Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/4ea61964-aa82-36b1-aede-b57b4dacfd09.roa
File:                     4ea61964-aa82-36b1-aede-b57b4dacfd09.roa (raw, json)
Hash identifier:          WhJ5A/WVQcFzazW+V32W2bPpfG6aZz4InIto0LYByrU=
Subject key identifier:   5E:AA:86:92:C7:A7:63:0D:CC:5C:9C:34:DB:98:45:B1:B2:3E:47:65
Certificate issuer:       /CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
Certificate serial:       010D0C9F4328584A9900B3B1736AE2F2CE68C880
Authority key identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/4ea61964-aa82-36b1-aede-b57b4dacfd09.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     32505
IP address blocks:        199.180.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:b3:b1:73:6a:e2:f2:ce:68:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=950751ed-5370-425e-9491-07cbd05c7bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:17:b9:02:63:f9:73:74:40:99:cf:48:07:
                    b2:f4:b0:3d:b1:c2:15:83:a1:28:0c:ff:8e:81:e1:
                    16:e5:8e:2e:05:ae:b6:28:5b:18:1d:8a:d9:fc:a8:
                    76:d2:41:fe:c9:5c:9e:ad:60:5c:57:be:75:ce:a3:
                    1a:7c:a1:be:71:10:52:42:1b:49:d1:db:e4:79:86:
                    f1:43:9c:89:32:9a:76:9f:e1:38:30:34:a0:ec:ff:
                    82:ef:df:ac:9d:f2:66:5f:9b:41:3e:78:42:a6:2f:
                    cc:3f:61:62:5c:ea:0f:c9:68:64:b4:6d:d3:ba:0f:
                    d4:42:ce:95:f9:35:66:eb:af:fa:cf:a4:81:a4:12:
                    d6:b8:bd:68:2b:88:37:27:f1:59:0a:37:8d:fe:13:
                    18:1d:33:2d:57:33:1c:88:99:e6:38:de:99:2d:19:
                    3f:a7:e4:bd:98:62:d0:f5:6d:a7:20:32:ea:a5:f2:
                    74:cd:ed:45:6b:73:13:2c:fb:15:c0:06:bb:d9:34:
                    12:ef:c5:64:4c:be:9b:b2:c1:86:53:70:85:7c:c4:
                    19:ba:8a:04:35:48:b1:85:8c:c0:f0:f9:a4:41:c9:
                    02:2a:d3:31:86:ba:b3:2d:7d:b3:39:91:f7:68:09:
                    e5:2e:96:08:c1:e7:23:0a:21:1c:32:68:ec:5c:34:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:86:92:C7:A7:63:0D:CC:5C:9C:34:DB:98:45:B1:B2:3E:47:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/4ea61964-aa82-36b1-aede-b57b4dacfd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl

            X509v3 Authority Key Identifier:
                keyid:81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:ba:2f:fe:ca:59:fc:c0:19:1b:a5:60:32:66:a1:1b:1f:
         79:be:3f:b9:e1:98:02:ec:f2:b4:f9:08:79:be:8b:e1:16:51:
         c2:2a:de:33:91:a9:c6:d8:ac:24:46:76:b6:ce:d9:da:bf:19:
         42:4e:df:4a:f0:14:3d:c5:3b:ff:34:a9:b0:31:75:aa:05:d0:
         37:be:09:55:e1:d7:73:e6:4b:9b:0d:f2:bf:74:bb:a6:86:02:
         49:09:2e:e6:29:89:98:cc:86:95:2d:44:06:58:3f:e1:7e:a2:
         d0:b5:6d:13:5c:2c:5f:95:ae:96:5c:70:ed:3d:e5:ae:49:88:
         63:f8:aa:18:31:30:1f:ee:10:91:f3:f9:ed:d3:c3:f5:b0:4b:
         d9:75:93:bb:10:fd:ee:59:60:5c:20:3b:de:ab:e6:12:de:3e:
         76:86:26:73:4c:67:3f:cf:86:55:a5:df:cc:46:20:85:7d:cc:
         12:65:3e:31:7a:37:bd:82:6f:41:c3:e6:98:55:3c:6b:0e:91:
         08:10:31:e6:f4:32:29:1f:fe:c1:f0:f8:e3:df:5e:d4:70:7f:
         1c:76:52:9a:41:99:a3:93:10:70:e7:d7:f6:33:cf:f8:62:f7:
         11:79:c0:24:bb:55:a0:2b:87:3c:c4:86:8d:77:d3:9e:69:b8:
         c7:f1:83:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:55 2025 by rpki-client