Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0b9192f9-061b-30a2-83f7-063c62014f7a.roa
File:                     0b9192f9-061b-30a2-83f7-063c62014f7a.roa (raw, json)
Hash identifier:          rWomww/rdfEJVpTMxVeoxTCBLwUHjuDs6HPUx11FS1E=
Subject key identifier:   78:32:94:92:4D:72:67:96:F4:7D:65:51:E4:CC:27:4B:17:E8:85:16
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584AB650F4D83C31CF1E5BEFEE60
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0b9192f9-061b-30a2-83f7-063c62014f7a.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     395954
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f4:d8:3c:31:cf:1e:5b:ef:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=27c50c02-1d29-4491-8978-5e2930664443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:5c:9c:4e:b2:b7:d6:a9:59:ad:e1:b6:44:
                    8c:b9:fb:5c:1a:3c:2e:02:83:cf:3e:be:25:95:54:
                    f9:72:05:8a:23:58:49:58:f6:ec:3f:b2:99:b6:3c:
                    81:ca:0f:24:8b:32:d2:0e:a1:62:21:7f:c1:36:a6:
                    c5:cd:0a:9a:39:b9:41:2c:c8:f8:5d:5e:8a:9b:30:
                    a0:cc:e2:0a:1f:29:4a:2b:4f:3a:68:6e:00:b8:86:
                    b4:21:0e:64:b3:f8:09:2d:d7:58:dd:f3:3f:2c:54:
                    3e:ee:7d:79:0e:e4:f3:67:9d:94:e4:61:d0:b9:b6:
                    cb:03:35:54:ab:0b:37:e9:a1:f8:5c:78:6b:92:eb:
                    00:34:2f:f8:16:09:32:7c:f4:b1:d6:c4:4f:3d:84:
                    fc:16:66:ef:0e:10:48:74:f7:80:bd:87:a2:3a:ee:
                    24:f9:ba:a4:13:5d:c6:4b:be:38:85:ec:fa:a7:27:
                    a4:55:58:25:a5:22:af:e5:33:20:30:90:b3:43:11:
                    50:17:a1:99:5e:dd:0d:1c:70:0a:20:67:61:5b:b4:
                    07:13:04:59:1a:6c:b7:c2:52:f3:c3:05:53:0d:1f:
                    bc:cf:1b:36:ba:5d:93:36:7b:bc:9d:cf:32:8a:98:
                    24:6f:8c:f2:fd:be:d8:4e:90:1e:12:5f:03:19:81:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:32:94:92:4D:72:67:96:F4:7D:65:51:E4:CC:27:4B:17:E8:85:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0b9192f9-061b-30a2-83f7-063c62014f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6b:51:7c:dd:96:83:70:90:f8:52:38:60:53:19:81:95:f3:
         9f:d0:17:24:22:73:2e:77:49:94:34:8b:ea:c3:a7:bc:4e:79:
         9d:3b:c7:8b:bc:f1:f5:06:9c:2a:11:6e:6c:c5:92:ec:02:d6:
         c1:73:d8:22:56:67:36:bd:3c:64:9e:dc:02:fb:f2:0f:37:a3:
         65:57:5b:6e:55:48:39:0c:e6:ee:86:fe:0b:ee:77:aa:33:a5:
         ef:c9:9c:d4:40:dd:ca:ba:25:e0:c5:a6:c9:9a:7d:8e:d7:c6:
         d9:59:17:8e:d9:63:c2:d6:3f:da:19:40:88:ba:35:72:00:b0:
         32:bb:c9:04:a6:8f:9c:18:45:f5:a1:42:bd:bd:8c:a2:b6:09:
         47:7e:40:d3:60:eb:e3:49:d7:0f:88:e2:aa:6c:4d:51:bb:f0:
         15:e0:8f:4d:11:e8:fc:25:7f:d6:a9:01:e8:ea:d0:90:d0:91:
         1f:bf:8e:36:77:f9:83:64:ee:ef:c8:74:5e:a0:5a:35:23:0b:
         bc:e3:19:9c:0d:51:53:d2:da:21:16:9d:2a:ad:f8:65:56:80:
         89:ad:4a:20:20:55:03:37:39:cb:e4:79:bb:6d:37:a2:ba:46:
         ed:21:5f:e9:8c:8c:e5:c4:41:86:ee:ff:e7:dd:a5:b7:86:25:
         2b:46:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:42 2025 by rpki-client