Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa
File:                     8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa (raw, json)
Hash identifier:          Ikx7XdB33329VfFmnjT/DHh/Eh7xsG6GelTOdejLGTA=
Subject key identifier:   9E:73:1E:87:32:B5:94:15:2C:20:AE:E0:6B:E8:03:EE:1B:F5:61:FC
Certificate issuer:       /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial:       010D0C9F4328584A96368B53A2976B73F15EFD40
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     55244
IP address blocks:        192.16.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8b:53:a2:97:6b:73:f1:5e:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=d56bad56-d34e-471d-a656-8f13c8eab526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:61:72:65:f2:50:f7:29:84:ca:bb:df:b1:
                    a4:09:28:3c:30:ff:2d:ec:9c:d8:26:34:90:e8:b8:
                    0a:e8:47:ad:eb:89:18:de:3e:30:90:47:8b:12:07:
                    20:43:ef:b0:64:0e:5d:eb:e6:50:aa:8d:0a:8e:73:
                    25:7e:35:92:1a:d6:d4:76:15:cc:89:8e:ab:47:c1:
                    21:36:76:ca:6f:91:c7:4b:33:b8:6d:b0:42:8e:1f:
                    f1:d5:82:87:9e:56:5d:7d:1f:2f:8c:65:66:54:d1:
                    76:1e:ee:df:69:c8:e1:3d:b8:53:de:e7:82:21:82:
                    50:93:27:fe:34:e5:7f:95:cb:86:71:4f:3f:54:bd:
                    01:db:0f:ec:6d:41:a4:73:ce:a6:18:f2:ef:ff:25:
                    fa:2d:7f:da:b0:1e:50:3a:2d:b3:62:0f:dc:8c:41:
                    95:b7:30:a5:3c:3d:68:9a:ab:c4:cc:3d:25:b5:33:
                    f1:ae:cc:48:b0:bb:5b:60:fe:52:0b:11:57:2c:22:
                    9f:a0:23:8c:d0:ef:6c:a4:48:47:65:18:c2:86:7b:
                    23:4c:46:dc:99:0d:a1:63:f3:bd:55:ac:08:ec:37:
                    be:7a:fe:6e:73:2c:33:7e:bb:f1:8e:56:84:4e:51:
                    a7:8e:b7:58:7b:8a:75:d9:e1:94:fe:35:21:0d:26:
                    90:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:73:1E:87:32:B5:94:15:2C:20:AE:E0:6B:E8:03:EE:1B:F5:61:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8b472c8f-3acb-39ff-b78d-e2404adbd15f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl

            X509v3 Authority Key Identifier:
                keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:95:16:6d:04:49:81:c2:63:01:95:b7:b7:f8:95:15:42:ce:
         77:5d:bb:e4:cf:12:77:d8:0c:75:81:8e:e4:b5:1b:a9:c0:02:
         af:c2:6d:4f:13:06:80:47:7c:37:ad:2d:a3:53:46:ad:bb:a7:
         b5:56:e1:35:0c:2e:b4:5d:a9:25:bf:9d:1c:cc:0a:14:a4:79:
         02:d6:df:87:43:28:3a:6b:6c:4e:5d:44:25:7b:b6:6b:bd:f8:
         b5:a1:e2:bc:28:5d:1e:a8:e9:6b:7c:e3:b7:57:d5:39:04:7b:
         12:8a:13:35:af:ce:79:31:9f:95:b7:22:a0:f9:8b:f6:ba:cd:
         d6:80:66:1b:ed:c8:15:34:98:82:fb:46:23:e2:82:08:1a:f4:
         24:36:83:d1:83:b1:35:79:18:93:12:fd:8e:c1:0b:13:a6:6c:
         59:8c:d2:82:12:5d:5a:a8:10:f1:af:9b:c6:39:46:61:bf:89:
         94:60:38:68:1a:8a:25:4c:60:76:76:2c:0a:b6:0c:bd:b2:e3:
         ef:68:c6:3f:ea:4c:b8:1d:d3:d2:60:ce:f3:77:0f:47:b6:18:
         0b:ca:ce:57:18:07:63:12:8f:a6:e9:ad:81:52:f0:35:d0:33:
         0e:96:7c:44:96:e4:8b:ea:28:d7:cd:15:dc:2b:f3:b1:04:3f:
         bf:71:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:38 2025 by rpki-client