Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa
File:                     191cfb57-9384-3c94-905f-f6fb390f6a38.roa (raw, json)
Hash identifier:          FChrPrE905vltf5Jj6amx9oaDrTMgiYAUf0M81Ci2eM=
Subject key identifier:   22:A8:D1:D9:4A:32:F7:D0:80:12:83:90:27:46:61:D7:98:07:43:CF
Certificate issuer:       /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial:       010D0C9F4328584AC016466AC919B5DD9EC16500
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     5719
IP address blocks:        192.12.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:46:6a:c9:19:b5:dd:9e:c1:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=a7692830-36ab-4e91-9624-a1dfd670215b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3a:b7:18:fe:a8:05:23:4d:7d:41:6e:d8:53:
                    c5:48:b7:6f:92:af:72:2d:6f:df:c1:57:74:ff:93:
                    de:ba:81:f5:5e:44:0b:94:9d:22:ef:a5:2a:6e:38:
                    9e:92:28:42:c6:a5:f0:a4:ba:de:65:21:da:72:81:
                    e0:17:31:25:19:c0:21:8f:7c:12:bb:ff:c2:6d:8e:
                    76:81:8b:67:b2:2c:8b:f5:d8:5a:da:6a:f5:d4:4f:
                    c2:eb:2d:ef:43:a2:a0:df:a2:80:84:d0:f8:91:e4:
                    f7:f5:37:4b:0a:4f:4e:14:cc:a5:cd:51:85:47:96:
                    3d:d2:e4:d3:e1:40:59:98:51:f1:d0:a0:b3:04:a0:
                    94:f7:fc:26:bd:25:ca:2d:9e:1c:7a:e6:74:15:96:
                    57:2d:45:dd:04:4f:75:aa:cc:e0:86:ef:d4:51:ae:
                    de:22:5e:c5:7c:ba:a4:6c:f8:cf:e4:67:bf:4a:15:
                    2a:dc:dd:cf:0b:42:1b:3e:dd:94:c7:9f:37:b3:b0:
                    8f:e6:f4:28:01:2c:c0:e8:7d:6c:77:07:48:2d:3e:
                    f6:d5:53:97:6e:fc:76:b1:25:ab:39:63:e0:82:93:
                    92:93:26:c0:26:08:b3:64:e6:a9:d9:1d:2a:13:76:
                    e4:d2:a5:96:27:c2:34:0c:20:51:4e:85:43:46:95:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A8:D1:D9:4A:32:F7:D0:80:12:83:90:27:46:61:D7:98:07:43:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl

            X509v3 Authority Key Identifier:
                keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:29:97:a1:2e:b7:42:f3:79:66:23:7b:fe:a1:0f:73:8d:
         65:4a:e6:02:07:b7:97:ad:5f:a5:9f:fa:cb:87:b8:45:d5:5f:
         5c:e1:a8:70:e5:a5:ea:fb:83:b8:c9:e2:8a:1a:56:b7:57:fd:
         0f:69:ba:ad:53:33:37:43:91:5b:52:b2:7d:e5:ea:7e:59:89:
         65:0d:b8:30:1a:35:51:0b:9c:b9:68:f8:bc:e6:9a:31:44:f9:
         86:f5:e6:6f:a9:5a:37:4f:ef:16:be:de:17:67:39:7a:fd:3c:
         8b:fa:0b:8d:7f:74:0b:d3:6d:ae:52:3b:4e:2e:53:00:ea:6f:
         10:c5:24:ea:a9:27:63:37:7a:44:cf:52:32:cd:44:83:a0:22:
         82:ab:c9:0a:6a:80:71:45:5a:ed:e6:fb:9a:2d:78:ec:92:5a:
         a9:fd:b3:18:df:4d:9a:ac:29:68:3a:e9:c1:9f:54:f1:de:44:
         04:e4:b8:5e:80:30:97:37:dc:9a:c8:2f:a1:97:00:b5:46:aa:
         e0:94:ee:09:72:27:84:dc:18:cf:86:64:d7:66:99:36:cd:2d:
         10:3e:16:57:1a:2d:fd:90:21:f7:cd:32:cf:49:66:7e:64:95:
         e4:ec:13:f8:60:c5:05:a3:64:44:fa:fd:93:24:db:af:5d:f1:
         03:ea:d3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:29 2025 by rpki-client