Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/9720fbe9-9fad-3bc5-bc60-58cd34b8ceca.roa
File:                     9720fbe9-9fad-3bc5-bc60-58cd34b8ceca.roa (raw, json)
Hash identifier:          uGtNXQMR3eSH79R+Ny3mkinuI25tYF3Em/j65sA4sQs=
Subject key identifier:   A5:58:D7:AC:53:3E:C7:B9:8F:E8:AF:2F:60:D8:FD:A3:9B:AE:C4:54
Certificate issuer:       /CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
Certificate serial:       010D0C9F4328584A963687DCC5C7F371925A0040
Authority key identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/9720fbe9-9fad-3bc5-bc60-58cd34b8ceca.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        199.180.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:87:dc:c5:c7:f3:71:92:5a:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=1db8f87b-c1f9-45d7-909f-b4e1d8f93992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:70:4e:fd:d1:9f:9e:dd:da:57:72:cc:85:87:
                    2e:c3:41:30:8f:c8:6a:fc:8d:b6:3b:34:f8:69:a8:
                    47:21:b8:39:a4:e9:44:6b:4c:03:5a:6a:fd:3c:ff:
                    46:35:2a:58:0c:94:38:0a:96:bc:5d:ed:80:0c:35:
                    2e:cc:ad:34:74:f4:9f:a1:83:4d:71:db:2b:bd:0a:
                    54:81:6b:27:8d:b7:4a:f2:32:8f:48:ce:7d:ca:f2:
                    cc:24:59:85:21:2f:2d:fa:eb:d0:15:de:fe:3e:2d:
                    1a:b5:9b:ea:14:85:7b:a7:41:7b:61:05:ae:fd:2b:
                    f5:76:8e:55:ce:56:b0:ba:1e:62:84:43:a0:31:3c:
                    00:76:9b:46:c1:5f:b0:56:be:cd:e1:39:9c:d8:8a:
                    82:f5:3a:b0:8a:7a:ba:94:c8:6a:25:80:11:ff:b7:
                    7f:30:b3:e6:38:c2:87:11:bf:70:1a:17:c5:2d:db:
                    ed:86:eb:73:ea:06:94:5c:69:ea:69:65:cc:f1:7c:
                    09:ab:ee:f7:10:91:6a:c1:aa:15:53:b6:42:06:4b:
                    49:90:c7:e0:ed:36:35:91:ae:05:af:a4:e1:ae:89:
                    5a:6e:17:15:be:a5:0e:d0:03:7b:b3:bd:e3:64:a9:
                    8c:43:9e:e0:8f:16:45:30:20:e2:ff:97:39:ea:ab:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:58:D7:AC:53:3E:C7:B9:8F:E8:AF:2F:60:D8:FD:A3:9B:AE:C4:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/9720fbe9-9fad-3bc5-bc60-58cd34b8ceca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl

            X509v3 Authority Key Identifier:
                keyid:81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8b:25:e3:d9:9f:07:a0:ea:11:fd:2e:95:98:d5:2a:cd:f9:
         ab:25:df:f7:2e:18:1b:1b:f8:db:3b:d8:2a:cd:98:a3:ce:ad:
         29:25:c0:30:4d:88:be:b7:7b:22:b0:b1:fe:45:c3:66:6f:6c:
         4f:ed:56:18:29:b9:11:9d:f0:6d:26:2a:73:6f:fb:49:eb:14:
         39:1b:4c:9f:03:e8:88:5f:bf:ef:17:f3:d8:c4:72:e7:4a:a6:
         a5:05:bb:a0:ab:f0:dd:7b:35:25:8a:66:7f:21:6d:69:f2:eb:
         48:84:b8:51:21:26:e5:b3:76:f3:9e:e6:dc:e7:fd:87:56:e9:
         aa:36:d0:3f:bd:bc:44:6c:45:e0:14:bb:07:b0:11:b4:32:18:
         d2:0f:f4:95:31:5d:d0:d4:ea:fd:05:7a:8c:2d:89:fb:57:1f:
         99:a6:f1:e7:5e:ab:2e:8a:10:9d:43:51:dc:62:3e:1c:05:2b:
         4b:e5:7a:61:6d:7c:b1:6e:11:15:af:e6:df:6b:94:3b:c8:87:
         08:3c:9c:03:b7:1b:a2:34:5e:35:ab:11:3f:81:c3:a6:ff:c2:
         ff:c0:f7:ea:6a:39:7d:73:d1:1c:b0:14:a7:56:7c:05:38:a9:
         6f:ca:eb:ee:54:51:1f:8f:31:26:b5:31:60:89:ba:a0:38:41:
         36:14:54:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:05:09 2025 by rpki-client