Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/dbfd6d41-d2c9-32c2-9407-1167bf7d0baa.roa
File:                     dbfd6d41-d2c9-32c2-9407-1167bf7d0baa.roa (raw, json)
Hash identifier:          9Jips/zzpe2LGMf4+6J2wpw1mdcl7ya+24V9zykwqVs=
Subject key identifier:   37:87:60:AC:19:57:C4:B6:A8:D1:80:EE:DC:ED:57:CB:C2:CD:11:17
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584B80B768F67C1EA3B9E09675C0
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/dbfd6d41-d2c9-32c2-9407-1167bf7d0baa.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     1403
IP address blocks:        192.222.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:68:f6:7c:1e:a3:b9:e0:96:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=8ebea483-82fc-4a46-b62f-a642392256a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:be:fe:e0:95:48:df:b2:85:e4:0b:12:87:22:
                    3e:fe:6d:0c:ab:9d:a9:3e:3c:59:14:c3:23:3e:11:
                    b6:8b:59:da:6a:4b:43:9c:bc:04:42:7c:88:93:97:
                    ab:fd:07:eb:a8:55:43:4b:87:62:ac:45:b8:04:cf:
                    4a:b2:42:eb:c4:b1:2d:b9:75:e2:71:8b:76:85:5c:
                    40:b4:3a:15:80:b2:24:c0:55:9b:d3:eb:fa:93:96:
                    20:ed:54:4a:9f:1c:45:3c:8d:1f:9f:ce:db:25:e2:
                    05:a5:d6:a7:fc:c6:91:e1:7b:92:98:20:89:64:71:
                    70:0c:d4:74:78:e3:6b:ee:eb:01:3d:03:22:b4:f3:
                    d7:c7:90:65:d0:c6:6c:df:27:86:09:a4:ad:9e:98:
                    d9:1b:0a:6d:10:97:e0:e7:f1:f8:4b:7b:a7:de:cd:
                    50:5a:b8:8b:26:c2:9b:89:bc:a3:e3:f6:28:2b:dd:
                    a0:5a:95:c9:b5:2f:2f:28:81:e2:fa:89:42:c3:cf:
                    ec:2b:25:b8:2f:08:1c:64:77:06:a2:51:99:ef:1c:
                    94:c8:98:95:a2:2d:92:d4:a7:95:d7:3e:8a:29:a2:
                    4f:01:2f:a8:d2:05:e6:1f:32:eb:49:ed:68:7b:a4:
                    21:df:b3:03:cf:d0:ee:31:33:d1:34:07:45:3e:a2:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:87:60:AC:19:57:C4:B6:A8:D1:80:EE:DC:ED:57:CB:C2:CD:11:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/dbfd6d41-d2c9-32c2-9407-1167bf7d0baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.222.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:c7:99:37:ef:8c:28:ed:1f:ab:8e:94:c8:a7:3d:2a:c6:
         10:d2:9a:5e:7c:99:d4:0b:47:ac:f5:9f:00:59:fb:0a:ec:8a:
         f9:f3:94:83:17:da:10:ba:fb:a0:80:25:f1:5b:dd:6b:6d:9a:
         b5:90:ba:99:10:5f:fe:52:92:78:a5:af:f4:a5:8b:62:24:e1:
         b4:97:0e:25:4f:ea:36:be:79:7f:47:82:45:d4:cc:b9:20:82:
         91:7b:a7:2b:09:d3:8b:25:b3:01:5a:49:b9:ff:44:39:6b:50:
         0d:22:58:07:36:42:4a:c3:8a:0a:69:bc:cb:8a:e7:3f:bf:d6:
         6b:8f:3f:2e:e0:2c:d8:4a:68:fa:73:b2:8d:00:76:b9:79:7b:
         14:8d:3f:d0:1f:96:8a:38:9f:34:dd:3d:8d:0c:3a:19:81:4a:
         33:3e:fe:06:0d:44:27:a7:df:ab:71:62:16:b4:25:72:8c:91:
         7d:7b:4f:5a:15:49:a4:e6:b0:3a:01:0f:14:8f:50:07:6d:18:
         4c:c0:04:eb:3c:17:ff:d0:29:43:74:55:27:e3:ba:37:ab:b3:
         13:51:51:18:90:4a:30:91:2b:3d:8c:69:68:bd:26:a1:e9:f3:
         08:d5:9f:c0:a9:c6:b7:b6:69:e1:9b:96:61:cf:e8:bc:63:f5:
         db:e3:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:51 2025 by rpki-client