Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/d3546048-56a4-3bbf-9a5d-090fd3d997ef.roa
File:                     d3546048-56a4-3bbf-9a5d-090fd3d997ef.roa (raw, json)
Hash identifier:          M3952Wb48oGLZg0RQQMZTY/KoNVb4Lscuf80mnGYVik=
Subject key identifier:   7F:45:62:07:97:47:8D:92:F6:C8:F2:2B:B8:20:85:C0:B1:7F:C2:90
Certificate issuer:       /CN=7ed23894-86e6-4cc5-bf0f-6e077e092448
Certificate serial:       010D0C9F43285849E654EB222BE1A11702CFA700
Authority key identifier: FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/d3546048-56a4-3bbf-9a5d-090fd3d997ef.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     3925
IP address blocks:        192.5.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:eb:22:2b:e1:a1:17:02:cf:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed23894-86e6-4cc5-bf0f-6e077e092448
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=c2348b78-0d20-4e84-980b-db26e52fcbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:50:46:49:26:98:a9:8b:eb:a2:6d:76:5b:6b:
                    6f:75:ea:d7:1b:ca:d6:d8:f2:fc:c5:98:4f:0a:91:
                    1e:79:2b:c7:00:84:eb:60:87:ca:79:a5:cb:71:ee:
                    f0:0b:21:55:e8:f0:1a:8f:d3:1e:e7:81:ae:7e:fc:
                    37:78:a6:a7:80:5c:a1:45:0a:f5:51:d9:d0:78:f3:
                    65:cb:64:5a:1a:1b:ba:3d:98:93:dc:47:50:29:9f:
                    c6:cd:42:da:e4:11:39:f6:1d:8c:f0:19:bf:4e:ad:
                    bf:84:ee:6b:fb:00:7f:21:5c:05:8f:ba:1c:19:fe:
                    7d:a4:a1:65:7e:ab:40:55:cf:68:3a:02:97:85:bf:
                    01:11:1e:2f:99:31:db:26:bb:6b:ff:55:98:cc:fe:
                    fc:9b:4c:22:23:7d:97:b8:24:7d:e1:63:8d:b1:ef:
                    c0:d8:ab:3d:7a:b2:90:45:b1:3b:56:b5:a3:6f:a7:
                    50:43:22:80:55:fe:c8:9b:d5:79:bb:61:cc:1c:ff:
                    b8:c9:7b:28:03:f1:a3:f5:ca:ab:37:a5:12:ae:2a:
                    b3:27:29:1e:32:20:3c:18:53:b5:db:28:f1:84:39:
                    e4:68:5b:a0:16:1a:85:7e:0f:07:e7:59:cf:c0:8c:
                    30:b1:6f:5c:52:bf:d5:b3:ed:54:42:7a:d0:a6:73:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:45:62:07:97:47:8D:92:F6:C8:F2:2B:B8:20:85:C0:B1:7F:C2:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/d3546048-56a4-3bbf-9a5d-090fd3d997ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl

            X509v3 Authority Key Identifier:
                keyid:FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:c4:3d:3a:0e:59:ba:8f:ae:8f:c9:05:97:31:90:74:4c:
         44:3e:9b:f3:f5:8a:d2:03:92:26:d5:3b:7a:26:8d:09:54:10:
         f1:2f:84:24:0a:ed:9d:24:43:c8:f7:a5:51:8c:50:d4:15:be:
         1f:b7:ab:cb:af:63:58:86:26:0c:3c:49:32:80:63:83:16:73:
         17:77:0d:05:ff:11:35:f9:5a:99:6d:67:53:97:30:8d:58:27:
         72:aa:c5:2c:a1:24:8b:93:94:73:65:6e:a3:19:ab:7e:e1:3b:
         b2:da:9f:73:6b:59:1d:8f:cd:ba:9a:12:0e:87:10:7e:4f:ef:
         f8:63:9c:9e:5b:c5:51:80:d4:f2:7c:b6:c5:6d:4d:f4:2e:a8:
         f5:ad:e2:4c:df:87:09:f7:3d:56:4d:cd:32:8a:d0:e1:7b:ca:
         10:b6:54:18:8f:8e:51:af:69:53:bd:54:70:a2:98:e8:c4:3d:
         c1:7e:42:bc:a3:0a:a7:db:6d:20:07:0d:77:9e:7e:b7:88:bd:
         08:76:a3:38:d0:7a:15:da:84:34:8b:d9:12:09:e7:5b:c8:21:
         db:bd:fb:de:cf:fb:8f:5c:07:22:85:2a:af:68:54:08:7f:87:
         84:71:96:55:a3:ff:67:40:f3:bd:9b:10:31:46:f0:ed:9a:bc:
         c8:1d:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:17 2025 by rpki-client