Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa
File:                     5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa (raw, json)
Hash identifier:          2NcvM4PzIJvE9XFB+J2THWl62vwbGgG3SF59+Iw2yC0=
Subject key identifier:   7C:12:E1:EB:00:60:B5:63:51:AE:D6:C8:4A:CB:D8:B6:E7:A8:9D:C6
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584B5571E08B7B46885514131F80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     198949
IP address blocks:        192.135.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e0:8b:7b:46:88:55:14:13:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=d17a69fe-4960-48b3-bebd-3a04a6522acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:8d:ed:14:7f:f1:e0:0b:51:84:a8:d9:2b:
                    8b:34:bf:b6:d4:6b:57:c6:ce:45:38:41:74:40:32:
                    fb:67:77:65:be:00:34:da:c5:ad:4d:eb:8c:6b:d1:
                    e0:50:c8:ce:e5:fc:41:62:dc:95:38:88:8b:f5:31:
                    8d:99:09:5f:33:69:60:d5:9d:18:e6:a8:7f:04:fd:
                    1a:11:cb:af:e1:6d:fa:26:43:56:5d:3e:00:aa:c8:
                    1b:c3:b8:d4:3b:03:1a:f2:49:55:d2:fa:b1:7e:5f:
                    80:4d:32:8e:47:c5:bf:f0:0d:39:f8:0f:ec:d2:b9:
                    f5:06:0b:51:5f:ce:f2:fd:1e:c6:b2:07:61:2a:74:
                    4f:4a:5f:c8:81:f7:76:0a:3a:b3:15:19:57:dc:35:
                    67:48:cc:f5:a2:dc:80:67:da:c8:9e:29:bb:55:4d:
                    3f:bf:05:2e:83:92:ec:b8:06:99:4f:d4:40:f5:92:
                    82:eb:5e:5a:0b:61:2d:5f:49:bc:39:1b:2a:b4:c8:
                    b6:d4:78:2f:6b:38:a9:28:76:37:0a:e2:c2:1b:56:
                    0b:2c:e5:63:58:13:fc:a9:65:26:0d:0e:21:2f:53:
                    d0:e0:ae:35:41:17:32:0e:55:c7:da:86:15:27:54:
                    b7:4e:3f:3a:02:b7:51:3b:8c:d6:b6:1f:e2:4a:db:
                    b2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:12:E1:EB:00:60:B5:63:51:AE:D6:C8:4A:CB:D8:B6:E7:A8:9D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:87:3b:ea:40:4f:02:9b:9d:5d:1f:a3:0a:1c:cf:10:60:
         b4:24:45:e4:c2:d4:91:31:38:1c:c1:21:90:f7:09:c0:33:c9:
         14:df:71:19:ab:95:9e:5a:de:29:38:c3:c3:02:4d:21:0e:ac:
         98:fd:62:3e:53:eb:84:8d:ba:4d:ed:9c:d2:d8:e9:57:ac:8b:
         7a:fd:d6:4a:b2:df:1f:35:8b:c1:d8:de:04:6f:da:3b:d1:1b:
         4e:76:b4:cd:f8:9a:55:71:57:a2:9e:77:2e:8c:ac:77:9b:17:
         b7:6d:12:42:11:ff:26:38:a3:4f:e2:19:53:2c:17:56:2e:0f:
         48:39:79:57:8f:91:73:09:bb:39:4a:67:60:6d:4e:10:29:68:
         12:e7:98:b8:28:44:8a:83:c3:b7:e4:fa:ce:5c:cb:32:93:f3:
         76:d0:3b:26:38:b1:7c:78:18:27:25:cc:a1:23:56:b9:20:0e:
         52:64:01:f8:6a:d7:1f:15:12:f0:c4:71:c6:ec:46:c0:d2:a5:
         31:94:07:2e:78:ca:dc:d7:49:21:6e:ac:6b:72:81:60:14:82:
         3a:4d:ee:8f:d0:24:e2:d2:c5:f0:f3:a3:0b:61:23:e7:8e:03:
         8e:97:5e:18:0f:e2:7c:1c:4f:4f:0e:f5:7f:dc:c0:e5:d5:06:
         21:35:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:46 2025 by rpki-client