Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa
File:                     79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa (raw, json)
Hash identifier:          MUeCK8HHMbRPkyHf1NS41vO73vXEweV8L1B6w1sSuvE=
Subject key identifier:   5C:85:CD:8D:13:F8:FC:82:BD:36:3E:A5:92:5D:A0:4A:BB:2A:E6:DA
Certificate issuer:       /CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
Certificate serial:       010D0C9F4328584B3DB7002BFCCD7E875DEA8900
Authority key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     14749
IP address blocks:        199.242.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:00:2b:fc:cd:7e:87:5d:ea:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=8670433f-5b0d-475a-92e6-11b262659b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:be:51:1f:6b:0a:d5:af:1a:c6:f4:7f:8f:
                    e8:a8:1d:44:71:9e:b2:b0:09:40:2c:0c:d3:7f:b1:
                    86:34:a0:46:ae:6c:45:64:d6:a2:3a:ef:2e:7b:57:
                    fa:61:51:96:92:15:24:7d:b1:5a:35:2d:62:5b:54:
                    a8:15:9b:dc:ba:29:18:92:e1:11:58:7d:61:26:18:
                    ac:44:94:c7:53:09:4b:df:fa:a7:de:40:ce:4e:d4:
                    00:ca:6e:bd:39:7b:27:e8:f6:d3:e3:a1:71:12:e7:
                    07:22:ef:64:4f:d9:de:12:88:53:72:d9:2c:73:3e:
                    9d:26:e6:1b:2c:3c:a4:33:d1:25:1b:d3:76:62:be:
                    28:d0:6d:b5:3f:4b:39:c2:7e:5d:cb:52:68:2c:1a:
                    e4:31:df:46:62:9c:82:2f:02:f0:cc:09:01:e7:3c:
                    bc:28:f5:5c:40:2a:ca:57:58:c3:5b:9d:e1:d2:4f:
                    fc:ba:12:4f:0e:07:e0:66:b5:d5:81:dc:84:c3:09:
                    71:0d:d9:db:13:ae:a2:f8:b3:f0:11:b9:ed:28:c2:
                    91:3b:12:ca:5f:98:fb:ce:bb:9f:ff:01:22:ea:e4:
                    43:0f:22:83:66:ca:75:69:bd:d3:55:47:23:8f:78:
                    8e:2e:75:6d:36:ca:2f:9c:9b:ac:0b:53:db:c8:5d:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:85:CD:8D:13:F8:FC:82:BD:36:3E:A5:92:5D:A0:4A:BB:2A:E6:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl

            X509v3 Authority Key Identifier:
                keyid:D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:6f:52:6f:a1:2d:47:0e:ca:42:df:16:7b:c8:67:fd:86:45:
         19:06:67:a2:87:a9:30:43:54:4f:9f:6d:c4:b1:0b:d8:53:d1:
         13:b8:c9:87:56:0a:e0:9c:14:7d:92:f7:48:10:9c:56:78:de:
         93:6c:a9:34:5a:eb:3c:f8:0a:e8:dc:32:f5:bb:08:57:91:2a:
         4c:b0:f2:20:06:36:68:7c:97:93:03:21:21:e0:05:2d:f3:ca:
         b4:ba:d0:13:c0:f0:37:55:54:50:3d:27:72:84:cc:fd:17:02:
         a4:5b:6b:8f:e4:a3:96:df:cd:53:f8:e8:23:92:ec:e9:c6:17:
         d7:18:1a:38:33:ff:ab:c5:12:70:2d:46:ac:bf:38:85:23:16:
         67:d7:d9:8a:7c:7f:52:ba:6c:7c:2c:c3:5d:06:49:ba:f1:8a:
         5f:97:5e:94:76:ec:cc:05:44:ee:97:f8:0b:8d:85:e0:51:5e:
         5d:9b:d5:88:da:ab:fe:35:a5:75:99:56:cd:f2:c9:5d:60:70:
         90:f4:f5:cc:02:76:a9:57:21:2d:bb:51:28:7f:ac:32:38:a8:
         72:cc:b5:eb:80:41:ce:d1:a0:8d:cb:23:56:79:12:37:bf:3b:
         9e:de:18:e1:77:2e:aa:e2:a3:8c:b9:e0:5e:5a:f6:20:81:d8:
         04:a9:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:35:17 2025 by rpki-client