Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/498c058d-dbad-3e37-81c4-00cbd8fa2fcf.roa
File:                     498c058d-dbad-3e37-81c4-00cbd8fa2fcf.roa (raw, json)
Hash identifier:          eNqyRSp3YIWBGy6TirEUhAPcdXrKfchGDNwdLVcQQSE=
Subject key identifier:   E3:A0:6B:DA:AD:82:61:36:93:C4:07:53:C2:B2:61:FE:2A:0A:B3:E3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A8575FF4ABFC8B059E2C14C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/498c058d-dbad-3e37-81c4-00cbd8fa2fcf.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     22677
IP address blocks:        128.92.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:ff:4a:bf:c8:b0:59:e2:c1:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=8663e4a8-a7ae-4626-bff7-0a0bd667bad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:d5:61:3b:3a:26:6e:28:21:9e:5f:dd:d9:
                    fd:00:32:1f:3a:16:0c:11:2b:bd:05:8b:db:85:43:
                    76:0e:31:12:d1:5b:12:da:9a:30:38:b7:5a:49:2c:
                    2a:79:bf:e0:63:96:42:cb:67:1e:36:bd:b2:62:35:
                    a4:ca:ed:4d:dd:3b:6e:80:8c:86:26:3c:1f:e5:d8:
                    30:f7:a6:78:72:fe:2d:8e:a5:6b:d3:23:e5:6b:b3:
                    ff:73:ef:f9:b5:23:e0:68:dd:df:b7:a5:be:f7:28:
                    b5:da:87:9b:46:55:99:a2:85:3f:e8:c4:e6:a9:f0:
                    5d:5f:d5:c7:bd:71:fc:82:b6:14:bf:59:be:40:0b:
                    3d:d6:10:fd:15:c5:4c:37:08:98:2f:39:44:3c:22:
                    5e:0c:bc:e2:55:e4:63:8f:71:82:db:96:e7:41:6b:
                    0f:4a:ca:51:62:25:e3:68:26:bf:a1:34:a7:b0:c6:
                    61:be:fd:cf:92:2d:36:6f:89:26:44:04:f6:c8:8a:
                    8c:61:af:bf:3d:59:7d:77:6c:d1:f2:4a:fb:ed:6f:
                    40:b8:a4:94:df:36:41:15:25:e0:b7:da:3a:3c:1a:
                    dd:4b:bd:9b:aa:fa:b6:07:35:52:51:b7:cc:4b:82:
                    43:53:80:bc:09:d7:ac:55:5a:02:21:7f:9a:fa:50:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A0:6B:DA:AD:82:61:36:93:C4:07:53:C2:B2:61:FE:2A:0A:B3:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/498c058d-dbad-3e37-81c4-00cbd8fa2fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:e8:cb:87:c0:1c:62:36:d7:10:7b:35:a2:da:6a:fc:0a:44:
         4a:b0:9b:e8:99:c2:4a:39:d0:f3:76:89:e5:37:f4:15:c8:70:
         d4:eb:ba:95:4c:74:de:92:8b:21:fe:54:48:79:71:de:a4:a6:
         98:c4:26:ab:3f:2f:41:0d:4f:1a:c7:79:2a:7c:6f:9e:47:ad:
         9e:9f:fb:0e:fe:c5:13:2d:02:99:91:85:53:ee:c1:72:99:4d:
         f8:4f:ba:ef:0f:b1:6b:af:08:0e:a7:4c:76:67:ed:4f:63:9f:
         5c:95:f3:85:89:b0:4c:85:09:e7:43:65:9d:1d:71:32:4a:25:
         9c:44:04:5c:26:73:96:a7:f0:2e:11:80:48:82:a3:cd:0b:c8:
         80:64:c8:04:50:7a:50:b7:8f:ab:75:cb:5e:8c:02:4a:bd:6c:
         de:d1:03:5b:2f:df:90:f1:66:5b:c8:82:72:a1:ef:fb:32:d0:
         bb:4f:64:ae:5a:e5:2e:bd:84:01:22:45:e8:ab:1b:6e:87:a9:
         93:93:03:51:93:8f:24:31:28:7d:82:2e:d5:b2:33:83:bd:7b:
         7a:77:ca:6a:82:c9:60:1c:af:aa:3a:37:ca:7c:7d:09:f1:ba:
         54:47:92:c5:82:56:85:b7:66:73:2f:bb:d3:b0:cb:6d:a1:29:
         17:c7:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:00 2025 by rpki-client