Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa
File:                     68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa (raw, json)
Hash identifier:          bNOKt85xVT/0JPvldSXAwE/2secB3YZPSlmhvDsPbH4=
Subject key identifier:   98:BF:7C:01:47:CC:A5:E1:9E:65:0A:30:52:05:D2:0B:AC:17:73:88
Certificate issuer:       /CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Certificate serial:       010D0C9F4328584B6BC753AE8B52C6095BCF5280
Authority key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     20101
IP address blocks:        199.192.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:53:ae:8b:52:c6:09:5b:cf:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabfd0c-f982-470b-a430-b95c3c76868d
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=b5886144-9eff-4467-aaad-0677a499785d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e8:c3:95:6c:79:6e:c6:23:db:52:62:97:d0:
                    d5:30:9e:f1:3b:69:01:82:76:76:4f:fe:b8:16:e1:
                    64:4c:47:21:ed:b2:88:74:e2:c1:1f:49:be:8f:57:
                    21:5e:22:8d:d7:e5:35:ae:5a:b7:b1:12:ac:a5:d7:
                    8c:58:70:b0:28:58:85:74:a5:88:f8:17:ff:b7:45:
                    87:fc:34:06:ac:ee:29:0a:2c:3f:1c:b3:a6:e6:52:
                    50:a2:0c:52:b1:9a:bf:c0:39:84:df:cf:02:99:3e:
                    15:5d:c8:cb:32:29:2b:a1:99:73:d5:ef:4e:f3:78:
                    c9:94:aa:e2:29:1e:d5:5b:c7:1d:9f:54:88:c2:bf:
                    af:fb:b9:07:40:0f:d4:aa:ef:43:33:9f:69:19:5e:
                    f0:c6:80:e4:8f:9c:5a:0b:ed:27:84:06:f0:5f:fd:
                    5d:57:f8:d1:aa:f7:3a:aa:75:a6:4b:ed:02:0a:c3:
                    9c:a6:ab:7c:75:99:2b:be:fd:9b:00:83:2c:f6:a9:
                    f6:fc:67:7d:8d:c2:0f:b9:13:5f:3c:41:aa:9f:b0:
                    4a:ab:b9:0d:14:65:04:67:ca:01:90:4d:d9:55:1f:
                    dd:ae:40:e7:54:58:11:2d:f9:36:94:9b:d9:e1:f2:
                    9c:b9:33:3a:24:ac:52:00:28:9e:c6:69:07:66:dd:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:7C:01:47:CC:A5:E1:9E:65:0A:30:52:05:D2:0B:AC:17:73:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl

            X509v3 Authority Key Identifier:
                keyid:70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f9:e8:f9:25:7d:52:c4:4d:4b:10:d5:0e:34:61:62:a6:2f:
         87:e5:2f:e1:f0:aa:41:4b:92:11:fd:32:86:3c:1f:00:e1:ea:
         25:64:46:01:53:cf:52:c7:48:f2:7e:d1:a7:7e:0b:7f:84:41:
         2d:da:56:d2:70:72:45:e0:68:c4:7e:1e:d7:25:ff:be:9d:22:
         5d:5e:76:64:79:83:d2:fd:11:b8:ab:f0:e4:22:31:c6:08:b8:
         92:09:aa:fd:60:00:1a:40:7b:42:79:d4:ea:a0:27:2d:c9:10:
         af:a3:3b:02:df:e4:78:f2:33:84:9f:41:9b:53:c7:4e:08:c9:
         1d:dc:ea:ae:02:cb:12:32:09:c2:8e:e5:02:de:eb:e3:fc:70:
         00:bd:10:29:ef:c7:39:ef:cd:07:bd:61:4f:11:7c:38:6e:6a:
         a7:30:b2:df:50:d3:42:6a:e0:a8:39:af:13:b0:f3:3d:3b:ac:
         07:a9:9b:63:c5:89:ad:57:30:01:a7:2d:bc:25:f2:e4:60:85:
         58:fa:35:3f:f6:d1:55:19:1f:f2:45:0a:5c:31:0e:da:81:8d:
         96:5f:eb:ff:5c:76:fb:97:c6:74:ff:e3:65:e7:04:e8:b6:88:
         8c:75:cc:3f:7b:10:67:e0:64:99:20:64:75:c8:b0:2e:e7:ce:
         54:b7:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:26 2025 by rpki-client