Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/14d197ab-aa26-3e16-a7ba-89c8af766cc5.roa
File:                     14d197ab-aa26-3e16-a7ba-89c8af766cc5.roa (raw, json)
Hash identifier:          0wFRbQIOc/hiVGpqUZicIrex+HvQhGiYXDusYEWuIFw=
Subject key identifier:   BF:E2:9B:3B:B4:9A:99:CB:11:8F:BF:46:94:27:1B:99:1A:19:25:F3
Certificate issuer:       /CN=5f4e01d2-e3ef-4e93-a304-b877c13a2744
Certificate serial:       010D0C9F4328584AB4081E2E49AA54CB478B1EC0
Authority key identifier: 17:BF:76:F7:EF:02:34:BD:79:28:F4:F5:10:EB:08:0F:92:94:C5:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/14d197ab-aa26-3e16-a7ba-89c8af766cc5.roa
Signing time:             Thu 31 Jul 2025 17:22:37 +0000
ROA not before:           Thu 31 Jul 2025 17:22:37 +0000
ROA not after:            Wed 29 Oct 2025 17:22:37 +0000
asID:                     6629
IP address blocks:        192.102.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/5f4e01d2-e3ef-4e93-a304-b877c13a2744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/5f4e01d2-e3ef-4e93-a304-b877c13a2744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:08:1e:2e:49:aa:54:cb:47:8b:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4e01d2-e3ef-4e93-a304-b877c13a2744
        Validity
            Not Before: Jul 31 17:22:37 2025 GMT
            Not After : Oct 29 17:22:37 2025 GMT
        Subject: CN=45d4043a-7226-47f1-8b36-7c7d4bfbf42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:7f:c8:cd:37:f7:fb:a0:8b:06:59:ac:88:
                    61:87:43:ec:5d:ef:ce:e8:90:e1:e8:1b:fd:ae:ad:
                    78:83:21:ef:6d:2f:f9:b9:30:ca:52:4d:94:36:c2:
                    29:a7:ec:3b:f8:4c:dc:99:cc:21:2f:74:66:76:dc:
                    47:3a:3a:05:01:ed:cc:1b:be:54:f1:21:3d:ee:47:
                    8d:bd:f9:bf:fb:78:93:09:18:ee:09:c9:cc:3d:e6:
                    b6:d2:9e:af:df:96:62:40:f6:16:2d:82:f2:49:31:
                    6e:7b:73:ad:0a:00:e3:85:ec:4e:b2:36:df:ff:36:
                    9b:16:1c:0d:48:39:a8:fd:2d:2f:db:54:89:79:fa:
                    e7:7d:12:ef:19:64:55:51:6f:7e:9e:ec:73:1b:b7:
                    86:82:3c:b5:8c:f3:95:35:5d:98:b9:45:2f:41:67:
                    95:b6:33:33:6f:2e:cc:d8:24:0e:ed:49:7f:c3:6e:
                    37:02:c6:ec:74:78:92:8f:1a:d3:04:8d:95:6f:fd:
                    cd:90:62:2e:72:49:53:ed:4c:1e:2e:95:e1:6a:05:
                    e6:54:17:8d:72:65:06:1e:cf:d9:da:95:d3:6b:f6:
                    6f:4e:f9:d1:b4:9e:ac:4e:f3:99:1c:89:3b:28:6d:
                    cc:21:4b:c0:aa:ae:a9:a6:72:d7:98:2f:6a:cf:f9:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E2:9B:3B:B4:9A:99:CB:11:8F:BF:46:94:27:1B:99:1A:19:25:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/14d197ab-aa26-3e16-a7ba-89c8af766cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/5f4e01d2-e3ef-4e93-a304-b877c13a2744.crl

            X509v3 Authority Key Identifier:
                keyid:17:BF:76:F7:EF:02:34:BD:79:28:F4:F5:10:EB:08:0F:92:94:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:ba:07:5c:e3:4c:7e:3b:2a:59:76:92:0d:5b:20:9e:07:48:
         c2:a8:e1:99:66:16:a5:98:a3:5c:26:88:fb:83:db:0b:b5:fa:
         8d:92:98:9e:a0:f6:5a:e8:88:17:c0:7e:4f:54:71:fe:3d:6d:
         0d:e3:15:6f:88:a9:19:cb:c8:99:c7:b6:b3:1f:75:b1:c2:2a:
         a1:50:07:f7:b2:ff:f7:23:d1:fe:13:da:36:c3:39:3d:f6:85:
         99:51:70:d7:88:c6:ea:f8:15:84:2f:b9:78:04:04:e7:b0:23:
         e7:e7:63:bb:6a:88:aa:d7:26:f1:f8:47:4b:59:b6:f1:df:ff:
         b5:bc:84:f8:90:82:6a:ae:44:fa:74:a0:5e:da:3e:50:f1:82:
         bc:46:82:35:ae:a5:af:c8:3b:b8:3a:25:d5:91:72:6f:e8:8d:
         e3:72:6d:ef:e3:9b:ea:c5:f5:4c:f2:89:fb:7a:8b:62:84:90:
         2c:8f:ec:1b:5b:31:31:c4:73:c0:bf:2a:e4:f1:27:75:c2:c4:
         7b:4c:4c:50:65:e3:79:49:06:a4:92:0b:cc:d7:1f:bc:dd:fc:
         6a:a0:45:c2:8d:68:f1:34:a8:e3:5b:19:61:52:0b:a4:93:dc:
         e0:08:f1:8d:a1:64:c5:1e:fa:da:54:0c:ef:ca:e8:54:48:d6:
         7b:a2:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:42 2025 by rpki-client