Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa
File:                     b451892a-5138-3693-a8ec-542e202655c0.roa (raw, json)
Hash identifier:          75DR3B9xh5KYzuALIBBJXhW1JnRKxgm+f38VYHZWMwg=
Subject key identifier:   C8:5B:85:A5:97:E6:A7:18:69:BD:D4:03:B3:B3:B3:45:F4:C3:07:6D
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584AA160DC5DBE09C0637FC2C900
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     22418
IP address blocks:        192.157.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:dc:5d:be:09:c0:63:7f:c2:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=865bfea9-56cc-43d0-b2e2-f229d796af16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:46:05:2b:c8:2f:b5:ad:04:f1:2d:59:73:
                    5d:8e:ef:b5:d0:9c:34:58:7b:02:3e:65:07:87:c2:
                    e7:ee:6f:9c:c5:9a:61:a7:f4:06:18:8e:5e:73:b2:
                    db:4b:d6:db:08:6e:7a:cf:bf:29:46:c5:83:c6:80:
                    91:5e:38:c3:d6:18:69:d9:4c:2a:69:cb:93:fa:4d:
                    34:44:2a:5f:19:e4:ca:9c:58:e5:74:5c:94:9f:21:
                    44:a4:ae:3c:22:2e:4c:7a:85:f3:0d:51:73:13:d6:
                    3d:27:d0:e8:02:e2:a9:cd:fe:ef:63:a0:1f:1a:f8:
                    ac:00:f9:63:3d:ac:91:24:b2:04:9b:e9:2c:1b:c9:
                    bc:da:aa:f3:54:43:17:60:69:f3:fc:8a:51:c9:e2:
                    d1:22:1c:43:99:18:cc:0f:6e:50:4f:cd:e6:95:a4:
                    0d:5c:2f:d0:21:38:29:e1:16:54:c2:b2:af:3c:2e:
                    62:a4:65:d2:67:79:a5:49:b0:0b:47:ab:c6:9f:0d:
                    b5:2d:55:70:5d:a1:33:ee:d1:86:c8:a1:c1:b1:03:
                    3b:59:23:51:83:47:44:61:61:d9:d6:58:da:0e:af:
                    34:4b:fa:fb:05:a7:56:63:22:ae:f0:9f:fb:00:72:
                    6c:90:97:f1:27:9b:76:7d:a9:ad:20:f6:14:52:79:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5B:85:A5:97:E6:A7:18:69:BD:D4:03:B3:B3:B3:45:F4:C3:07:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/b451892a-5138-3693-a8ec-542e202655c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c7:89:b2:b9:2d:00:d5:a5:e6:33:7f:c9:4a:e0:d7:a0:95:
         ba:75:09:f5:47:b7:ee:3f:9d:c0:f4:32:3a:87:be:0a:7a:17:
         98:62:61:bf:73:1d:40:e3:bc:fa:d3:8a:49:c7:b7:ae:cb:e1:
         e2:c9:fd:a8:a2:61:d9:18:e6:5b:77:a9:e0:8a:96:d4:61:38:
         e7:82:75:6b:ee:74:aa:d0:4b:54:34:6f:25:22:a8:f9:b6:a9:
         cc:34:c2:ba:a5:1c:87:d2:a9:59:79:85:9b:e2:c1:c6:b6:9e:
         eb:66:83:ed:09:aa:4d:12:a3:e8:24:6f:e0:15:24:eb:84:b7:
         fe:7f:5f:48:67:66:85:3f:44:59:19:97:fa:0c:f9:17:c6:ab:
         82:1f:f6:66:cf:b8:ff:b5:b3:db:8d:09:97:28:87:b5:b5:3c:
         b1:93:31:cb:8f:94:f0:64:41:9c:32:e1:59:96:78:b4:8d:f9:
         d0:a0:85:66:ac:d3:cc:94:1c:f7:d8:49:96:76:5e:cd:21:55:
         c6:b3:55:98:24:f6:67:0d:7d:ee:84:b6:ad:ae:60:6e:bb:c3:
         3c:35:49:a7:91:3b:67:45:a9:e3:5a:5d:f6:54:70:d1:a3:cc:
         5c:10:bc:bb:7b:7d:7b:5c:20:31:c7:39:34:cc:f7:c4:bc:58:
         46:d1:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:50 2025 by rpki-client