Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/5a960dc4-ff7f-3b11-bedf-c63fed36addf.roa
File:                     5a960dc4-ff7f-3b11-bedf-c63fed36addf.roa (raw, json)
Hash identifier:          jorKtsrUvqzpW+a9QZ6KYD0XvaQpdDGqWAsAmullQn4=
Subject key identifier:   BB:B3:24:4A:D4:9C:8C:FB:0C:81:62:52:D4:99:AA:79:13:CA:25:33
Certificate issuer:       /CN=4007d5dc-09bf-4465-b6ab-84a07635a5a1
Certificate serial:       010D0C9F4328584A936B5FBB7AEBF31976327C00
Authority key identifier: AF:A9:A2:EA:B1:C7:9E:19:3A:5F:09:05:4E:1C:11:6C:E5:24:50:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/5a960dc4-ff7f-3b11-bedf-c63fed36addf.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     549
IP address blocks:        192.197.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5f:bb:7a:eb:f3:19:76:32:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4007d5dc-09bf-4465-b6ab-84a07635a5a1
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=b51a5a1b-fcf3-4982-b88e-1dec7d240394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:b5:e6:d2:79:11:24:6e:44:c7:b2:62:73:
                    86:95:40:0c:e0:bf:e0:87:00:ee:cf:83:11:43:ed:
                    0e:05:84:1a:2d:54:25:c4:94:46:3e:d9:79:e0:5a:
                    b0:66:74:16:8e:75:45:b1:0e:6d:77:4d:58:61:4b:
                    e7:d9:95:72:df:71:49:63:cb:4b:94:1e:ff:57:62:
                    5e:4f:01:43:7d:79:ba:ab:c6:89:43:42:47:72:97:
                    54:3e:cc:fe:9e:21:50:bb:97:39:91:80:b1:56:ea:
                    4c:8e:5b:91:98:04:93:ac:78:4e:95:56:3c:dd:18:
                    7e:36:01:64:88:07:52:0f:1a:38:a2:d7:95:5a:e0:
                    7d:0e:8b:e6:7a:94:26:cf:2e:ab:6d:a5:b6:0c:a8:
                    ce:64:6d:57:1e:e4:72:a8:9e:4e:f2:87:31:1f:7e:
                    5d:81:20:8b:cb:15:dd:d0:7c:c3:ba:f7:e9:5e:54:
                    65:43:93:01:f2:de:8b:0a:04:57:0a:39:79:9b:de:
                    64:51:d9:17:0d:ef:55:bd:c5:62:6d:89:70:d3:13:
                    e9:9e:09:98:21:8c:17:db:4e:74:cd:f5:46:a5:cd:
                    91:f6:56:58:90:6b:94:c5:e6:39:a3:3f:df:cb:95:
                    0f:b8:8b:46:30:6f:0e:bc:6e:e8:a9:f0:65:94:87:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B3:24:4A:D4:9C:8C:FB:0C:81:62:52:D4:99:AA:79:13:CA:25:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/5a960dc4-ff7f-3b11-bedf-c63fed36addf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.crl

            X509v3 Authority Key Identifier:
                keyid:AF:A9:A2:EA:B1:C7:9E:19:3A:5F:09:05:4E:1C:11:6C:E5:24:50:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fd:38:f1:5f:13:3a:48:10:5e:d4:ff:71:b9:1c:a4:2f:70:
         70:d4:19:6f:75:5b:00:67:1b:89:b3:5f:9a:16:15:8f:cb:a3:
         bf:89:6c:72:14:0d:c4:11:ad:6a:c0:24:32:5a:43:45:a9:ce:
         75:f6:64:08:9d:ec:8b:1f:b2:02:cf:78:2d:73:63:eb:2f:8b:
         07:b9:27:2e:6f:5c:3a:b5:2d:f9:45:1a:2f:52:85:a6:45:39:
         05:85:4f:81:d6:ad:25:91:74:bc:92:44:6a:56:dd:b4:1a:56:
         9e:92:90:2b:b4:d2:70:e5:11:b9:bc:c1:72:8a:97:64:6e:d5:
         61:87:a7:f2:f9:a0:92:6b:f6:fa:8c:98:4c:c8:1e:a0:c3:12:
         ae:ab:43:db:f7:6a:13:6a:9e:7c:b0:96:a3:c5:02:2e:53:7a:
         d7:9f:c4:f5:5b:ff:63:a7:15:fc:12:13:41:ff:22:89:65:a9:
         3f:81:79:c3:b5:9a:d4:13:79:d8:69:48:23:f6:7c:b5:8f:18:
         c8:2e:ca:eb:c1:08:46:fb:2c:e4:3e:55:03:02:10:59:8d:21:
         4c:76:c8:72:6b:44:a8:1e:e7:3b:88:13:b8:71:49:8f:1d:f3:
         f7:6a:96:b5:45:06:4c:6f:d5:14:84:73:82:46:14:f5:32:34:
         5e:bf:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:24 2025 by rpki-client