Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa
File:                     f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa (raw, json)
Hash identifier:          MVD4wx4hk5IdE8lujwX+X1hEXQklos3CbJPErfy+ayY=
Subject key identifier:   30:F4:56:49:DF:F1:31:C5:B4:93:29:1B:BA:0D:00:8F:14:D6:6D:6B
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584AA160DC8D6B2C44FA7D3E4240
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     22418
IP address blocks:        192.157.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:dc:8d:6b:2c:44:fa:7d:3e:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=75a07842-e34b-40b8-9959-07ccaf006a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:13:2d:7c:80:80:25:24:92:f8:99:34:55:
                    be:f2:a7:0c:3b:91:de:e6:c5:e5:f2:09:20:1e:79:
                    8e:00:72:3b:2b:46:1d:05:c7:30:c0:f0:92:82:6f:
                    6f:2f:a5:7e:6e:8a:17:af:62:da:4e:b3:3e:77:3c:
                    03:c2:11:e3:ae:99:2f:4e:b3:29:55:89:8b:b4:e6:
                    64:e8:9b:75:9a:23:68:48:58:c3:41:33:68:2c:a8:
                    21:38:8a:f6:9c:92:1c:d0:ba:42:e3:69:51:d2:69:
                    c3:11:44:c7:a6:9c:43:48:06:d8:20:d1:ce:fd:e7:
                    21:d0:34:0e:1c:59:83:2e:dd:ed:df:b1:56:6f:9d:
                    1b:20:b9:9a:2d:34:51:16:89:e8:67:2b:29:c8:2b:
                    09:f7:14:bf:10:f5:c3:1a:c1:59:fc:1e:94:d8:af:
                    06:7b:b1:39:54:3d:5c:27:ca:62:7a:8d:52:34:b1:
                    6a:0c:98:a9:a2:ae:79:bb:54:76:54:10:43:75:1d:
                    09:8f:8d:13:0e:58:2f:30:a3:9d:7c:51:86:c3:b6:
                    cb:01:e6:10:8a:88:cf:3c:27:c3:7e:c8:bd:bf:9f:
                    5e:cb:c8:40:18:a1:4f:a5:f8:cd:eb:40:f2:f2:87:
                    59:ec:f1:e4:fb:67:76:6b:de:32:52:49:27:ec:e6:
                    3f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F4:56:49:DF:F1:31:C5:B4:93:29:1B:BA:0D:00:8F:14:D6:6D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:c8:0a:55:f6:0e:96:aa:0a:68:a1:c2:3c:f8:37:bb:97:
         b3:ec:37:17:b3:16:61:5a:57:bb:ac:4b:25:75:e6:57:5e:f8:
         72:7f:87:23:74:f1:db:53:5f:e5:4c:68:86:00:c9:06:5e:e1:
         3f:23:e7:d8:2c:e9:9a:d4:f5:f3:87:03:d5:f9:f6:0f:48:82:
         d4:56:50:63:1b:1c:bf:d2:9b:5e:0b:07:36:b8:ba:3e:30:f5:
         c4:09:f9:dd:ff:16:f9:01:f3:70:13:a4:54:30:10:35:2a:4e:
         72:ee:63:61:11:88:72:fa:f5:38:a4:c1:9d:b8:2e:12:3c:21:
         c3:35:c2:8c:b1:52:a7:2e:0a:65:ad:16:ce:53:73:92:2e:57:
         47:2c:c3:f1:07:cd:ee:6e:1e:a1:56:6e:77:52:a3:9b:80:9e:
         f9:55:1b:17:21:a9:55:d1:f7:4f:10:04:bc:8b:22:17:37:2b:
         44:65:fb:b8:c5:6d:9a:67:bd:bc:6f:73:fe:57:d1:3b:5e:14:
         99:99:79:c8:c3:0f:01:78:28:e7:46:09:8d:5e:4d:3b:26:d0:
         13:e3:d6:ee:e7:b6:65:16:00:92:16:7e:02:1e:10:4c:73:e5:
         7d:c0:63:67:3b:4d:2d:78:a2:c8:98:b7:64:c4:b2:4a:c3:f9:
         6a:c4:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:53 2025 by rpki-client