Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa
File:                     c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa (raw, json)
Hash identifier:          FtYgUS5d5JGs/iAsNPsTkyJlZ5XclU7CZcGfVrA/YtQ=
Subject key identifier:   E0:CC:39:FD:A9:80:0B:91:96:B2:66:68:B6:FE:F3:EA:EB:0B:DA:10
Certificate issuer:       /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial:       010D0C9F4328584A8575F266F81E456315D2BC00
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     393732
IP address blocks:        192.76.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f2:66:f8:1e:45:63:15:d2:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=54241c6c-5b4d-442b-b83b-598cb7bf2486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:df:24:64:67:57:1e:5e:9a:6d:4e:40:16:6f:
                    ec:8d:c1:0b:82:92:ea:d1:ad:72:78:e5:2e:94:7d:
                    27:03:35:33:59:15:69:89:bb:36:d3:09:bb:4a:41:
                    d6:fd:86:74:bd:f6:17:ab:2f:0a:5c:aa:21:44:32:
                    ee:ff:15:ab:61:52:47:94:9c:98:18:a9:37:67:0c:
                    64:76:80:13:63:18:b0:1f:2a:9f:44:64:43:2c:fb:
                    41:eb:7c:63:60:4f:4e:70:6e:ee:b2:31:c1:4a:af:
                    5d:44:74:e5:5f:01:d2:42:62:3c:46:1d:d0:cb:02:
                    0a:48:d4:db:c7:9c:c4:91:2d:d5:d4:4d:f9:b6:63:
                    4e:2e:70:48:3f:86:13:2e:34:b3:44:6a:16:e3:3a:
                    10:68:0a:70:18:6e:11:7a:79:ac:10:40:71:e5:fc:
                    e9:67:5c:e3:01:61:65:61:ae:00:e2:52:9f:2d:a5:
                    cf:76:30:8d:30:3e:d6:e4:dc:f5:69:6c:5c:f0:3e:
                    93:a7:52:7d:8a:0b:a4:22:0e:52:01:c9:42:8c:d9:
                    9d:2e:a2:7f:06:96:cb:a0:27:80:09:90:33:6d:bc:
                    5f:c8:84:ce:1a:69:e5:18:cc:51:d5:76:a6:4e:20:
                    a7:83:c8:6f:02:2d:1a:e1:2a:07:fb:67:c6:fc:bc:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CC:39:FD:A9:80:0B:91:96:B2:66:68:B6:FE:F3:EA:EB:0B:DA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl

            X509v3 Authority Key Identifier:
                keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.76.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:d7:9c:5e:6d:20:9c:c5:f9:11:3c:60:bb:24:8d:49:81:99:
         58:50:53:ac:80:29:c1:cb:85:5e:c2:5c:3b:61:00:2f:af:c8:
         27:2a:30:49:4a:f4:42:16:cb:6c:59:68:48:59:fa:4f:d2:d6:
         82:78:66:26:73:6e:88:75:9c:6e:48:2b:61:13:89:67:d4:2f:
         f1:c5:7c:db:89:1e:8a:15:96:cc:f8:46:c9:c0:18:01:3d:f3:
         fa:53:e8:cc:d2:1d:40:f6:2e:92:a1:64:6e:ab:ca:10:a7:8f:
         f6:ae:d0:b5:61:91:64:61:bd:dc:ab:2f:76:5e:49:dc:70:6c:
         78:44:c2:47:a8:9a:4c:0c:cd:2e:a3:34:02:24:c1:70:92:a7:
         23:1c:b1:90:66:78:80:b8:3b:12:c8:6a:e3:b4:65:26:22:fd:
         22:d5:1f:fa:f0:6f:2f:1f:d3:9c:93:2a:9a:99:6c:02:97:85:
         51:38:2c:d8:e4:7a:90:19:7c:9c:f7:a1:f9:56:dd:6c:99:42:
         c7:14:e5:84:3d:c0:89:c4:09:95:f3:3c:ad:a5:84:fb:b3:1d:
         d4:1a:16:85:cd:a9:f4:33:f9:ee:4d:58:b5:75:e3:9b:63:80:
         72:72:95:cd:5b:f2:a4:8f:03:3b:e2:71:88:47:08:35:87:3a:
         30:91:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:40 2025 by rpki-client