Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa
File:                     63906606-7983-3c12-8d4a-5461f3222ca9.roa (raw, json)
Hash identifier:          AfgoQciq84lxZkDTMt7aoWMdRnwlI1K92g4Is7iMDlI=
Subject key identifier:   C7:93:6F:97:9A:4B:42:C4:A2:DB:EA:19:AE:0F:19:20:B6:B6:73:9D
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584AA6F629667B23682106239000
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     55178
IP address blocks:        192.230.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:29:66:7b:23:68:21:06:23:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=3592e9e3-a151-4745-abfb-a6ab9c3786ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:6f:2c:16:89:4e:c1:b3:33:aa:7b:a2:d7:
                    7e:ef:18:2a:bf:17:28:94:27:4b:ad:ee:94:13:e9:
                    d8:ed:4f:11:b1:67:d6:25:c1:66:d1:66:33:b9:bd:
                    05:d9:96:0f:02:93:88:0e:2b:2b:c8:87:2c:9b:03:
                    6a:a8:17:7d:ab:17:ea:fb:48:b3:c7:5f:49:ee:06:
                    5b:89:8d:54:b7:72:7b:bb:f7:1f:24:98:5b:03:e7:
                    82:ce:77:dd:be:33:95:85:31:5a:5d:93:c2:bb:0c:
                    d9:9f:5c:7c:8c:ed:8d:e9:35:f3:f4:be:99:20:7c:
                    1d:88:c5:ae:b5:21:6d:af:49:0c:9c:8b:ef:25:3f:
                    29:ea:14:66:c5:49:d6:f0:be:c9:3a:b2:01:81:1f:
                    33:43:56:ce:c6:12:fb:57:ba:00:8f:ac:2b:dc:bb:
                    3f:41:bd:f4:f7:23:c1:0a:ad:75:a2:c8:b4:26:72:
                    e0:d1:19:37:01:74:6e:16:f8:cf:fb:e2:5a:2f:3f:
                    01:f5:66:87:d5:d5:fa:61:78:c9:9a:18:e3:23:0a:
                    26:a0:c7:a0:e9:4f:6a:1c:06:ed:4f:f8:60:ae:96:
                    be:28:52:13:85:0e:3f:20:ec:5a:51:91:35:7a:ff:
                    bc:a9:69:04:33:b3:35:f4:44:7c:21:a8:ee:9b:a9:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:93:6F:97:9A:4B:42:C4:A2:DB:EA:19:AE:0F:19:20:B6:B6:73:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:58:71:18:3f:9c:ed:cd:31:38:4f:a2:47:5d:64:d9:2c:
         ef:f0:ce:32:07:d0:03:3f:ed:2a:6c:33:23:3c:21:c0:ac:10:
         ac:e4:2c:87:16:5d:84:15:a1:9b:74:bf:bd:b1:f1:53:e7:b7:
         83:df:4d:16:f7:ff:a1:d5:a4:fe:1e:58:2b:28:c9:a9:7d:aa:
         0e:81:b3:96:58:33:74:90:24:28:94:d9:2d:4b:83:21:e2:68:
         e7:ed:fa:8b:db:66:c0:2b:43:e1:ea:7b:17:70:ca:d8:57:3b:
         08:cc:3c:24:0c:51:21:b4:cf:12:69:ab:25:8f:5d:6a:0c:b9:
         d4:7a:9a:7a:30:d1:12:fb:8a:94:a5:01:15:f2:8c:e7:90:47:
         e8:79:fe:92:eb:dc:80:77:0c:20:ae:5f:62:50:b2:b1:7e:86:
         e0:6b:bd:9a:d2:27:69:46:cd:e0:24:82:9c:1e:e3:7b:6a:6e:
         f0:65:61:d9:ea:56:90:2b:b2:27:93:57:45:b0:be:33:27:b8:
         38:ac:17:6a:38:b4:c1:c2:4f:6a:a4:8c:19:6d:f7:78:72:ba:
         ca:a9:33:3f:2d:a5:29:a1:6c:f1:7b:71:87:8e:2f:20:8f:e8:
         13:ff:39:15:d4:d5:29:a8:a5:34:99:41:31:3f:01:9e:20:4c:
         74:22:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:30:51 2025 by rpki-client