Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/31268ce1-8bc0-391b-9dba-751af6961d96.roa
File:                     31268ce1-8bc0-391b-9dba-751af6961d96.roa (raw, json)
Hash identifier:          OcOBd7UIRaSY9VzS9GUJIwDqd4/3kUqH3y3PUMIAflc=
Subject key identifier:   88:9A:27:BA:10:28:7D:F7:32:71:09:CE:32:3F:B5:F4:BB:C5:BE:C2
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B89177473859F849EA7756750
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/31268ce1-8bc0-391b-9dba-751af6961d96.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     25899
IP address blocks:        206.188.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:74:73:85:9f:84:9e:a7:75:67:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=17e5f024-4a7b-4a1f-ac9d-401145a1eee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:70:01:ab:3e:b7:77:9e:a4:6c:c4:91:ec:0e:
                    4a:c3:08:f0:7f:3a:0c:5a:ac:8b:1b:5f:b8:15:9e:
                    d4:26:2b:48:de:70:da:b9:7e:12:5e:e4:b4:c1:3d:
                    a3:d9:1e:c3:7f:d7:d3:c5:52:93:60:6c:53:42:26:
                    69:b7:11:e8:c0:ab:7c:4c:df:dc:ce:87:4a:00:e8:
                    96:3a:03:b4:f9:fb:30:92:ed:b4:fd:f4:1f:31:6e:
                    02:e6:5d:93:1d:c3:f2:1a:8b:3d:fb:a8:4f:06:e9:
                    16:e9:40:7f:0a:2e:76:c4:a0:7c:0a:e7:7b:e1:a8:
                    93:59:7b:e1:e8:81:08:ba:67:b9:32:a4:9d:dd:1c:
                    97:fc:8a:31:a7:19:d9:0d:35:82:56:6f:29:d4:8e:
                    79:a0:fb:b9:62:42:da:a4:3e:85:2d:67:a0:ad:0e:
                    5e:0d:5d:50:b7:9b:26:48:4a:a9:4c:d9:69:c7:2c:
                    dd:10:1c:5d:d1:3a:fd:19:8d:d2:91:1a:5e:b7:57:
                    f0:e0:d5:3a:0b:55:88:fb:a6:de:2f:26:d3:17:00:
                    7b:5d:61:e3:78:97:f0:09:17:53:47:ba:1b:57:65:
                    47:3d:6d:fb:e1:61:e1:b7:c5:d7:1e:9c:5a:07:17:
                    94:a3:56:d3:40:6d:3b:59:3f:9c:50:6a:66:ff:93:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9A:27:BA:10:28:7D:F7:32:71:09:CE:32:3F:B5:F4:BB:C5:BE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/31268ce1-8bc0-391b-9dba-751af6961d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:99:6e:65:a6:78:a1:36:f7:31:92:11:05:c1:e5:aa:ef:79:
         78:4a:da:9d:9f:23:41:75:b7:23:6c:33:b5:06:be:f0:54:5e:
         ef:98:45:ee:6b:c4:82:a3:23:68:46:a4:f6:78:f6:ec:b0:f4:
         d3:6b:ad:85:87:16:12:00:b7:8d:a3:7d:4c:33:69:15:12:64:
         ab:b3:e7:28:6b:9c:ac:6c:df:e5:24:1d:33:45:e2:1d:0d:99:
         a3:62:99:c9:13:0c:d7:ce:65:2c:db:25:c5:e2:5e:d0:0f:a3:
         bf:e9:58:be:c8:a5:b6:f7:d2:28:e4:42:50:92:26:3f:a4:ea:
         37:e9:53:8c:2a:27:83:2f:15:ec:d3:d2:2a:49:f9:60:67:96:
         92:01:ed:ec:fa:3a:e5:cc:52:0f:77:1f:5a:6d:c7:b7:84:9c:
         7a:b2:65:fe:30:a8:60:81:a7:56:fa:ba:8c:9e:c1:52:94:f3:
         1d:a7:d6:eb:81:6c:ed:c5:43:11:06:75:22:3c:91:4f:c4:10:
         8a:17:69:32:1e:c7:ba:39:85:80:83:ff:c8:83:f0:9c:a9:b7:
         96:98:b3:cf:9d:ad:96:27:55:87:58:d3:57:16:e2:3e:dd:8d:
         1d:dc:b2:85:34:a8:4e:ac:62:75:4b:52:74:44:fe:c8:70:3f:
         e1:d7:15:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:35:05 2025 by rpki-client