Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa
File:                     8d1a1226-fd95-3745-96b5-e43dfde89699.roa (raw, json)
Hash identifier:          JRFl6hdckb+9J+jIOTmCtuXOP9Wwqp5UQ3mqqTLfLA4=
Subject key identifier:   2A:DF:40:84:35:43:6C:25:24:D6:7B:AA:B0:CB:FF:E1:AC:4B:D7:B8
Certificate issuer:       /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial:       010D0C9F4328584AADF0F712ED1BA968C320B540
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        192.190.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f7:12:ed:1b:a9:68:c3:20:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=14127f15-8ffd-45ed-bf0a-676dc031c8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:ef:a5:ba:2c:59:68:58:33:a8:d3:92:e7:
                    18:cc:f7:ce:5c:8c:c8:1e:22:6a:fd:f3:b1:b5:07:
                    b7:a4:25:0e:15:f0:6d:4c:f0:52:b3:70:e6:88:6e:
                    f1:72:5d:2c:4d:36:b2:52:c2:00:e1:a9:f3:6a:36:
                    a5:37:c9:03:a1:51:ca:59:31:1d:60:0a:9e:41:51:
                    18:3d:b9:96:4c:6f:40:06:a2:9c:d8:29:63:46:ed:
                    38:36:d7:15:2c:7c:4c:38:fd:12:01:01:d6:06:d4:
                    65:3c:c5:9d:26:3f:da:f6:6e:b6:b8:fb:66:66:ac:
                    5d:54:6d:57:fe:34:1e:d7:72:ba:22:58:5f:93:2b:
                    4e:cc:4c:60:57:c7:af:1b:61:da:3d:20:b6:36:50:
                    ef:3d:66:7b:a8:0a:08:4c:f5:c7:e7:7a:8a:d8:62:
                    09:a4:77:d2:fb:62:fc:37:2f:2b:76:28:37:78:2d:
                    3e:6d:12:ef:6b:e9:f2:a6:65:1e:a4:97:53:05:df:
                    30:d9:ad:6b:d6:03:72:6e:97:00:ab:ef:de:3a:b8:
                    56:b1:26:0a:09:72:1e:d2:cf:c5:77:3a:d0:a0:19:
                    53:84:c0:ae:76:6f:7c:58:08:4f:46:2b:81:8a:0e:
                    2a:3f:f1:3c:83:6b:62:2f:c5:f6:f4:6b:25:3b:72:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DF:40:84:35:43:6C:25:24:D6:7B:AA:B0:CB:FF:E1:AC:4B:D7:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl

            X509v3 Authority Key Identifier:
                keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:98:be:36:ba:62:c8:6d:b8:24:7a:62:97:d9:fc:98:81:e1:
         b0:0b:c4:a3:40:c6:87:fe:c7:4e:0d:5a:09:fb:b6:36:a6:54:
         32:a9:57:75:f7:6b:ab:88:b1:52:16:72:a1:8f:fc:a1:e0:4e:
         21:ca:13:35:1b:e6:05:9d:c4:90:9b:9e:02:36:49:92:4f:86:
         33:35:5a:82:dc:e6:56:59:12:ef:b0:0c:b8:ad:46:c0:06:79:
         29:21:fb:c5:ad:61:61:11:1f:a7:7e:2c:94:1f:0c:63:bb:f7:
         17:f0:3d:5a:56:e4:a3:6f:2d:f5:c5:29:4f:a9:1d:74:9e:b9:
         cc:e3:30:10:c7:17:d2:b8:2c:61:d7:47:12:80:4d:12:74:db:
         e8:9f:cd:1c:1a:e0:a7:93:91:ab:76:e9:e0:e6:8d:06:58:00:
         94:65:6f:55:21:71:4e:42:ed:88:42:9c:c9:ba:5f:ee:ef:41:
         f8:40:97:20:0f:9c:f3:4a:84:54:38:89:59:14:30:7d:62:10:
         21:12:df:70:58:52:9a:7b:88:00:09:5c:28:da:52:f8:c3:dd:
         95:5c:e2:7d:f9:27:e6:a0:51:0d:a3:1e:c8:6d:5c:d8:d7:af:
         39:6a:d3:98:2e:d5:f0:9e:a3:fe:f3:65:01:c0:0d:3e:19:5d:
         ae:5a:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:47 2025 by rpki-client