Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa
File:                     a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa (raw, json)
Hash identifier:          sHE1JKQ3bdq0Mu0MehtcefJjR7FV+fJYmR74zIFQ97o=
Subject key identifier:   05:8C:82:03:FD:34:85:6D:EA:48:E5:8E:1A:A7:F2:C8:C2:F6:C8:B5
Certificate issuer:       /CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b
Certificate serial:       010D0C9F4328584AC016248568A30749097CD780
Authority key identifier: 5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     394193
IP address blocks:        192.84.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:24:85:68:a3:07:49:09:7c:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=326e96f4-3b13-420b-bf41-002ee7dfb537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:73:2d:33:2f:1a:26:af:5d:aa:1a:3b:45:
                    b6:c0:09:92:f4:d6:65:5f:86:12:33:47:95:dd:5b:
                    26:5c:fe:88:68:6c:78:13:51:0e:c8:5f:8b:e3:89:
                    c4:0a:a4:ea:b8:e8:84:f3:e0:6b:c1:d1:c1:6c:d4:
                    e7:89:ea:c4:be:fe:a8:83:dc:32:e9:38:41:77:8a:
                    23:de:be:26:aa:8f:d3:19:0c:b4:79:1c:2c:19:94:
                    12:21:0f:61:8f:74:78:cf:d4:11:34:22:bf:28:54:
                    75:e4:0a:9e:97:3e:c3:49:f0:50:df:43:6a:3a:d8:
                    6e:2a:14:66:0b:f1:e6:df:f1:cf:2b:0a:6a:1f:2f:
                    1a:f6:35:55:62:f2:de:f5:97:55:74:30:31:9a:dd:
                    a8:55:58:2f:83:fa:d4:b6:1d:50:be:30:1b:5f:f0:
                    67:6c:c9:59:c1:eb:83:63:38:38:e0:73:ee:e3:0d:
                    4c:ef:8d:6d:03:eb:10:ed:5f:c5:38:96:c5:9e:1c:
                    69:9b:5d:10:9f:00:11:da:06:e1:5a:e9:47:f5:22:
                    2f:c9:78:95:76:64:54:c8:04:c8:12:75:ef:37:dc:
                    9d:f0:30:15:af:fa:7e:6c:8b:0a:51:06:fa:5e:86:
                    6f:5c:7a:cf:b6:70:e7:8a:3d:d2:90:82:46:70:c8:
                    80:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8C:82:03:FD:34:85:6D:EA:48:E5:8E:1A:A7:F2:C8:C2:F6:C8:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.crl

            X509v3 Authority Key Identifier:
                keyid:5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:99:70:0a:5f:a7:3d:b1:3a:02:da:3a:2c:c2:32:3c:a2:67:
         83:0d:e6:92:12:9e:2f:96:86:d2:67:65:a6:e9:f8:10:38:b7:
         12:ea:9c:49:1d:cf:58:40:a1:18:bc:a5:ad:4c:46:2a:0f:29:
         0e:d1:c3:08:4b:93:d6:80:f5:df:ed:5e:33:0b:b2:69:60:86:
         7f:cb:88:02:bf:d1:1b:91:d4:f7:82:20:5a:66:12:3b:ab:c5:
         e5:4a:26:12:5d:8a:2d:28:9b:4f:f4:9f:f1:4f:8b:98:87:42:
         95:fc:e0:44:b8:5e:56:57:11:51:f1:80:11:b9:5b:c0:65:16:
         57:7c:96:82:7a:84:44:c5:fa:5c:31:9f:33:b7:25:86:20:35:
         02:82:d4:7a:17:78:82:a9:4b:f5:3d:94:fc:61:34:eb:1c:63:
         9f:27:4f:6d:34:b6:94:0d:b4:fc:9f:08:1b:38:aa:a5:45:37:
         cc:ad:4f:81:94:9b:fd:da:e4:94:ca:55:d8:90:2a:79:f2:05:
         80:ea:c1:84:f7:7b:ce:ea:39:2a:d7:37:02:86:3b:78:e6:d7:
         09:de:e0:ee:99:3d:8a:dd:bf:6f:0e:b5:4a:41:59:9f:9b:1e:
         bf:a0:84:ae:7e:eb:d6:25:4e:4d:ce:cf:1b:ec:14:1d:91:ef:
         b3:cc:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:10 2025 by rpki-client