Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/35d3f806-ab98-3711-84ee-81f48a1a9349.roa
File:                     35d3f806-ab98-3711-84ee-81f48a1a9349.roa (raw, json)
Hash identifier:          EiDQfOiIaebkniqfy7UTxZq9s4OyWPFzjKeY8MAs04s=
Subject key identifier:   57:A1:9F:46:56:D0:04:80:9B:A2:75:B0:58:0B:FB:13:90:99:CA:73
Certificate issuer:       /CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
Certificate serial:       010D0C9F4328584B4E7712D293FA8C8608D02280
Authority key identifier: 49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/35d3f806-ab98-3711-84ee-81f48a1a9349.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        192.124.92.0/24 maxlen: 24
                          192.124.93.0/24 maxlen: 24
                          192.124.94.0/24 maxlen: 24
                          192.124.95.0/24 maxlen: 24
                          192.124.96.0/24 maxlen: 24
                          192.132.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:12:d2:93:fa:8c:86:08:d0:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=577031cc-0960-476f-81b8-82167116a517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:b4:b6:20:92:a0:0c:37:52:a3:ab:6f:dc:
                    26:81:77:0e:3a:d2:8a:94:a1:2d:5c:49:dc:b5:95:
                    72:13:87:dc:8e:a9:9d:a4:6c:3f:80:e1:73:a5:24:
                    7e:1e:86:3f:41:41:56:a9:e2:74:90:7d:79:a9:cf:
                    d2:7d:9f:3a:e9:ff:2d:e3:5f:d0:28:f7:08:8a:8d:
                    3d:7b:fe:7c:e6:df:3d:47:e1:fd:9b:79:fc:0d:0d:
                    95:fa:a5:87:dc:c5:df:d7:31:e4:5c:bf:09:fd:06:
                    e6:9a:43:4f:38:a6:6e:86:db:2a:e3:57:59:cf:61:
                    cf:27:68:63:00:44:ac:6f:f6:d8:e1:78:f6:78:a8:
                    d4:72:49:21:4a:7f:89:d5:9d:de:d1:9b:42:66:21:
                    50:17:fb:3b:cd:6c:32:ef:1c:3b:6a:4d:b9:29:9e:
                    86:05:61:59:1b:47:48:fa:00:bd:92:f2:35:17:6c:
                    6a:a9:30:f6:da:7f:51:74:f2:fe:59:86:1c:13:f9:
                    87:8f:23:ff:29:44:01:b5:85:a4:db:83:44:b2:99:
                    0c:7a:4a:c7:d5:db:b4:c9:55:cd:53:bc:25:c4:57:
                    53:c9:17:7e:be:6e:09:7f:01:0e:88:bb:7a:52:3e:
                    82:94:68:41:fe:a0:59:42:69:ea:07:12:f5:60:3f:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A1:9F:46:56:D0:04:80:9B:A2:75:B0:58:0B:FB:13:90:99:CA:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/35d3f806-ab98-3711-84ee-81f48a1a9349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl

            X509v3 Authority Key Identifier:
                keyid:49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.92.0-192.124.96.255
                  192.132.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:37:34:ae:de:e5:2b:be:bc:7d:cf:8d:47:ca:07:7f:d1:71:
         26:74:3b:b7:52:a3:22:07:35:15:45:53:d0:ab:af:6e:3a:6d:
         75:37:19:c7:80:77:23:43:f4:7e:6e:44:5f:38:46:ec:29:47:
         8d:93:30:c5:dd:06:d9:e8:5f:7e:1f:9d:22:1d:cd:10:47:eb:
         31:03:99:fe:c5:46:cc:2d:0e:0c:ec:a4:45:82:a1:44:dd:4b:
         7d:56:eb:53:ca:b0:6e:c7:cc:9d:50:da:af:27:b0:41:d3:52:
         36:e9:96:7a:04:cb:d4:e0:49:b1:95:55:5f:0f:cc:b8:13:f1:
         f7:6a:33:96:8c:0a:84:b9:f9:c8:04:e7:3f:63:06:00:bc:c4:
         e6:9d:b3:01:28:d0:6c:87:6d:5f:03:05:c9:ee:e6:86:e4:e9:
         4f:e8:5b:d0:c8:d1:02:4d:50:3a:7f:a2:16:96:00:ce:1f:91:
         e4:89:b5:20:b6:1d:de:5d:97:5b:38:1d:f6:c0:01:90:27:96:
         10:3b:2b:c5:7e:d5:25:56:ca:ce:05:c5:94:3d:7a:f7:13:e7:
         c1:6e:78:bf:a7:bc:7b:05:28:45:f2:45:23:49:07:ec:42:9e:
         fd:3e:0f:5e:e9:08:29:24:05:46:08:08:15:dd:84:31:38:3a:
         76:9f:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:35 2025 by rpki-client