Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa
File:                     b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa (raw, json)
Hash identifier:          FOUPB/IPO3TQytwedKHpiNFLvX3aMBLBDwq6wfE54xI=
Subject key identifier:   37:38:6D:93:73:C6:EC:74:22:5D:BD:AA:A6:DD:12:BD:E2:2F:31:BD
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F4328584B583C8E1F37B067C65E7992C0
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     54885
IP address blocks:        192.207.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:8e:1f:37:b0:67:c6:5e:79:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=7d08f794-49b7-4277-8363-278860c1e969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:38:3a:da:ee:2d:9b:d3:ed:19:99:6d:39:
                    3e:d1:16:70:25:da:8d:b6:d2:c6:f3:b0:91:83:c3:
                    3d:f0:cc:47:d0:9a:07:3c:35:7d:29:ba:4d:d3:7e:
                    d2:f4:36:24:c9:37:f2:87:c7:59:fd:9e:8e:e3:3c:
                    aa:82:9c:51:54:b4:05:cf:c8:b0:3a:92:df:7d:b7:
                    4c:ac:b9:8f:92:44:f6:33:f3:dc:bd:af:81:4b:35:
                    85:7c:05:10:72:b7:59:47:1c:56:74:de:fe:4c:8f:
                    e3:c2:f1:d1:51:a7:14:fc:65:19:0c:90:a7:1f:7a:
                    ca:68:37:22:4c:6a:fd:24:6d:d6:cd:ff:68:a0:0f:
                    5e:54:b9:96:f5:1f:1d:4d:38:d4:b3:a7:fc:43:79:
                    ad:25:f2:cd:0d:81:10:73:e7:19:f7:dc:ab:18:bf:
                    1f:f2:fb:a7:da:c4:30:3e:8f:2a:52:cb:0a:e1:2d:
                    15:e5:cb:e7:67:4a:19:44:8b:eb:dc:55:f5:d6:4c:
                    85:f7:84:4c:0a:b3:4f:dc:76:26:d1:8d:77:6e:32:
                    28:1d:cf:dd:54:b6:f4:c6:fe:aa:36:3f:f0:f2:db:
                    70:b0:ec:75:01:0d:b0:1d:78:8c:58:9c:31:02:dc:
                    d0:4f:67:51:57:7e:b3:1d:5a:a3:87:0b:e7:95:ab:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:38:6D:93:73:C6:EC:74:22:5D:BD:AA:A6:DD:12:BD:E2:2F:31:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5c:6b:c2:c7:77:21:3e:2e:5b:fa:56:50:ef:4b:07:ba:7a:
         f8:26:75:fd:93:8d:63:aa:84:e9:0b:99:2b:47:9b:86:30:e6:
         25:d0:9a:2b:58:a3:9c:0b:0f:26:8e:e0:09:b8:d1:ff:0f:6f:
         14:67:ed:fd:da:64:5e:50:53:99:01:48:c0:8a:a2:21:8b:73:
         ad:c1:d2:73:27:4e:b0:26:8e:60:cf:00:bc:16:6b:fb:3e:d8:
         ca:08:a7:f1:89:60:a1:25:50:77:88:a2:0a:fa:0a:af:8b:af:
         52:10:f1:17:24:87:ea:0a:3c:4f:cc:f3:d5:ec:f0:57:ef:a5:
         0e:5c:bb:79:ea:ca:01:44:1d:a1:b3:a6:61:80:38:c6:5f:e1:
         c2:f1:31:ab:18:90:4f:60:89:66:ba:d0:a4:31:47:f0:11:94:
         c6:4b:5f:24:5b:73:b3:da:6f:ad:c4:66:a3:a5:c5:90:ba:ed:
         b9:23:a2:8f:8e:26:44:a7:26:43:cd:67:a4:91:ae:f3:39:ec:
         9c:11:08:4f:72:23:61:c5:a0:06:60:6a:12:ae:91:f5:33:d6:
         4b:92:5a:2b:e2:e5:bc:df:78:d1:fe:fb:9b:9e:36:db:e9:a7:
         f8:b1:d5:d0:82:01:46:28:b4:8e:36:5e:14:26:e2:09:74:4e:
         88:a2:b8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:40:53 2025 by rpki-client