Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/7c7e05f7-b5c8-39d9-9df9-07e1382a1bb4.roa
File:                     7c7e05f7-b5c8-39d9-9df9-07e1382a1bb4.roa (raw, json)
Hash identifier:          vu/uU0aJCZ7JNNzdyn6BMvc4VL+UVY85W/XxFD/Cyl8=
Subject key identifier:   2E:D0:9A:67:AA:56:EB:38:33:7B:62:17:B4:FF:2D:49:3B:FE:25:BD
Certificate issuer:       /CN=4454f19d-c14e-499f-8d66-357970248d2c
Certificate serial:       010D0C9F4328584A9B514C8EEA15C29725234A80
Authority key identifier: B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/7c7e05f7-b5c8-39d9-9df9-07e1382a1bb4.roa
Signing time:             Tue 22 Jul 2025 20:54:52 +0000
ROA not before:           Tue 22 Jul 2025 20:54:52 +0000
ROA not after:            Mon 20 Oct 2025 20:54:52 +0000
asID:                     20115
IP address blocks:        199.192.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:51:4c:8e:ea:15:c2:97:25:23:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4454f19d-c14e-499f-8d66-357970248d2c
        Validity
            Not Before: Jul 22 20:54:52 2025 GMT
            Not After : Oct 20 20:54:52 2025 GMT
        Subject: CN=18902c10-aa12-4ade-89fb-047577a7c12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:92:2e:fd:c8:13:dc:d5:7c:fa:3e:13:6b:
                    7e:7f:fc:b1:1c:be:e2:9b:4f:a3:90:47:74:4d:98:
                    1a:fa:0c:b5:6a:8a:5d:17:33:3a:32:3a:d9:9a:23:
                    9a:97:12:42:ec:49:f8:bd:db:c4:8c:74:32:ff:73:
                    a4:5c:4d:38:e1:3b:28:47:3b:8d:a6:34:62:a4:42:
                    ce:0a:b8:3e:ce:86:c7:55:b8:b9:81:33:90:b6:9d:
                    0b:8f:44:7f:aa:64:6f:5d:a2:4d:c8:65:ee:97:3c:
                    ce:b6:ba:71:d8:d5:15:ec:19:08:08:48:bf:d1:a0:
                    9d:8f:63:b8:e3:2f:69:33:79:26:95:ff:16:dc:78:
                    12:30:56:b1:90:3d:2f:03:13:10:65:49:7a:89:d2:
                    8a:74:cd:d1:c4:75:4c:d1:a8:64:81:c4:df:e2:0b:
                    b4:db:af:5c:cd:78:f4:53:65:d4:9b:06:c8:92:c6:
                    d0:e1:87:78:59:d0:2f:e1:a1:be:72:57:5a:11:52:
                    27:26:2a:91:83:6a:da:a2:a9:cd:64:ab:6b:81:41:
                    d7:d6:87:c5:de:38:1d:90:ef:ed:80:d6:1c:67:fe:
                    61:95:d0:00:dd:75:47:06:e6:e0:52:ac:d6:20:f5:
                    48:7e:d8:59:2a:bc:1d:b1:af:b6:3e:0f:62:82:59:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D0:9A:67:AA:56:EB:38:33:7B:62:17:B4:FF:2D:49:3B:FE:25:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/7c7e05f7-b5c8-39d9-9df9-07e1382a1bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:22:2c:b1:c8:75:13:e4:ea:f2:70:30:f6:d0:b4:d7:56:25:
         4d:09:d8:df:3f:ff:e7:ea:30:1c:33:98:82:95:65:be:dc:13:
         4f:47:a4:a3:d9:93:28:51:e1:36:44:61:35:a0:6f:e7:16:cc:
         1a:74:d9:16:35:22:70:8e:53:bd:04:65:e7:0f:d4:7a:8a:cf:
         08:5b:d4:ed:0d:15:44:f9:34:e6:2b:ee:a5:48:f8:15:65:f4:
         18:08:55:2f:33:bb:18:a7:e0:60:22:93:f6:ab:63:0f:31:b8:
         c4:95:a2:fd:40:11:03:c9:f4:67:34:72:29:45:34:f8:e6:27:
         51:a5:b7:9a:0e:11:5d:6b:4f:6c:4e:98:a1:13:5c:46:06:1e:
         b3:06:5a:27:cb:a4:9e:54:72:c0:f0:20:07:c3:50:be:ea:33:
         65:9b:a3:04:f2:6d:90:60:9c:9b:d7:8d:c6:b0:29:65:fd:59:
         a4:b8:24:95:a6:3f:bd:fe:d8:cd:de:cf:58:a0:eb:85:70:91:
         f5:d3:a0:6e:cf:07:10:74:3e:ce:70:66:89:fc:57:17:bb:1a:
         06:68:1f:11:43:f5:d6:42:f4:b0:7d:e4:3f:a3:73:6e:50:a2:
         85:79:a1:9c:e0:08:fe:16:bf:2e:20:78:7e:98:ef:b4:f1:34:
         67:d7:b8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:37 2025 by rpki-client