Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/e06b013f-90ad-3bb8-87d1-500f358c12cd.roa
File:                     e06b013f-90ad-3bb8-87d1-500f358c12cd.roa (raw, json)
Hash identifier:          ekI8RdRpz0So1h1FBitwVqO6aG7mXUHb1FVohbvIzDk=
Subject key identifier:   39:23:20:20:24:E1:19:76:62:E2:4F:2D:CC:C1:29:41:52:52:50:F0
Certificate issuer:       /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial:       010D0C9F4328584B828B1ADD9B7A4A8E16194CC0
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/e06b013f-90ad-3bb8-87d1-500f358c12cd.roa
Signing time:             Mon 13 Oct 2025 16:43:04 +0000
ROA not before:           Mon 13 Oct 2025 16:43:04 +0000
ROA not after:            Sun 11 Jan 2026 17:43:04 +0000
asID:                     394177
IP address blocks:        142.248.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:8b:1a:dd:9b:7a:4a:8e:16:19:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
        Validity
            Not Before: Oct 13 16:43:04 2025 GMT
            Not After : Jan 11 17:43:04 2026 GMT
        Subject: CN=6ef9c022-4cd6-4b18-a93f-489b8e33c0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:20:34:72:cf:70:ee:d8:bb:95:00:33:de:
                    2a:33:11:f9:b7:69:8f:39:ed:cd:ec:79:6a:07:7c:
                    15:82:d3:54:34:a0:5a:e2:a0:57:3b:e3:5c:37:bc:
                    82:f7:8d:da:f6:3d:18:41:4a:1d:d9:27:30:fd:c5:
                    93:8f:92:54:ae:8f:12:06:38:3f:2c:20:71:e8:7d:
                    81:bc:72:86:48:a3:38:17:d4:d7:10:04:72:dd:4d:
                    2c:19:e0:6f:d3:d1:05:65:99:d0:f3:6a:7b:e6:f8:
                    9d:88:bc:18:0e:cf:b5:e3:16:54:ea:22:04:a4:93:
                    a7:76:4b:86:fa:d8:87:3d:d0:ce:2d:7d:2a:4d:f4:
                    61:a0:c1:c1:e8:0d:b5:94:42:e4:e5:da:2a:29:6e:
                    80:ad:c1:e1:1f:be:98:49:39:f7:53:98:4f:57:a6:
                    ad:ed:c4:cf:a8:83:80:c1:d0:1a:37:27:69:de:2e:
                    37:a3:d4:c1:dd:13:54:5f:cd:0c:c5:18:c7:ab:86:
                    8b:3c:a3:32:13:33:97:b7:4a:b5:a9:8e:50:98:c8:
                    1c:73:29:88:1b:8a:34:42:d4:60:5e:71:db:56:04:
                    b0:88:b0:7f:03:a4:10:90:ac:b1:7c:d8:76:ff:60:
                    8c:a5:29:9b:ae:9b:49:71:a0:c4:16:47:2c:79:5d:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:20:20:24:E1:19:76:62:E2:4F:2D:CC:C1:29:41:52:52:50:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/e06b013f-90ad-3bb8-87d1-500f358c12cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl

            X509v3 Authority Key Identifier:
                keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7c:6e:bd:33:ad:30:e8:58:08:b5:b1:cb:25:32:de:b3:5c:
         e3:4b:5b:f9:db:3f:b4:ff:45:69:6e:8c:b7:eb:19:ea:5d:69:
         2d:5d:77:3c:af:ed:bf:f4:e1:5c:a3:4f:f3:a0:b4:ca:8b:02:
         99:31:ef:83:f4:30:5d:c3:4c:5a:bb:89:ab:9f:95:7f:03:a7:
         7a:a4:27:b0:79:4d:93:04:e3:91:d5:74:b8:b2:a7:61:02:3b:
         93:95:a6:ff:60:91:0f:a3:eb:7a:a2:02:14:5a:e6:80:51:9f:
         89:96:4a:54:ca:b6:c2:52:0a:8f:cc:57:98:d2:02:d0:ff:16:
         86:84:97:13:08:e3:ca:64:cb:03:14:aa:47:e6:93:9b:ac:22:
         50:17:69:c0:ed:f4:cd:65:fc:7c:fb:e6:03:cc:53:56:38:36:
         b3:c0:b6:8b:4b:8b:73:8b:01:eb:1c:04:d6:2e:92:b2:44:b8:
         92:5d:88:b2:b4:88:3d:ff:6e:34:0e:0e:cc:39:1b:f2:1d:3e:
         ea:14:7f:a6:3a:fd:76:11:83:62:20:5d:07:87:62:bf:d8:a8:
         f5:fd:b2:ea:4d:51:8b:d2:7c:5e:34:99:f5:de:77:03:78:7e:
         8a:55:e3:83:86:6f:6a:2f:9f:c3:54:bc:47:de:62:72:b1:67:
         7d:8d:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:55:23 2025 by rpki-client