Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
File:                     9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (raw, json)
Hash identifier:          BAc2QcgyHx2PycSwauTEkv20bMsGzHRXfL5DAtOnnuc=
Subject key identifier:   1A:32:7F:1C:6F:7F:1D:47:65:65:20:9D:91:8A:EF:9D:EA:C4:93:0D
Certificate issuer:       /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial:       010D0C9F4328584B2FC19435ACEC2F4CDF82D700
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     2902
IP address blocks:        198.59.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:94:35:ac:ec:2f:4c:df:82:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=bc901fd4-3378-4208-9e1c-0f98ff3e990a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:56:b0:50:c6:75:c5:6d:06:8d:49:76:3c:a3:
                    ff:dc:2e:85:23:cd:3a:ec:77:04:d4:eb:47:6e:d3:
                    14:21:22:99:4b:a2:7b:ab:ef:41:9e:ec:91:b4:c6:
                    2b:7a:e0:d4:8c:68:77:00:b8:7e:83:50:fc:d4:5f:
                    db:64:43:8b:d6:3b:8e:33:55:e3:36:66:0d:68:ed:
                    b3:f6:cb:42:10:e6:b4:0b:35:3a:e5:f4:99:36:cc:
                    2f:64:2e:35:2d:50:ee:b0:5d:ff:2c:3f:f4:f6:a9:
                    43:02:f0:02:ef:bd:09:1f:21:84:3b:70:a0:d9:fd:
                    22:e9:28:9f:64:e4:f5:6c:23:60:a8:03:af:46:47:
                    36:f8:4f:b1:f5:bd:45:e8:b9:a8:a2:98:d0:82:82:
                    3e:31:7b:c5:3b:38:5f:ca:f6:36:85:2c:b6:5d:a6:
                    5e:3c:e9:dd:5e:8e:ac:1b:33:c6:e9:8b:2c:ef:cf:
                    ae:ad:09:c0:be:86:bd:68:9a:7f:80:dc:29:d1:dc:
                    14:4b:2c:45:dc:b4:74:3c:f4:aa:0e:1f:fa:f5:e0:
                    a4:0c:a7:ee:a9:1d:8b:e4:df:a1:08:48:2e:07:ed:
                    b6:f8:90:2c:04:e0:12:f6:4b:23:11:3c:94:cd:b9:
                    ee:f2:ce:70:ba:02:d0:a4:a7:95:b8:10:fa:64:f1:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:7F:1C:6F:7F:1D:47:65:65:20:9D:91:8A:EF:9D:EA:C4:93:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl

            X509v3 Authority Key Identifier:
                keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:74:20:40:45:44:8f:b2:68:80:f3:cf:58:da:3f:b9:31:5d:
         b0:df:38:26:f7:f9:b0:ec:2c:cf:7a:96:4b:2a:c3:70:13:26:
         09:b5:a9:f8:5b:f6:7b:28:e5:f8:80:bd:4b:b2:6e:45:05:45:
         62:47:7c:fe:d3:81:fc:a6:c4:ce:13:00:62:53:4d:10:14:47:
         e6:66:32:7d:2e:2f:13:30:8f:87:2a:df:f3:d3:bb:6e:f6:6e:
         c8:8b:62:16:2e:69:df:b1:23:5c:11:a3:dc:51:fb:27:6b:c5:
         08:d2:ea:52:bc:e4:74:40:77:66:df:ad:cf:36:75:17:c0:11:
         75:74:2b:01:51:de:a3:15:7a:71:4d:c5:28:9b:d1:78:f4:a0:
         b1:eb:95:eb:64:c8:d1:7f:3b:0f:7c:7a:37:bd:e9:d8:07:b8:
         7c:b5:3e:70:de:70:d8:87:2d:89:45:2c:ad:c2:db:52:e2:df:
         63:56:ed:cc:c4:b5:27:9e:4e:88:08:3c:d0:d8:a5:92:a4:e1:
         04:30:90:c8:05:02:87:b1:fd:d2:8d:8b:5b:60:8c:d4:5a:fd:
         12:d2:15:57:51:a5:3f:c9:6b:1c:a9:20:d8:6a:0e:6e:83:b1:
         f1:61:d1:0e:1f:88:88:f1:61:1f:74:21:39:8f:44:8c:5d:5b:
         ec:23:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:30 2025 by rpki-client