Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/a4ffe579-812f-3bcc-bd9e-c83818d56fc8.roa
File:                     a4ffe579-812f-3bcc-bd9e-c83818d56fc8.roa (raw, json)
Hash identifier:          z3ngw+4eTVeHuOCR572ODpNNOIq1JYpgM4CxdxQLcAY=
Subject key identifier:   AA:68:9E:59:3E:35:92:9E:B1:7F:B8:43:B1:16:4E:B9:97:59:ED:EC
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F4328584AA2C643C5B7FB6EDDE43F73D0
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/a4ffe579-812f-3bcc-bd9e-c83818d56fc8.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     11032
IP address blocks:        192.77.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:43:c5:b7:fb:6e:dd:e4:3f:73:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=5bc3cd4f-6151-408f-8143-8711fb0bd572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:04:eb:00:45:ae:e7:5f:5a:71:48:f3:c2:
                    bb:d9:26:9d:aa:c0:27:c0:33:d4:bd:5e:c6:09:20:
                    25:82:aa:16:91:7c:d1:98:0b:4e:3b:ac:e0:37:a1:
                    d4:8e:f3:4e:a1:12:20:70:6c:85:97:ef:b6:86:b6:
                    76:b5:cd:11:dd:50:3d:bb:2b:93:53:8c:6e:9d:d1:
                    34:2d:71:3a:19:a7:95:47:77:a2:ce:6e:a2:b8:00:
                    4a:4a:70:b8:00:fb:8a:e6:c8:36:84:08:69:69:ea:
                    62:01:85:f1:9d:be:33:6a:57:2c:63:14:51:6a:c8:
                    5e:60:a6:84:84:f9:22:a6:98:63:f7:c8:42:a1:67:
                    d0:fb:ed:61:c7:bd:ca:5f:b7:2b:b1:11:45:61:75:
                    1b:cb:c1:1e:30:3c:15:78:09:cc:94:e8:c9:45:92:
                    70:4a:01:e8:4a:45:b5:d7:47:7a:62:10:30:e0:28:
                    c1:6c:7e:e9:c3:f5:12:fc:44:96:fd:7e:ff:4e:ad:
                    7e:8f:7f:71:b3:d2:3e:d6:b7:9b:2d:86:29:11:8a:
                    47:aa:39:9f:bc:70:62:c9:30:5d:2a:11:1d:d5:dd:
                    49:be:be:e0:06:ea:e4:9a:88:ba:e5:99:da:f1:1e:
                    5e:6f:bd:c8:75:d8:88:36:92:71:ae:73:87:1e:07:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:9E:59:3E:35:92:9E:B1:7F:B8:43:B1:16:4E:B9:97:59:ED:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/a4ffe579-812f-3bcc-bd9e-c83818d56fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.77.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:9f:f2:d3:31:29:79:46:59:b6:5a:53:59:5a:ef:3e:22:
         a8:17:be:7c:e5:a2:71:c3:d0:d3:d8:8a:2c:88:f0:11:9c:b4:
         3a:a0:b9:85:05:13:e4:4b:0d:34:0a:22:5b:32:25:ae:36:48:
         8b:a6:b5:f4:b7:9a:de:8b:0b:7c:4e:48:87:2c:03:d2:3b:c3:
         fe:f5:b4:3a:16:80:4a:a0:6b:74:51:37:60:05:fd:d1:5e:a4:
         41:f8:8f:a8:52:0b:b3:3c:92:17:c7:e7:31:54:92:9c:0c:a1:
         76:f9:fb:0e:bd:33:f9:44:6f:62:25:f1:f1:bf:d0:06:ab:25:
         75:68:6c:42:74:d8:c8:21:59:f7:95:9e:8d:22:8b:8a:79:e9:
         73:9d:10:3a:81:1a:67:28:c1:82:66:08:c9:2c:1b:7b:ed:59:
         7c:8a:5b:e2:8b:c1:f7:1c:dd:7d:88:93:51:75:8a:82:50:df:
         26:f0:e7:79:c7:c4:88:bb:17:10:54:3c:52:e7:cd:bc:da:72:
         f3:79:86:6f:4f:89:cd:79:4a:06:5a:69:df:4f:60:98:f6:cd:
         36:ac:d2:55:51:ea:e9:36:ba:96:11:db:3b:98:71:93:a1:90:
         12:9d:c9:f3:36:a2:4a:a2:d4:ba:c6:3d:25:60:c1:98:d2:33:
         23:6d:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:17 2025 by rpki-client