Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/f7144ebd-d1d4-3483-a8ba-95452a3eb4e4.roa
File:                     f7144ebd-d1d4-3483-a8ba-95452a3eb4e4.roa (raw, json)
Hash identifier:          sEbpnT0WhzZDvgZWrhSZ40n3fk1CpEkvx1V2MhtiL/s=
Subject key identifier:   2C:CC:EC:4D:8C:B7:99:D8:B2:DD:88:E1:BF:4F:F8:22:16:1D:79:54
Certificate issuer:       /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Certificate serial:       010D0C9F4328584B7DECAD00CE58647A0A097580
Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/f7144ebd-d1d4-3483-a8ba-95452a3eb4e4.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     14977
IP address blocks:        192.146.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:ad:00:ce:58:64:7a:0a:09:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=36deb718-4457-4fd0-995f-4d3e82aa3598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:1a:a3:57:ef:59:ea:ad:61:9a:04:36:11:
                    6c:c6:1c:79:6f:d3:ef:3c:c5:d7:26:4d:cc:a9:d2:
                    2c:8e:f7:12:93:e2:82:1b:d2:48:66:25:da:56:ef:
                    49:cf:d3:0f:5a:70:c5:5e:59:fb:42:d9:6c:78:39:
                    be:79:81:a9:e7:b2:a8:4f:b5:6c:6d:9e:39:2b:61:
                    ec:85:61:23:99:0a:9b:3c:c1:b0:3b:26:aa:63:b2:
                    79:e4:fd:c6:89:83:15:3c:9c:d7:b9:88:7e:7c:57:
                    c8:c6:9c:78:c8:82:f2:c0:43:c7:1e:b7:74:f2:38:
                    a9:69:9c:ba:90:ad:60:72:c7:ce:52:81:72:1d:8a:
                    24:2e:c2:ab:00:d5:0c:e6:37:a7:3d:05:5c:30:02:
                    14:71:09:a4:79:a8:f3:15:0c:e3:62:12:b5:59:13:
                    12:42:03:4a:37:cd:37:44:1d:08:33:a1:40:1c:b4:
                    f4:63:ab:4a:17:c2:f4:06:09:8a:99:f0:72:77:c8:
                    81:76:b2:a5:8a:7c:14:fe:ef:58:15:2f:33:dc:95:
                    b7:e1:35:fd:38:e5:01:70:e0:8e:79:15:d1:75:59:
                    ac:37:88:30:67:32:77:77:3b:93:a7:ce:06:f4:b4:
                    8a:f3:ec:b3:23:1e:2f:06:df:17:e5:3e:fa:3b:de:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:EC:4D:8C:B7:99:D8:B2:DD:88:E1:BF:4F:F8:22:16:1D:79:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/f7144ebd-d1d4-3483-a8ba-95452a3eb4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl

            X509v3 Authority Key Identifier:
                keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:07:ee:e4:9a:49:e9:75:8e:64:9d:5b:33:ee:50:72:22:d7:
         28:d7:bc:ac:f9:38:de:5a:df:f0:cc:45:72:94:7b:35:c9:f4:
         37:24:82:43:5b:29:19:ec:14:78:0e:a4:1d:9f:37:86:8f:75:
         20:1f:68:7b:be:11:3a:2f:de:71:2d:7a:ad:ea:2e:ba:ba:5e:
         9f:9c:97:56:b0:ba:ea:73:a0:fa:dc:44:25:8e:0d:eb:4b:45:
         ca:6d:12:98:4a:aa:8d:c2:aa:c4:af:88:57:62:7d:b0:65:99:
         41:d1:60:05:c2:2a:b3:89:8c:d4:bc:82:4d:c4:dd:8b:0e:01:
         15:be:3d:42:d7:d7:23:b1:8c:3a:0e:28:94:07:24:2c:83:e8:
         86:4f:b2:87:8b:82:5e:57:1f:a8:6e:72:29:23:75:11:3a:c2:
         cd:f3:1a:ea:35:93:44:e4:56:25:bd:3a:0b:44:46:da:4a:65:
         50:0d:1f:6d:e5:8f:22:cd:76:11:81:35:00:64:70:a8:28:6c:
         1e:f5:0a:4f:87:cb:5f:07:87:a4:ca:6b:ca:e8:fc:2e:af:b4:
         a0:46:03:df:99:2c:88:9f:78:43:b2:e5:eb:e9:4e:eb:01:c3:
         c7:35:4a:89:45:3c:a4:36:fc:f5:d6:53:1c:45:b6:ea:e7:37:
         b7:9d:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:40:19 2025 by rpki-client