Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/e619075e-8e9b-3e26-bf9e-3494ea1da17e.roa
File:                     e619075e-8e9b-3e26-bf9e-3494ea1da17e.roa (raw, json)
Hash identifier:          OaJIoNFN4Y65vqiYgLvWizFiiuJyjjYGEn38HjCfXRQ=
Subject key identifier:   63:80:1D:4B:EB:D1:89:27:EC:1A:A5:53:20:B7:43:E3:14:84:4C:C8
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F4328584AA42B9F28CD1969C02105C780
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/e619075e-8e9b-3e26-bf9e-3494ea1da17e.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     376
IP address blocks:        192.139.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:9f:28:cd:19:69:c0:21:05:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=094b806e-1c37-4366-8185-300e855ae64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:bf:b6:ff:6f:07:dc:af:dc:65:91:75:52:
                    48:ad:19:90:8a:75:ec:84:33:30:97:f7:5b:86:40:
                    6c:21:17:e1:78:ee:ee:ad:7a:5d:4f:e2:ce:fe:ed:
                    27:1a:21:57:c1:33:79:5e:74:99:0f:75:fd:e2:a9:
                    e8:82:94:d5:5a:a1:a3:77:2d:db:9c:1b:b6:27:52:
                    ad:8b:e3:00:7f:f9:9b:b8:d8:b3:1b:1c:4a:04:dc:
                    0b:15:47:8a:87:1b:b5:2d:b5:36:8b:b2:35:61:04:
                    53:96:b5:5c:62:db:a2:0e:c4:fb:8e:5e:78:a9:14:
                    51:cb:aa:d9:dc:c9:e8:7e:45:bc:4e:89:d1:e4:d4:
                    37:7e:4f:1a:9c:95:6e:c8:78:e1:8c:4b:32:65:84:
                    f3:41:08:78:ea:ca:13:a8:d1:07:5c:47:52:ce:fd:
                    a9:b6:7d:b9:57:e5:f3:6d:4b:a7:e1:e0:97:34:0d:
                    92:13:db:9e:dd:3f:27:60:29:31:6d:9e:7e:79:02:
                    c2:86:12:64:2a:05:70:dc:50:4e:dc:16:6e:61:b9:
                    dd:12:b8:5d:a3:cb:bf:30:ba:25:38:34:33:c4:ab:
                    ff:b5:ec:c5:d2:7d:01:0c:e6:c6:f3:f2:ac:a9:1c:
                    85:d3:72:51:83:8e:c3:77:7f:a7:20:5d:b6:8f:54:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:80:1D:4B:EB:D1:89:27:EC:1A:A5:53:20:B7:43:E3:14:84:4C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/e619075e-8e9b-3e26-bf9e-3494ea1da17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:54:99:07:61:74:f4:2f:eb:17:57:c6:57:3e:24:bd:1a:
         53:07:19:61:b2:98:6a:cb:38:18:6f:b5:64:09:93:ed:82:49:
         9d:71:83:64:26:d2:c3:fa:03:23:e5:0e:b6:f1:e2:bb:e3:24:
         33:bd:9c:94:f9:db:11:f8:1d:ca:ef:0c:0b:19:59:9a:51:3a:
         c0:04:58:9a:74:77:ec:1e:47:ef:74:a5:e6:4f:ce:92:29:22:
         ca:1f:48:fc:6a:dc:5c:4a:25:c7:cf:62:b3:32:64:79:98:c1:
         44:c2:6a:02:ba:45:56:71:4d:c3:58:5d:e4:d0:63:ea:e4:35:
         a3:bb:99:cf:78:d2:ae:b3:85:96:ad:f3:d6:25:66:74:85:bc:
         3e:a4:4e:d3:73:25:2e:f4:cf:8d:08:84:6d:af:cb:cc:bb:4b:
         1a:02:71:de:76:3e:22:15:c0:60:7a:18:2f:14:2c:25:07:d0:
         96:49:36:8b:d6:b5:22:be:ee:ca:13:16:f7:c1:2e:6f:13:5c:
         ab:cc:82:42:e4:dd:1c:ae:db:25:41:ee:3e:63:eb:fe:df:10:
         81:20:7b:54:09:a2:05:08:c1:64:0c:1e:be:4b:0d:54:8a:69:
         2c:9b:f8:31:d8:c1:bf:0d:d0:7e:1f:20:e5:d8:45:78:58:ef:
         80:38:66:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:40 2025 by rpki-client