Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/510d5549-a9f8-3043-82be-cf52d15d49bc.roa
File:                     510d5549-a9f8-3043-82be-cf52d15d49bc.roa (raw, json)
Hash identifier:          UYjaQPwPWhwTq/n9JA31WEjOJscBHM2WCUA0FampwOw=
Subject key identifier:   DB:98:97:2A:98:FA:F5:D2:31:54:E0:98:BC:8D:AF:CB:B4:D9:BB:55
Certificate issuer:       /CN=1a4498c7-70e2-4ca4-b18f-4a107d0a6313
Certificate serial:       010D0C9F4328584A9DD2BF2B027E268E7410E980
Authority key identifier: 8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/510d5549-a9f8-3043-82be-cf52d15d49bc.roa
Signing time:             Wed 23 Jul 2025 18:27:18 +0000
ROA not before:           Wed 23 Jul 2025 18:27:18 +0000
ROA not after:            Tue 21 Oct 2025 18:27:18 +0000
asID:                     40159
IP address blocks:        192.152.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:d2:bf:2b:02:7e:26:8e:74:10:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4498c7-70e2-4ca4-b18f-4a107d0a6313
        Validity
            Not Before: Jul 23 18:27:18 2025 GMT
            Not After : Oct 21 18:27:18 2025 GMT
        Subject: CN=c054145a-2756-4654-8321-20d8be461ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:29:1b:eb:62:f4:13:65:a5:bf:81:38:7a:
                    ae:ff:28:14:62:80:71:64:cb:fe:e4:13:78:90:c7:
                    da:e5:58:61:71:2e:4f:0b:d7:a1:00:55:48:38:d4:
                    ed:13:c0:e3:d3:7d:ad:64:ba:cc:6f:17:f6:36:bf:
                    b4:94:61:7f:6a:5b:9a:f9:b0:2f:46:97:ab:9d:1a:
                    83:cf:b6:8c:19:de:cb:d6:2f:8a:66:2f:80:8e:4e:
                    bc:59:5f:15:2c:60:0b:9d:98:71:c8:29:66:4b:22:
                    58:84:68:f4:1b:00:25:95:39:e7:d7:fb:38:f6:a3:
                    b7:2e:46:4d:35:c4:53:34:74:93:32:87:72:69:8f:
                    42:93:5c:34:9f:7e:01:5c:09:fc:a6:4d:29:12:8d:
                    3c:bf:51:52:3b:4c:dc:7e:1d:61:7f:63:d3:49:5d:
                    3e:a8:12:e2:0c:fc:a5:04:06:bf:b7:61:ad:da:3b:
                    5a:90:37:b9:c3:c7:b9:33:c9:82:30:51:4c:9c:8f:
                    97:33:99:83:ba:d9:51:90:6b:0d:89:15:0d:a2:10:
                    30:1f:4b:60:02:c7:02:35:de:a6:81:db:0f:71:82:
                    83:59:6d:f0:35:61:e3:84:76:b6:bc:93:25:22:0e:
                    6e:99:fa:af:d4:93:b1:dc:40:17:43:14:6f:58:57:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:98:97:2A:98:FA:F5:D2:31:54:E0:98:BC:8D:AF:CB:B4:D9:BB:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/510d5549-a9f8-3043-82be-cf52d15d49bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.crl

            X509v3 Authority Key Identifier:
                keyid:8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:da:c1:07:61:69:c5:b4:f4:2d:ef:e5:55:5c:f6:1e:7c:
         81:97:7f:ba:1f:7a:36:34:e9:86:de:4c:e4:de:ae:d8:88:6f:
         b1:a2:b2:d6:15:a8:95:64:8d:2a:ea:d6:d0:1b:6f:8f:20:fe:
         ec:b6:8c:2d:0a:d3:3a:4a:00:67:1d:98:d9:69:7f:ac:29:8c:
         56:2b:c2:c7:21:99:50:19:1f:7d:fb:2d:0b:95:ba:26:c8:49:
         fa:b1:0c:fa:81:28:74:60:94:3b:d0:d1:b8:8f:ad:51:0d:29:
         94:e7:cc:28:36:66:d2:72:f8:cf:e5:6f:fe:b5:d5:81:24:c3:
         e5:ef:b3:1b:b7:e0:1b:c0:97:58:87:12:a0:3d:b4:70:e8:bc:
         fc:45:dd:35:bc:b0:69:70:6b:8d:d0:2d:c0:8f:26:bb:c9:a8:
         5d:91:26:6d:52:da:9a:1d:88:d2:ff:78:e4:2e:c9:8e:94:76:
         34:9f:e8:cd:7b:ce:58:b6:f1:2a:1c:24:0d:b5:90:96:3c:57:
         01:fc:3c:c1:9a:b0:f4:65:f1:e9:9c:de:d5:6e:a9:ad:6e:db:
         4a:e2:99:a9:80:dc:9b:4e:85:dc:fd:23:cc:b8:25:b4:8b:cd:
         67:d0:f8:b0:3b:06:4d:ac:c5:a2:14:2b:38:3e:80:fe:7c:19:
         6f:a0:d0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:41:07 2025 by rpki-client