Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa
File:                     d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa (raw, json)
Hash identifier:          HiGL+BAHFnIh6ybVDjDal/sU0k24qUNwZiqBBUQTWzk=
Subject key identifier:   98:00:9D:C0:F6:FC:C4:AB:53:1C:1F:26:E7:29:8A:52:63:3F:F4:57
Certificate issuer:       /CN=1fd804af-5006-4871-96a7-e7dfad97b8b5
Certificate serial:       010D0C9F4328584A936B59F8FB2E2DBB3057C380
Authority key identifier: 74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     395036
IP address blocks:        192.225.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:59:f8:fb:2e:2d:bb:30:57:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd804af-5006-4871-96a7-e7dfad97b8b5
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=6363bf21-a0c4-409c-934f-0a0a201812fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:ed:a9:e0:d2:6d:57:d9:cc:97:f7:16:7a:
                    1d:85:d1:d3:9a:d0:8b:1d:b3:2a:73:9e:5b:ea:26:
                    39:4b:2b:5f:d3:d0:ab:38:50:8f:27:c3:66:3e:7f:
                    40:e7:a7:92:1d:3a:19:4d:d5:ba:df:3d:bb:63:cf:
                    ba:38:99:4b:fc:c6:aa:85:d4:eb:43:0f:07:6b:c2:
                    52:4b:c0:75:d6:4d:73:6e:eb:28:ec:72:ca:4e:d6:
                    a7:21:79:e8:59:91:04:2b:21:bd:c7:d5:d1:d1:5e:
                    8e:76:67:30:82:0c:a3:c2:37:30:1f:24:d2:27:20:
                    76:95:d6:37:1f:cb:d6:64:ef:f6:55:ab:6a:b9:65:
                    9c:2a:79:eb:45:48:8a:5f:7e:05:4b:13:37:7a:ec:
                    4a:86:37:b0:7f:86:a3:bb:f3:c7:f0:0a:31:c5:d4:
                    b3:4f:30:e1:77:17:7a:4c:bb:08:4f:a0:32:9b:ea:
                    1c:11:53:fc:f1:b6:fd:bf:c4:63:4f:52:2c:8a:c4:
                    87:ea:3a:d9:26:da:67:89:0b:a7:20:6d:27:95:54:
                    8a:bb:f9:07:ae:60:10:bc:45:c1:82:d8:01:f0:24:
                    9d:72:72:9b:f9:82:6d:0e:69:f2:e2:35:1e:84:8e:
                    6f:6c:1d:c5:c8:99:98:9d:26:f4:cd:c2:1b:71:00:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:00:9D:C0:F6:FC:C4:AB:53:1C:1F:26:E7:29:8A:52:63:3F:F4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl

            X509v3 Authority Key Identifier:
                keyid:74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:c3:25:40:01:9d:dc:13:8a:aa:91:f7:fb:a9:7d:54:e9:
         fb:d5:07:d2:59:d2:db:7c:4c:72:50:0e:03:2b:12:c4:44:21:
         3b:e9:58:35:14:f4:ea:d0:88:a4:c8:b3:95:31:d5:10:a0:b1:
         3f:66:9b:22:df:8a:97:ac:7f:08:00:7f:12:fb:f8:2e:49:57:
         90:33:8d:6c:87:b6:2a:f7:f8:8e:c3:ff:7a:41:d0:4c:4e:fe:
         80:e1:9e:4e:a0:ea:8a:cb:28:b3:f6:7b:4e:9a:01:e0:85:75:
         e9:61:c8:46:f9:09:52:77:03:a3:6a:9e:ef:fb:6d:ec:74:98:
         1a:b5:eb:b9:57:a1:6b:2d:42:75:87:12:61:09:db:08:67:f2:
         cc:e4:73:ba:3e:65:51:31:18:88:85:0a:a5:5c:e3:8e:54:e1:
         e4:43:39:9a:cf:51:05:03:d2:de:25:11:d1:6e:8e:ec:b4:a3:
         cd:c2:19:58:16:ad:25:d0:ec:87:44:d1:7a:c0:9c:6b:4f:81:
         50:98:87:85:f0:1f:eb:03:4c:c6:f1:df:35:d3:b9:1e:8b:0c:
         d0:a8:39:b4:f9:f3:72:15:de:81:e2:18:4b:76:5b:f9:7b:e2:
         c6:4d:3c:28:fd:81:7c:0a:95:1d:e3:dc:95:75:f6:bc:16:50:
         ef:65:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:01 2025 by rpki-client