Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa
File:                     19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa (raw, json)
Hash identifier:          GWDMaGAvfqjPORi81LZpSMHK2EZI8g05Bqq68h/cdm8=
Subject key identifier:   8D:9B:61:53:B3:19:C2:0A:2B:A4:AE:07:DD:86:A2:83:8E:B2:42:DA
Certificate issuer:       /CN=025d9364-6721-4daa-8be7-c5db4f654594
Certificate serial:       010D0C9F4328584A1E2AA5BE4A451E9CD7B6BC00
Authority key identifier: 64:68:76:1E:24:7E:98:5F:BF:33:6F:8A:89:E9:3E:D2:C8:A3:F9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     19905
IP address blocks:        192.52.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/025d9364-6721-4daa-8be7-c5db4f654594.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/025d9364-6721-4daa-8be7-c5db4f654594.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a5:be:4a:45:1e:9c:d7:b6:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025d9364-6721-4daa-8be7-c5db4f654594
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=faf83a00-7359-4b84-b0ef-f1e7b5a97dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:b3:41:51:32:12:64:80:b7:a5:de:5b:95:
                    8d:a0:51:6a:c3:f0:38:f1:e3:d1:7c:63:7e:cb:2e:
                    b7:aa:40:bd:0d:af:3b:1e:5b:b3:3d:1f:93:e9:70:
                    c8:da:ae:ad:03:b8:b1:47:c4:6c:ba:06:45:c4:1c:
                    8b:4b:97:d0:40:ca:7c:d1:cd:08:06:d3:e9:b6:9e:
                    30:2e:23:a2:8b:7e:6f:8d:b6:b7:0d:28:40:26:87:
                    fc:68:80:a0:d5:57:96:b8:e7:a2:ff:fd:c8:08:f7:
                    cc:f6:d6:4e:55:78:31:e1:fc:37:51:f1:9e:19:dd:
                    98:60:cb:85:5c:a3:39:f6:5f:37:b6:10:7a:76:25:
                    ec:5b:e0:23:63:4a:be:3c:ba:8f:a1:f6:0f:0a:7e:
                    ae:e7:98:32:fe:aa:3b:e8:5b:25:fd:1f:94:57:a1:
                    6b:1b:c6:15:12:f0:f8:23:47:8f:a4:25:ef:eb:84:
                    4e:26:dc:39:35:bd:6c:89:c7:11:03:ab:15:34:44:
                    2e:a7:eb:f4:5f:82:1f:32:e8:0a:37:a1:38:fd:28:
                    c7:de:6f:9a:e2:1b:34:14:97:53:62:e5:f9:2e:61:
                    0d:65:50:aa:04:66:e7:85:fa:f0:3e:2c:a5:d7:c2:
                    27:d7:53:b1:aa:05:4c:0f:d4:16:f5:29:ca:3e:3f:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9B:61:53:B3:19:C2:0A:2B:A4:AE:07:DD:86:A2:83:8E:B2:42:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/025d9364-6721-4daa-8be7-c5db4f654594.crl

            X509v3 Authority Key Identifier:
                keyid:64:68:76:1E:24:7E:98:5F:BF:33:6F:8A:89:E9:3E:D2:C8:A3:F9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:97:56:67:61:5f:41:65:8d:45:b5:c7:e0:73:0d:56:39:f4:
         f6:f8:b9:cb:9c:48:c5:76:d8:8b:cd:93:46:09:5b:50:f6:53:
         27:65:fd:75:2e:93:51:ba:00:15:a8:d7:23:aa:8a:68:cf:36:
         ed:81:d5:95:29:2f:a4:58:03:ff:ec:e5:99:4c:18:4c:4e:7a:
         9a:4f:f0:c9:18:be:bc:67:b1:f7:52:b2:64:d4:99:a5:8c:05:
         99:27:65:53:af:94:b0:54:52:58:1e:c3:97:8e:6b:80:5f:ad:
         83:0d:9c:31:52:e6:47:75:12:4d:8b:50:38:83:8e:fb:4e:02:
         e4:62:bd:b1:68:e1:77:53:c9:15:99:ff:81:77:38:27:71:69:
         19:a2:92:21:8f:3c:be:dd:cb:26:77:c8:09:e7:d5:0e:ce:c0:
         0c:b9:63:c9:bb:a2:00:22:09:af:8e:16:84:d1:77:bd:39:40:
         8d:1f:64:7a:28:ba:36:69:fd:b2:6b:81:c2:79:dd:85:c0:ac:
         7f:4e:a4:e2:b6:2d:94:ab:d6:93:65:a8:50:5d:2f:c2:fb:e1:
         e6:bc:88:65:10:ac:9d:a9:41:58:64:9f:8c:7e:4d:ca:b4:6c:
         82:9b:e9:22:4f:fb:f4:c7:f5:39:3d:2c:51:4a:d3:af:7d:05:
         4b:37:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:06:23 2025 by rpki-client