Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa
File:                     1a7bfc39-b64d-3b65-80be-e3794b147834.roa (raw, json)
Hash identifier:          F0twmqhkcV0MLMNlxS1XRkuGOKeU3hVOx/ZghVwa0n8=
Subject key identifier:   27:D0:80:0D:E4:ED:EA:FC:19:E0:2C:A4:3D:C8:40:B7:14:4D:8A:EA
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B80B76CC6D315E01468170380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     396356
IP address blocks:        192.253.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:6c:c6:d3:15:e0:14:68:17:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=e61bad03-5b2a-4ad8-bb1c-bc87b246413c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:f3:f6:cf:1d:18:d1:63:15:01:67:51:c7:
                    00:be:ef:38:91:ae:15:ad:85:8c:85:81:8a:33:15:
                    9f:ee:99:eb:e6:97:5e:cd:ae:ca:3d:73:52:2f:35:
                    90:e7:03:c6:18:91:75:e4:36:48:dc:a8:69:63:02:
                    30:a4:3f:32:47:38:1d:cb:8e:5a:e2:9f:31:15:81:
                    4c:68:e2:99:f7:ba:07:fb:ce:e8:bb:1f:a4:fb:77:
                    22:d5:ee:7a:f6:0d:de:1b:40:1e:98:8f:f7:f3:f3:
                    42:12:e2:68:9f:16:36:e9:03:4d:d4:c5:c2:67:24:
                    11:8a:9f:32:e9:ad:cb:ed:77:08:2b:6e:72:ea:7a:
                    2a:6d:68:86:cf:8a:e9:9f:3d:97:8e:d0:13:ef:a1:
                    4e:58:6e:32:4b:32:05:16:ba:2d:29:fb:46:b1:7b:
                    39:6c:dd:cc:e0:88:1c:48:d1:ab:61:7f:35:61:a6:
                    46:24:d4:64:15:2e:dd:f8:3e:73:52:a4:01:55:aa:
                    30:04:82:fa:ee:ce:b1:5e:59:07:27:f6:b0:ec:c2:
                    9f:05:07:f0:4e:b1:de:c1:eb:90:57:a4:52:5f:6c:
                    eb:f9:ed:30:ca:a5:90:cb:c1:9c:ee:e5:ee:5b:8d:
                    45:cb:18:4a:11:33:ee:fd:be:4f:8a:71:ce:85:b4:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D0:80:0D:E4:ED:EA:FC:19:E0:2C:A4:3D:C8:40:B7:14:4D:8A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.253.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:82:a9:f5:f7:b1:e8:7a:f2:41:74:bf:87:de:69:e7:6b:8f:
         25:f6:22:b4:3d:3a:62:4d:93:09:61:b0:6a:90:45:70:d6:7b:
         5a:74:79:d8:fe:be:6a:16:53:dc:e6:c7:88:79:47:33:f0:87:
         f8:49:db:d8:7c:14:74:2a:9e:93:5f:02:96:e1:b5:4b:67:ef:
         5b:5b:34:4a:1e:35:d7:0a:7f:07:ae:53:18:37:46:32:44:15:
         9e:1b:36:4d:63:df:82:c8:d1:95:e4:77:e0:25:3d:07:b0:a8:
         ce:3f:b6:a0:12:8a:25:c5:d4:31:3c:20:6f:a5:bc:3c:49:e6:
         c0:59:57:34:1d:04:d2:e8:27:46:55:1b:5f:00:b7:ae:6f:62:
         41:87:d6:18:d7:d3:f7:de:c0:00:34:5c:5f:a8:3f:82:e2:d9:
         41:7f:90:5e:d2:ae:b6:0b:8f:69:4f:92:f3:1f:c0:ae:3d:27:
         5e:3b:75:1f:93:d3:ca:a2:fd:ce:64:f5:3e:68:4a:78:d2:8e:
         27:45:ec:c1:65:58:4a:e2:6d:e8:49:70:c6:19:33:61:b0:6d:
         99:6a:d5:9a:88:6c:19:55:eb:dc:07:79:95:cf:00:b1:23:8b:
         a1:fa:9c:78:79:ca:5b:8c:c5:55:e5:a2:05:69:a6:a4:16:bc:
         d2:4a:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:49 2025 by rpki-client