Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa
File:                     3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa (raw, json)
Hash identifier:          5aEVO/iYRA/VkHRQ1dJojGZBqy3g980H7ft4ZXJZeYA=
Subject key identifier:   C6:91:DF:30:4F:E1:F6:8A:F5:90:91:00:4D:81:A4:D5:BD:CA:E2:DF
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B6202097E4E4CFD44B7AA1A00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     11404
IP address blocks:        206.192.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:09:7e:4e:4c:fd:44:b7:aa:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=43f31fcf-4d4b-4bd4-8e35-27a90f97994a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:b3:9f:1a:57:0e:92:4b:0c:c7:90:bb:5e:
                    d0:0b:03:ef:be:ec:c2:6d:ab:60:7d:50:e4:a7:d2:
                    02:dd:2a:7e:69:f7:e8:9f:f4:4e:19:6f:59:9d:e9:
                    3a:09:e8:dd:0b:76:4a:66:21:15:2f:a7:9c:dc:10:
                    e2:5a:b0:7f:b2:f7:32:7e:2a:29:0d:f9:8f:76:6f:
                    9b:3f:03:f4:f1:7e:fb:23:a7:66:d5:bf:5d:65:37:
                    1e:30:16:72:28:eb:12:81:98:07:da:20:d1:65:d0:
                    ea:54:45:cb:5c:ad:32:39:e8:67:f3:f9:04:60:c3:
                    9e:10:d7:e1:f9:f2:c4:f0:ae:57:2b:7d:cd:85:2a:
                    dc:46:9d:69:d8:5d:86:95:66:05:8d:20:d7:11:5a:
                    61:c9:4d:d6:09:a7:39:94:4a:38:1d:43:39:d6:b9:
                    b4:88:5f:21:96:49:1f:7c:45:73:e6:c6:83:1e:02:
                    05:0b:f8:3a:59:6a:5d:ba:9d:13:51:0f:28:85:6e:
                    54:e5:93:e7:fd:bc:f7:07:fc:d7:28:3c:bd:eb:81:
                    01:ce:a2:eb:d5:ac:5e:7d:c0:c8:52:ad:23:1d:73:
                    4c:6f:be:01:69:e0:94:50:48:f7:94:61:42:54:c0:
                    5a:06:be:e5:9b:19:b1:22:bf:75:9a:6b:68:04:da:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:91:DF:30:4F:E1:F6:8A:F5:90:91:00:4D:81:A4:D5:BD:CA:E2:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:58:4d:37:40:39:19:1a:d5:e5:63:5d:ac:8d:67:41:93:
         19:64:15:50:e5:55:4f:6e:84:23:e5:ca:ef:5e:d7:14:9b:d9:
         f5:f9:fe:bd:0f:f6:be:f3:7d:49:15:f5:96:bb:42:5f:ef:f8:
         68:f6:a4:3e:87:9c:28:84:47:8a:10:03:43:40:de:f3:48:fc:
         39:e8:a7:c0:f8:d2:ff:0f:f0:a3:92:5d:ad:7f:d5:5a:f2:a4:
         22:9c:f9:46:06:84:b6:79:c3:c0:57:55:b5:0d:48:f9:d1:0d:
         a2:c7:e9:32:08:b8:5a:65:90:56:71:b5:bd:f1:b1:f2:64:a8:
         67:fc:83:89:bc:dd:7f:ac:2a:89:3a:bc:26:b6:8c:6e:0a:b1:
         cf:17:30:b8:44:98:86:6a:e7:5b:82:63:16:06:09:f6:25:15:
         ec:c0:28:13:c9:c8:ae:16:3b:d8:82:2b:13:52:c8:47:93:17:
         99:12:91:df:ef:78:e3:3c:bc:c7:c7:c3:d4:f3:e9:09:fb:75:
         e0:2d:0f:ff:9c:66:86:76:83:1c:18:56:f6:a2:9d:77:52:61:
         32:f4:42:bf:1d:b2:2e:42:90:0e:ed:9a:95:63:8b:67:a9:3d:
         ec:0f:47:2a:11:e9:74:fe:57:43:74:e3:d3:87:e0:fc:31:3b:
         5c:bc:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:34 2025 by rpki-client