Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa
File:                     28ad8c15-6504-3448-80f6-48cbd21dac70.roa (raw, json)
Hash identifier:          xpv7JQ7L5GmOKawk1pAaevPm+oE2MLD897mR5CkDL5A=
Subject key identifier:   0C:24:82:D7:87:ED:A2:1F:92:0C:64:CC:0A:65:DE:F0:2C:30:4E:E1
Certificate issuer:       /CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
Certificate serial:       010D0C9F4328584B679742C765DA27CF7ED4E984
Authority key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     31782
IP address blocks:        192.219.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:42:c7:65:da:27:cf:7e:d4:e9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=46d77cc5-a60d-4c16-b028-5551b1a5b46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:b2:2a:47:60:9c:cb:9a:65:3a:64:4f:62:
                    61:68:58:52:88:b2:78:1c:70:f0:b8:b7:85:dd:6e:
                    12:2f:ea:d6:d7:0b:dc:88:a2:de:ea:00:f1:1f:b2:
                    4c:2c:c0:27:c8:cb:13:31:84:91:14:07:e3:1c:fa:
                    14:08:b8:b2:8e:f9:05:3c:5d:8d:54:35:cd:21:71:
                    fb:b8:40:9e:16:74:6d:58:21:a8:2c:84:1f:c8:5e:
                    b4:1f:f1:47:47:77:5a:26:e4:f1:fc:e1:8b:88:ae:
                    7b:8a:0e:d6:8e:e6:84:59:e7:09:d6:b3:ff:13:18:
                    f0:7c:f2:75:f9:80:7e:96:17:7c:d2:ea:4f:1e:c4:
                    44:fa:6b:77:d0:17:96:7a:c7:53:c2:73:8d:93:0e:
                    99:6b:d9:96:8b:22:f5:b4:ad:36:cd:9e:53:32:03:
                    77:25:58:e3:01:a9:cf:00:36:8b:4a:bb:ac:b9:b1:
                    36:cf:ed:36:f7:fa:f9:27:26:e2:a5:d1:fc:28:08:
                    24:55:f0:01:a1:04:3a:04:49:2e:45:bd:dc:6b:a5:
                    c3:eb:c5:c4:fa:f3:b9:5d:78:ca:75:d0:e9:67:bb:
                    bf:c8:f7:0d:17:b7:ae:60:4e:77:73:4d:cc:06:0b:
                    26:ef:01:ab:a0:5f:ec:17:ab:e7:fc:33:25:7d:bc:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:24:82:D7:87:ED:A2:1F:92:0C:64:CC:0A:65:DE:F0:2C:30:4E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl

            X509v3 Authority Key Identifier:
                keyid:B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:05:75:a0:7c:5e:e0:f0:8c:54:98:d8:f9:7d:ef:4c:24:30:
         b0:69:8a:e8:80:7c:0e:4c:d8:eb:f0:56:25:57:e8:f9:e6:83:
         56:ba:37:cf:1b:c2:61:22:2b:10:10:0c:6a:20:06:b1:09:23:
         3e:f2:02:5f:4f:c1:14:a3:93:1c:98:1e:5e:a5:53:56:c4:60:
         aa:4f:0b:a5:4a:55:6a:58:a3:bf:db:f3:73:5e:a2:fa:a1:59:
         01:a0:7a:3b:e9:1a:a7:ec:56:07:87:26:05:f6:50:46:2b:dc:
         ae:35:99:e7:f2:95:8f:fc:ec:0c:63:a5:fa:89:f9:ab:68:66:
         9f:af:b6:6b:0a:23:b5:4a:18:8e:23:3e:46:26:55:e3:c6:d2:
         3d:fb:80:80:ba:84:f3:27:7d:7a:6a:e1:03:06:2d:cf:31:12:
         4f:a2:49:ab:8c:f6:87:4b:35:3a:ea:c2:38:2d:4e:12:f0:86:
         cd:d1:c4:b4:36:92:44:91:b1:4d:cd:b4:cf:f9:84:bc:a8:f3:
         71:2d:5d:e6:ac:71:09:5d:98:f9:1f:a0:dc:b0:a9:b0:cf:29:
         31:84:5e:76:b9:a9:22:34:31:26:81:42:91:dd:ea:02:96:f6:
         78:37:42:9a:cf:1d:c5:16:e0:1e:97:79:8c:fa:07:cf:0a:6c:
         c7:1e:fe:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:14:42 2025 by rpki-client