e:42:
         f7:e7:8c:20:8c:7d:40:c4:2f:b9:1a:c0:01:bd:67:e5:61:c8:
         53:0f:87:1d:a5:bb:20:64:ff:ee:30:90:b9:6a:48:b0:f2:95:
         ea:c2:d7:5a:b8:dd:f4:3e:47:0f:db:cc:b6:c0:5c:3b:6f:28:
         ec:00:e7:f2:da:e7:a8:a7:f9:6b:ce:38:f4:e4:67:f5:77:df:
         51:5e:a6:46:26:8a:6a:ba:13:96:c3:c2:77:e7:33:e7:8f:03:
         7e:e8:4e:3a:4d:f1:a1:4e:0c:ce:af:ba:75:7d:2f:f3:aa:2f:
         17:83:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:48 2025 by rpki-client