Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/e8acabe2-0d19-3a41-8ca0-b460d8e0a968.roa
File:                     e8acabe2-0d19-3a41-8ca0-b460d8e0a968.roa (raw, json)
Hash identifier:          2yrNqVl1/cWrIv0j4I+GJ63pnkDCJ4sRuA6O1lKwN8E=
Subject key identifier:   E2:6A:75:22:E2:45:3F:05:AD:93:8E:98:B5:29:AD:BC:20:EE:03:29
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F4328584B80B75C42FB26C025E8530480
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/e8acabe2-0d19-3a41-8ca0-b460d8e0a968.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     5645
IP address blocks:        192.102.255.0/24 maxlen: 24
                          2607:3380::/40 maxlen: 40
                          2607:3380:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:5c:42:fb:26:c0:25:e8:53:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=ab66a699-e53e-4017-b04c-44ff7b0a469c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:8a:d5:c0:0e:e1:78:9a:2b:7e:89:40:6e:
                    f8:ee:19:cd:3a:35:4d:c7:2c:26:1a:12:9c:bc:ae:
                    55:68:a2:5e:e2:25:cd:ea:b1:a5:0f:84:04:d5:b9:
                    61:ce:e1:e6:b7:50:00:14:3f:5f:fa:58:a4:27:54:
                    1e:b5:ce:2e:ac:89:fe:5c:98:c0:05:95:a3:9a:52:
                    40:b5:ac:36:59:5f:a8:76:ad:83:d3:d1:06:b4:ce:
                    17:0c:e8:8c:a4:8b:42:86:4c:a0:a0:b3:88:f8:6d:
                    9d:73:06:29:05:29:b9:29:96:3c:04:9a:8b:a1:5a:
                    81:d4:85:6b:91:97:5e:77:c0:26:79:53:aa:94:be:
                    f9:2d:54:a4:39:fc:a6:ad:3c:7b:ed:3d:39:37:41:
                    4c:59:86:bb:4d:a9:d0:cf:23:4e:87:16:25:b5:d2:
                    fc:0b:64:89:ce:5e:dd:84:01:80:aa:b1:b3:e1:d8:
                    30:53:b7:85:4f:33:49:1b:a7:d1:ec:84:70:69:a1:
                    6f:cb:06:65:01:cd:46:4b:b9:fd:00:84:21:86:15:
                    01:eb:92:ae:67:86:88:3d:1f:1a:56:87:e3:5e:ef:
                    5a:6f:c1:d4:2d:03:f7:41:22:dc:5a:9f:e8:02:d4:
                    e0:fc:4a:e0:9d:fd:dd:19:ed:aa:d3:54:dd:20:6d:
                    17:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6A:75:22:E2:45:3F:05:AD:93:8E:98:B5:29:AD:BC:20:EE:03:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/e8acabe2-0d19-3a41-8ca0-b460d8e0a968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.255.0/24
                IPv6:
                  2607:3380::/40
                  2607:3380:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:39:a4:8f:e3:f1:13:df:5a:c6:3b:a8:ed:76:de:ba:da:
         20:15:8c:e0:a9:c9:f6:d7:8f:e8:28:ca:35:13:ed:5f:80:07:
         b2:da:08:27:a4:8b:bb:83:c9:17:81:dd:e0:10:a3:4f:1e:68:
         74:e8:8b:00:fa:62:69:69:29:01:ff:b9:c6:10:3e:0c:db:9b:
         41:53:71:b8:f1:61:0f:c7:b5:b0:d9:ef:72:f8:51:e5:45:ba:
         2f:b6:e5:35:6b:af:b7:d7:92:ab:a8:7d:5a:d7:49:e5:bd:db:
         92:3d:0b:7c:c2:76:b9:fd:5c:f1:2d:05:94:ef:0f:f6:87:52:
         b2:c5:7a:c1:cd:f2:42:19:db:56:1e:28:ee:f5:69:c6:d1:ce:
         7c:1e:82:8e:b9:33:dd:41:0e:df:f4:34:eb:72:2a:c0:1a:36:
         a5:29:29:1d:c6:64:8c:27:54:68:bf:d1:07:5c:91:55:b0:3e:
         90:18:d1:8b:e8:ef:e0:c0:9d:6d:38:c2:f3:24:64:12:d6:cc:
         7e:b4:05:72:08:1a:9d:a7:e2:34:5b:c1:89:22:0c:a7:25:cc:
         31:ca:cc:9b:7c:9a:bf:a0:c4:19:0d:29:13:e4:d5:1e:0e:7e:
         8c:12:e2:b0:05:b7:b1:2c:1f:eb:1d:0f:5a:d1:fc:dc:28:3a:
         f0:41:0d:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:51 2025 by rpki-client