Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d5071eec-bbb2-3ce3-8672-6a26c2af9eef.roa
File:                     d5071eec-bbb2-3ce3-8672-6a26c2af9eef.roa (raw, json)
Hash identifier:          pGcV9hhgTV8Lbsmp+NXQWrXCdY4XC+y7dYkeCn3is00=
Subject key identifier:   DD:34:13:DA:BA:CC:03:95:12:AA:9A:BA:5D:3B:C9:0D:C3:90:0C:B8
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B715CAE63AC47C09DE1F6F980
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d5071eec-bbb2-3ce3-8672-6a26c2af9eef.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     13692
IP address blocks:        216.110.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:ae:63:ac:47:c0:9d:e1:f6:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=65639008-057e-41c1-9d58-16667591d2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:94:90:13:5a:4d:1c:d1:ee:85:18:68:da:
                    03:68:bd:09:ff:39:0c:69:03:cf:2c:87:e9:4e:b4:
                    77:ba:63:d6:7e:83:98:b1:11:5c:d8:02:98:c1:06:
                    98:4e:0a:b0:f5:74:92:11:85:ef:61:35:f1:c1:ea:
                    fd:dd:95:be:32:05:10:e4:71:d9:de:29:bf:07:d9:
                    b9:5a:eb:dc:8a:62:69:3a:72:5c:12:7a:27:44:85:
                    76:b3:6a:94:6f:e9:2c:5c:f6:c5:3f:6f:e3:ad:73:
                    8d:32:bf:23:91:c8:fe:70:27:b1:09:69:0a:fc:a0:
                    7b:87:96:01:39:3d:51:87:20:41:db:13:7a:ff:1e:
                    14:23:8e:72:56:7f:48:da:6d:54:f4:d0:02:9d:45:
                    54:ad:ca:3e:57:b3:c0:da:d4:06:30:1c:c2:02:80:
                    a2:91:f8:a4:ff:49:19:b4:7e:0f:56:95:fc:8c:83:
                    be:c1:95:51:ee:8d:ed:aa:fa:17:d5:73:dd:13:db:
                    38:bb:89:62:df:cc:ac:05:69:01:61:cf:8d:56:4f:
                    f0:28:af:ec:1a:bd:00:ab:eb:89:fe:d9:e1:88:af:
                    60:b3:54:a0:3a:c4:8b:bb:de:97:32:35:5b:3c:0a:
                    44:a9:b2:6e:36:5f:05:1d:7f:d7:92:19:f2:1d:4b:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:34:13:DA:BA:CC:03:95:12:AA:9A:BA:5D:3B:C9:0D:C3:90:0C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d5071eec-bbb2-3ce3-8672-6a26c2af9eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:62:7c:c1:72:c4:53:8d:6a:eb:6a:e6:23:78:95:c0:7c:bf:
         4a:08:40:42:3d:a5:cb:b0:5d:85:b4:88:7e:02:b6:5a:66:3c:
         9f:09:80:57:60:68:b5:f6:70:72:6e:ba:03:97:f9:b4:00:04:
         d0:33:7f:8f:e0:34:da:23:ba:72:39:bd:4c:80:48:b3:75:a8:
         22:9b:20:f4:e3:bf:9d:d9:c5:7f:80:bc:51:66:44:cb:07:8b:
         3e:92:c7:14:fb:fc:10:fb:4e:9c:5e:2f:37:85:5d:f0:3a:66:
         ce:bb:02:dc:c0:b4:ea:e1:59:0c:39:e3:f4:f9:3b:5f:aa:6c:
         6c:7c:4e:87:66:b0:5e:24:96:fd:dc:53:e1:dd:3f:5a:56:93:
         0e:87:31:29:b2:94:e9:59:38:4b:5c:57:c3:9b:ef:1b:d3:7b:
         02:77:e2:fd:e3:50:83:2e:cb:ba:de:ae:84:9b:04:52:c6:bf:
         8a:de:bd:4b:f4:f8:e2:bf:4c:e1:e7:58:04:39:7d:60:de:84:
         85:80:e9:89:f6:e4:d6:f3:f0:01:e2:36:3d:82:46:2c:e7:d3:
         78:83:5d:5d:78:e6:4d:d4:4c:45:ef:36:57:32:e4:d3:df:a1:
         40:d8:40:b0:b5:34:f6:ca:6e:3f:86:44:b6:55:56:12:a7:7f:
         9a:06:c1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:01:00 2025 by rpki-client