Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5dcec5cc-292b-402c-ae48-a9f9e9b75058/20cb4b79-c18f-311d-b147-b351ea89e23e.roa
File:                     20cb4b79-c18f-311d-b147-b351ea89e23e.roa (raw, json)
Hash identifier:          spLkTgv0PsGNkCLugXHWk15QewTKAapCgdzqlD2InNQ=
Subject key identifier:   AD:A6:0C:66:DA:EE:31:1B:83:EE:E1:76:16:20:FD:10:04:6F:F0:6E
Certificate issuer:       /CN=5dcec5cc-292b-402c-ae48-a9f9e9b75058
Certificate serial:       010D0C9F4328584A8575F34AB161782B54BB4B00
Authority key identifier: 6D:C9:E6:CA:52:85:D2:5A:6C:37:57:91:8C:ED:C2:E7:25:97:FB:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5dcec5cc-292b-402c-ae48-a9f9e9b75058.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5dcec5cc-292b-402c-ae48-a9f9e9b75058/20cb4b79-c18f-311d-b147-b351ea89e23e.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     1084
IP address blocks:        192.149.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5dcec5cc-292b-402c-ae48-a9f9e9b75058/5dcec5cc-292b-402c-ae48-a9f9e9b75058.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5dcec5cc-292b-402c-ae48-a9f9e9b75058/5dcec5cc-292b-402c-ae48-a9f9e9b75058.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5dcec5cc-292b-402c-ae48-a9f9e9b75058.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f3:4a:b1:61:78:2b:54:bb:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcec5cc-292b-402c-ae48-a9f9e9b75058
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=03cd2dd5-e3fc-411b-b383-86a27bf1f821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:cb:8f:26:84:9b:58:8d:26:bf:b3:52:15:
                    c9:70:c6:25:69:74:9b:7b:3a:ab:c2:84:c6:eb:f0:
                    10:07:65:31:b2:aa:7a:92:94:be:fd:a5:f4:7d:26:
                    b6:f9:97:19:30:ba:49:34:cf:0b:3e:f0:63:1b:88:
                    21:3b:19:e2:fd:ca:27:11:2e:17:ab:a0:bf:6a:4b:
                    05:6c:fe:11:c8:92:eb:b2:9b:68:a9:96:71:10:ca:
                    89:10:72:b5:ac:9e:7f:a7:8d:a6:69:85:2c:84:7d:
                    14:4b:79:05:84:e4:d5:e3:33:8f:25:1e:e6:2b:aa:
                    8b:94:61:cc:d5:89:c3:f3:71:08:7f:ab:03:6c:e0:
                    ab:09:01:d4:3f:a8:4f:e5:54:8a:1b:90:13:cd:d8:
                    80:ce:9b:fd:3f:77:e3:e9:11:99:5f:69:b1:7f:79:
                    dc:52:b9:be:89:80:1f:72:69:84:b5:48:0b:8a:cd:
                    ed:06:8b:cc:66:ea:58:9a:f1:eb:a9:ce:92:04:4a:
                    a1:4a:30:33:bd:b9:52:80:72:ef:fc:77:ba:1a:fb:
                    1a:ef:a0:79:5a:51:4d:5a:a2:1d:41:c8:82:e1:e6:
                    c7:4c:e4:db:3a:3e:87:01:e8:ca:3a:af:5e:0e:71:
                    13:04:54:84:b6:f3:7b:8d:ea:c6:88:22:bf:97:4b:
                    c7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A6:0C:66:DA:EE:31:1B:83:EE:E1:76:16:20:FD:10:04:6F:F0:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5dcec5cc-292b-402c-ae48-a9f9e9b75058/20cb4b79-c18f-311d-b147-b351ea89e23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5dcec5cc-292b-402c-ae48-a9f9e9b75058/5dcec5cc-292b-402c-ae48-a9f9e9b75058.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C9:E6:CA:52:85:D2:5A:6C:37:57:91:8C:ED:C2:E7:25:97:FB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5dcec5cc-292b-402c-ae48-a9f9e9b75058.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4c:1e:03:98:7c:21:fd:a3:e4:a5:3c:84:5c:25:31:cf:64:
         3f:55:3e:19:e4:7e:0e:f4:70:f6:c1:8d:75:4d:ff:a2:57:a6:
         2e:7d:25:cf:30:3a:c3:0f:8c:20:c9:a0:02:c4:43:f3:f7:13:
         81:ee:f3:ce:bd:3e:f3:4f:89:f8:d8:5e:2f:55:36:49:30:57:
         b0:28:b5:70:40:83:52:d5:a5:3c:32:de:bc:d0:88:f6:34:1d:
         ce:d5:7c:9b:bb:ed:01:44:f5:81:3c:21:9e:1d:7b:6b:a0:bb:
         ed:ae:f7:48:d1:c6:a7:59:ab:b4:c0:ad:e9:e7:52:db:d8:11:
         a5:92:89:35:ae:5b:53:05:2e:14:bb:fb:61:95:ae:68:fd:6d:
         ea:31:f7:08:ab:56:c5:d9:d6:95:b5:a2:e6:05:91:99:4a:85:
         0e:df:2b:7d:d2:bf:9d:d5:a6:16:51:47:38:25:da:8d:ce:f0:
         c2:79:71:b8:0f:47:c3:c1:65:a5:13:bf:1d:e6:40:8c:1a:03:
         48:d0:41:05:95:44:8a:30:85:1e:14:fe:9a:2a:87:59:17:b1:
         5c:2e:f1:ee:07:40:9c:44:a6:af:16:3e:f8:f4:9e:ac:c7:7e:
         b4:4e:36:5a:ac:cf:09:7f:3e:78:6e:0d:2e:b8:74:3a:e4:98:
         6b:d3:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:17 2025 by rpki-client