Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/aa03b44c-f86e-318f-937f-6f3e15e870ca.roa
File:                     aa03b44c-f86e-318f-937f-6f3e15e870ca.roa (raw, json)
Hash identifier:          JQNQA1K4216pyNBEoT1ZL/PD1Rn/cTBCJtbIfkFU/5w=
Subject key identifier:   47:31:FC:A9:0C:8A:29:1A:14:27:CA:93:E5:2C:48:DB:D2:F1:76:6D
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B6632020C5C122529C2E69700
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/aa03b44c-f86e-318f-937f-6f3e15e870ca.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     25961
IP address blocks:        206.192.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:02:0c:5c:12:25:29:c2:e6:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=c38e424c-eff8-4a1e-836a-72ae59d2426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:69:99:18:a5:cb:ab:fd:ce:d6:0c:85:2e:6b:
                    fb:0a:84:2f:6a:ba:df:ff:4d:98:3a:ee:a8:44:cc:
                    7c:b2:73:42:63:f8:6a:a2:a5:c1:7e:eb:43:f5:ba:
                    94:d4:9e:0c:88:9d:c2:d5:59:85:0b:b3:b9:c5:2e:
                    19:b9:cc:7c:66:7f:06:da:e7:19:89:69:6d:61:aa:
                    56:2d:13:a4:44:6c:8a:1f:ac:0a:87:36:22:ff:6d:
                    a2:70:b2:32:7a:be:53:50:48:9d:28:f6:85:e0:90:
                    6f:1c:ae:53:7d:70:95:46:41:40:6d:d2:f9:d1:c0:
                    d6:7e:90:3d:28:b0:3d:d0:8f:6b:31:76:19:1f:58:
                    eb:2f:35:a6:a4:e4:ff:53:57:c4:e2:a8:8b:6d:3c:
                    a6:fc:0a:c4:f0:d3:e1:cf:5b:04:93:6f:22:25:31:
                    f7:19:c3:c2:14:d0:26:bf:69:48:18:f4:86:ba:4a:
                    ff:73:ad:7e:a7:ba:5b:84:72:8e:dc:7e:f1:8a:05:
                    1c:61:03:b6:5f:de:f7:ac:75:1a:ab:57:26:e7:95:
                    af:d7:07:82:26:87:5e:b0:31:7a:a9:87:67:bd:a9:
                    20:17:25:ec:d1:cf:7a:5c:8c:ea:be:75:94:e1:6a:
                    1c:5a:80:d3:b6:02:32:69:e9:96:d0:7c:c5:5c:e9:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:31:FC:A9:0C:8A:29:1A:14:27:CA:93:E5:2C:48:DB:D2:F1:76:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/aa03b44c-f86e-318f-937f-6f3e15e870ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:53:76:9f:fd:ed:d1:98:78:12:f3:43:da:a4:b3:80:a9:53:
         d8:b4:84:3c:a4:88:78:b9:04:1f:fb:ea:1b:61:bd:98:67:da:
         13:d7:42:a3:93:39:c3:a0:30:35:f3:06:82:df:ef:5e:31:73:
         11:ac:05:1c:8b:88:8a:9c:64:0f:79:37:8f:74:d3:26:9a:02:
         42:5d:c6:2f:74:c1:58:41:fe:03:d2:28:22:e8:7d:30:ab:c8:
         91:36:50:24:a5:2a:1c:b5:5c:26:3e:1b:73:fa:58:0a:b2:5d:
         14:f4:1c:44:7f:c4:d9:19:f0:90:86:b7:ab:35:7b:ca:3b:39:
         31:2e:99:97:69:9d:56:f3:d2:91:44:58:0a:97:f6:77:83:89:
         03:32:db:fe:97:a0:3c:e0:61:23:ca:d1:65:c4:cb:71:ed:71:
         43:e6:0a:33:28:4a:4c:79:c0:e0:3b:2a:ac:fc:98:05:bc:fd:
         79:88:4d:e7:62:75:92:83:b0:73:06:e1:09:bd:b0:c9:6d:7b:
         5d:7b:c5:be:d9:26:53:8f:06:5e:1b:a7:85:01:c6:85:4a:b6:
         c2:dc:71:f1:4a:8e:97:0e:7a:f6:19:9c:af:48:43:e8:dc:a0:
         3a:21:af:31:32:2c:57:4c:ea:5e:4a:f1:f7:5d:e0:02:2e:39:
         b9:2f:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:47:55 2025 by rpki-client