Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e52feb75-39e2-36ef-9778-4a95e5378730.roa
File:                     e52feb75-39e2-36ef-9778-4a95e5378730.roa (raw, json)
Hash identifier:          dFss/AkpCSTl8Gygv2dZ1eTOV7Er6Vm4/Jr6VztCT3Y=
Subject key identifier:   87:F3:F9:6D:12:B3:8A:AB:67:63:81:19:4E:B3:43:0B:3E:56:A9:A5
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B79BCB60DAC2FDCCBD53ABC80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e52feb75-39e2-36ef-9778-4a95e5378730.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     397422
IP address blocks:        199.193.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b6:0d:ac:2f:dc:cb:d5:3a:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=6af6b381-f0a6-495d-a3cc-7cb5ad947035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:47:88:6f:3c:39:ce:bf:58:d5:67:cb:31:
                    70:bf:73:06:79:a5:3c:b8:cb:9a:fa:30:b0:5d:66:
                    5b:68:b4:2c:f6:92:84:93:c5:30:e9:2c:1c:f5:42:
                    9a:56:31:0c:da:1f:a6:20:66:a9:a8:70:95:cc:2d:
                    72:23:4e:77:a1:6a:82:74:23:1c:f4:d3:28:67:8d:
                    48:fe:cf:7f:31:89:04:1a:2c:23:3f:f6:4a:bc:ee:
                    62:ab:05:69:48:8e:b1:d6:d6:83:7f:02:8c:92:24:
                    5c:43:9d:51:98:d2:5c:20:a4:08:41:ab:91:e7:03:
                    6f:5f:0d:21:dc:b9:75:c9:a6:52:6b:a3:b5:1c:7f:
                    cb:b6:3e:c5:0a:e9:0e:7f:58:4e:bd:13:03:83:a8:
                    22:8d:ce:2e:9d:f4:d7:62:a7:77:19:2e:a9:e7:99:
                    06:58:7e:59:8f:32:65:96:77:75:9e:87:75:f0:8f:
                    77:c2:e7:56:60:e6:99:67:98:6c:b4:cf:21:29:17:
                    e2:03:05:af:8d:db:fb:ba:f5:15:ae:42:54:fb:fa:
                    3d:a7:0a:ed:14:d2:36:e8:02:e9:8a:c5:8b:48:67:
                    86:c3:2d:b6:4d:3a:bf:d4:be:5c:2e:23:94:7e:27:
                    b9:47:63:cb:90:ae:39:56:6a:3a:1c:ee:bc:dd:38:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F3:F9:6D:12:B3:8A:AB:67:63:81:19:4E:B3:43:0B:3E:56:A9:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e52feb75-39e2-36ef-9778-4a95e5378730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:fa:8d:f6:58:f0:95:6e:d1:51:20:c1:9b:25:3a:21:36:
         5e:57:de:ee:07:e5:8e:80:ef:80:30:72:71:0e:62:91:1e:97:
         31:da:f9:85:2f:78:87:7f:f8:e5:f1:c7:07:01:63:70:45:41:
         09:f7:06:cf:c0:e9:94:7c:a2:da:6a:ac:0b:8b:1b:64:dd:2b:
         e1:22:3a:32:67:64:18:aa:76:52:a1:29:ff:b0:6b:24:43:06:
         4e:c8:46:e6:65:65:d0:e0:21:8b:c7:d4:7e:40:34:d2:11:e5:
         2d:7b:26:46:ea:ed:b0:f5:90:9d:a9:17:96:69:f1:82:68:ea:
         6c:f9:b0:61:f2:ae:78:04:5e:c3:ef:43:02:5d:03:0d:02:24:
         cb:50:fa:c4:65:e7:dc:07:a3:8c:41:6c:b8:bb:c3:41:20:f2:
         a8:c5:ea:dc:07:83:ac:fb:77:ab:92:53:35:6e:ba:25:30:55:
         fd:56:26:0b:a7:83:c3:b1:11:3f:10:d9:1c:30:2e:50:63:2b:
         84:d4:ca:d0:b4:a9:29:5d:f9:e9:78:6a:00:2e:5e:96:15:cc:
         05:5c:9d:1f:04:94:14:c4:f6:16:96:8f:1b:7a:18:60:c2:ce:
         ff:a2:d6:c7:99:14:34:85:2e:11:8b:5f:1b:5f:cd:0e:4a:7a:
         79:c2:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:48:26 2025 by rpki-client