Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ca633633-73e5-3b37-b797-c894645051a9.roa
File:                     ca633633-73e5-3b37-b797-c894645051a9.roa (raw, json)
Hash identifier:          cO5PnnAFTy5uDxvffj6+ik/tdU54uV50dHYVjVJ7Mh8=
Subject key identifier:   1E:E2:F9:68:BA:DC:67:1C:EC:BD:E5:F9:1D:D0:04:BE:A6:5B:AF:29
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B1D9C21496A60287F04C1CBE0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ca633633-73e5-3b37-b797-c894645051a9.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     0
IP address blocks:        192.67.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:21:49:6a:60:28:7f:04:c1:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=4d6233ab-3b29-4f07-9a9a-ad80f784cb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:d5:26:fa:11:ce:8b:af:ca:dc:4e:d7:97:
                    36:3f:54:32:91:30:bb:a3:a0:02:00:6d:fe:a4:1c:
                    16:7d:99:a1:d8:b9:3e:3d:ea:f5:42:1c:db:05:21:
                    42:3a:48:02:aa:b9:31:fa:68:f4:50:75:7c:68:2b:
                    19:8a:96:4d:84:22:6c:62:ed:38:cd:77:95:ec:8d:
                    59:86:f1:88:47:01:8c:c5:cd:e6:ad:28:20:d2:50:
                    c4:c8:1f:ed:7e:99:2f:1b:7a:21:09:07:83:61:47:
                    b1:76:87:42:ed:27:6a:62:55:0e:d0:dc:1e:f5:1d:
                    54:ca:01:54:db:b4:47:46:cd:46:25:24:85:f6:e2:
                    02:07:b3:ec:02:df:c9:0f:af:23:e3:ac:81:7d:36:
                    1e:ea:9b:ef:eb:04:68:06:6d:0c:9b:6f:f6:c5:8a:
                    75:76:55:ac:0e:a8:fd:0f:f7:6f:2f:83:0b:79:d8:
                    7c:55:1e:a0:03:b4:5d:a6:2f:85:f6:3f:b3:6d:23:
                    55:41:f8:1b:95:71:41:a3:7b:87:cd:e9:11:a4:ed:
                    54:92:39:c6:53:3c:19:a4:f6:63:f7:d2:96:74:dd:
                    8e:10:f9:2b:4c:ee:ce:41:c4:83:31:8f:7d:69:81:
                    5d:80:11:96:f5:82:e2:79:4a:23:a2:c0:e1:ff:5b:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E2:F9:68:BA:DC:67:1C:EC:BD:E5:F9:1D:D0:04:BE:A6:5B:AF:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ca633633-73e5-3b37-b797-c894645051a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:32:41:59:df:a5:f0:29:2e:de:ac:ad:cf:db:19:24:5c:
         58:73:68:fb:6f:0f:7c:a2:7c:c6:af:27:ad:90:7e:e1:a8:d6:
         aa:9e:8c:96:c7:c7:47:d7:e5:8b:d0:b5:09:ac:75:b9:12:86:
         fd:36:14:b6:e6:65:96:85:32:ce:64:73:73:eb:ae:65:13:87:
         db:85:c8:17:89:4b:44:52:b8:42:3d:b6:37:a4:17:42:51:4d:
         87:d0:54:bd:9f:82:0d:6f:10:fa:73:62:c5:6a:79:3a:9c:28:
         aa:59:72:06:34:93:90:1b:1f:e2:a6:31:8b:04:29:f0:24:21:
         fe:ed:6f:81:23:26:11:08:9a:a8:43:80:dd:c6:26:5d:63:3a:
         5f:29:f3:d6:38:ae:e1:52:0f:c1:92:8b:20:ef:d2:8d:04:ad:
         bb:14:84:37:3e:69:74:fc:b0:ff:48:b2:cd:db:83:30:a0:f6:
         b4:58:95:1b:6a:5a:06:60:04:11:33:fd:c3:d3:1c:0c:0b:d8:
         ae:6a:61:d7:5b:bb:6f:76:3f:e3:ad:20:9d:1c:91:5e:92:c7:
         2b:5c:7d:1f:ee:93:bd:b7:fa:7d:0e:9b:ad:f3:b9:b2:ed:6b:
         f5:22:35:10:d2:6d:9a:6f:cc:d6:ee:d6:55:63:ce:94:6b:78:
         be:2a:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:05:57 2025 by rpki-client