Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/75f52e48-5645-35ac-bb62-8855179515e7.roa
File:                     75f52e48-5645-35ac-bb62-8855179515e7.roa (raw, json)
Hash identifier:          pdDUi0zts3T4MGWWpZkDIjBl2WBzFXeNehaGIEt/twI=
Subject key identifier:   46:40:B6:03:C0:56:F8:A1:DD:40:1D:C8:05:C2:31:EB:B7:C2:10:68
Certificate issuer:       /CN=0d9ad6c8-364a-4d16-a834-ed897977f4b7
Certificate serial:       010D0C9F4328584B68FCAC737FF6CA72FCBB3D80
Authority key identifier: C5:C8:B1:1B:D8:BE:CE:D7:D2:53:7B:24:F6:EB:B5:14:6A:9D:76:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/75f52e48-5645-35ac-bb62-8855179515e7.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     8122
IP address blocks:        192.88.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/0d9ad6c8-364a-4d16-a834-ed897977f4b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/0d9ad6c8-364a-4d16-a834-ed897977f4b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:ac:73:7f:f6:ca:72:fc:bb:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9ad6c8-364a-4d16-a834-ed897977f4b7
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=31aeb313-0b27-4128-9103-1d7271b5c52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:28:a9:cb:88:60:d3:eb:59:50:10:2a:4b:
                    f3:05:2e:c8:7d:55:99:43:a9:b1:4d:3d:9c:11:24:
                    a2:3f:e2:ae:a1:5f:54:a4:e5:6f:7b:84:bf:72:1d:
                    f0:fd:0e:6b:5f:15:c9:27:c2:1d:fc:77:0f:71:64:
                    f6:df:26:ac:41:a8:fb:f0:cc:81:e2:e8:64:2a:18:
                    21:e8:12:f2:f4:9a:c6:53:da:c9:85:7e:86:a1:02:
                    19:f6:9d:a9:83:96:55:fd:33:c7:75:65:11:bf:6b:
                    9d:13:93:57:48:91:5b:31:af:e2:c2:73:e9:2b:5f:
                    cb:b1:c5:83:83:e4:cf:95:f8:b4:6b:ba:96:e3:45:
                    f7:b3:4b:59:09:4e:b1:b6:e3:67:28:a6:bc:62:e3:
                    49:f2:32:b5:fe:c9:28:e4:09:42:a4:2b:6a:98:d3:
                    7f:3b:32:99:c2:9c:08:73:7c:43:4d:74:22:af:0c:
                    b0:82:64:ec:ae:c6:cb:e8:20:ad:8f:e7:b7:87:3a:
                    32:a3:77:9a:42:4f:12:1f:ba:34:bf:03:d4:bc:d8:
                    44:ff:ec:b5:0a:cd:f6:95:0e:fe:0e:61:96:3f:34:
                    d1:3f:2d:b9:6f:ff:2e:e1:a9:08:b6:ff:d0:08:82:
                    59:90:b0:0e:b7:0a:97:85:6a:67:16:a0:5e:95:5f:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:B6:03:C0:56:F8:A1:DD:40:1D:C8:05:C2:31:EB:B7:C2:10:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/75f52e48-5645-35ac-bb62-8855179515e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7/0d9ad6c8-364a-4d16-a834-ed897977f4b7.crl

            X509v3 Authority Key Identifier:
                keyid:C5:C8:B1:1B:D8:BE:CE:D7:D2:53:7B:24:F6:EB:B5:14:6A:9D:76:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d9ad6c8-364a-4d16-a834-ed897977f4b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:96:ba:d8:d7:b6:e2:45:e0:ec:61:c8:0e:96:1b:c0:fa:31:
         5d:de:63:84:70:66:c9:bd:78:63:8d:0c:50:17:52:67:26:52:
         a9:38:1f:a7:e9:b8:9d:cb:57:73:e9:70:63:03:c9:87:c1:18:
         86:c7:4e:3e:18:5b:7c:1e:71:00:d5:59:63:5e:fc:9d:8f:0e:
         b4:65:a2:9c:5d:12:42:b7:4c:d6:d7:5b:f0:2c:09:ed:b3:54:
         65:3a:37:85:3c:71:c1:b9:3f:ec:71:38:ee:14:0e:e0:46:ae:
         12:cb:a2:7d:95:05:92:b0:a3:7e:e6:09:99:bb:87:67:d8:b9:
         ed:13:66:8c:04:38:3b:2f:39:4f:13:cf:bf:b3:34:ba:5a:26:
         15:ae:37:33:20:63:8d:a8:a8:a7:13:66:76:28:11:aa:eb:10:
         3f:4d:78:aa:81:1e:51:81:9a:61:07:ed:ab:c2:72:18:1a:7d:
         57:fc:c2:aa:54:d1:58:a7:5f:a9:ca:8b:06:36:81:31:1b:3c:
         bd:a0:b5:9b:85:2a:48:98:ee:01:12:8b:ba:f7:ff:00:0b:d1:
         49:01:0d:49:90:1e:8b:82:28:20:38:c8:1c:cb:b5:f4:c4:52:
         09:61:1f:fe:69:27:a9:77:60:e9:1e:8f:2b:34:15:b2:71:16:
         07:32:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:05:29 2025 by rpki-client