Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e58d99f6-4265-37a4-83bc-c7b72665c097.roa
File:                     e58d99f6-4265-37a4-83bc-c7b72665c097.roa (raw, json)
Hash identifier:          403Einfn948tFblkDb6Z6XeLybUOIF+Q7PD2kCjiJss=
Subject key identifier:   CC:4A:7E:03:FF:50:EF:F6:25:A1:8A:CE:11:0A:95:F8:3E:4F:14:BE
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584B6631ECD7BA2133C2A88CA930
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e58d99f6-4265-37a4-83bc-c7b72665c097.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     17020
IP address blocks:        192.46.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:ec:d7:ba:21:33:c2:a8:8c:a9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=919f7108-3699-46e9-a5ff-853765170f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:6b:88:14:9a:d7:c4:fa:18:bd:ea:f7:90:
                    82:3c:12:d1:88:87:63:96:54:27:09:80:cc:5d:50:
                    b1:4c:7e:a0:97:45:19:e7:02:f9:ed:1b:d2:1e:1f:
                    31:bc:a8:cd:bb:91:7b:17:f9:b7:01:3e:6a:a3:de:
                    25:14:65:93:e0:52:16:12:ed:17:61:3a:f2:fb:75:
                    e3:f5:fd:88:ec:c4:a5:09:bd:47:c3:00:97:d9:ea:
                    91:e9:da:4c:5a:73:12:92:86:6d:53:d8:ad:00:0f:
                    21:14:df:a9:a8:0c:29:08:08:da:27:e8:f2:e4:2d:
                    0b:90:20:82:7d:1c:9f:74:94:23:d9:47:14:43:37:
                    fb:72:b7:dd:83:13:db:f5:5f:fc:08:dc:3e:92:6a:
                    b8:28:5f:3f:32:40:ee:23:a6:c3:05:19:f5:d0:04:
                    20:26:b5:ba:e1:7f:8c:e6:d7:bc:50:f5:37:7f:da:
                    53:d9:40:37:a9:c1:32:71:0e:53:ea:48:52:8d:d2:
                    6f:42:19:d3:56:42:8a:af:20:bc:65:9d:f9:dd:d6:
                    8d:33:ce:3b:19:0a:05:39:11:ed:3c:b6:36:cb:ef:
                    5b:ea:ef:67:fe:71:da:d0:af:fa:dd:5b:c5:e3:da:
                    0b:63:5c:43:c8:ae:d2:01:6e:46:1b:b8:90:c6:9a:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4A:7E:03:FF:50:EF:F6:25:A1:8A:CE:11:0A:95:F8:3E:4F:14:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e58d99f6-4265-37a4-83bc-c7b72665c097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:88:b7:36:a2:d2:f6:d5:7c:a5:0e:ba:db:f1:ab:a4:b6:a8:
         83:59:c8:1d:cb:d9:f7:33:77:5c:b4:c3:63:f1:42:df:e7:4b:
         4b:f0:dc:45:77:3c:89:75:ba:d8:a5:11:47:03:04:69:cd:ba:
         e9:80:1e:7a:a0:0c:e3:3d:b7:06:b3:ac:33:91:70:5d:eb:64:
         16:5c:e0:ba:a6:c5:ca:de:3a:3c:9f:5b:68:73:e3:d6:8f:c5:
         bb:30:0b:25:7f:75:94:0e:75:39:81:4d:0d:cc:25:87:1b:fc:
         bd:8a:ed:9c:80:05:a4:66:0c:c7:7e:26:f7:9d:f1:46:55:e3:
         1f:26:d6:18:18:41:e6:e1:ea:24:6f:96:84:62:04:c0:c0:ce:
         61:1b:04:5f:79:a1:36:a3:b6:30:09:f5:fd:e4:6d:17:f1:29:
         7c:7c:f5:15:30:b4:3c:0e:6a:fe:6e:27:c4:66:f4:3b:19:cc:
         0d:7f:8c:c8:92:f7:9f:af:c4:9f:79:9a:3c:8d:11:7c:1c:4f:
         c5:26:4f:cc:48:0f:26:b3:9a:47:73:0c:45:50:5e:3c:97:bf:
         2b:d1:55:a3:7f:1d:13:6e:3a:11:6a:38:a2:a6:47:14:37:e0:
         b4:8c:8c:f3:ee:69:ed:ca:af:23:cd:74:a2:e4:e8:e9:05:6b:
         1d:5a:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:26 2025 by rpki-client