Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/d1fb6743-6930-3219-a256-da13d772b588.roa
File:                     d1fb6743-6930-3219-a256-da13d772b588.roa (raw, json)
Hash identifier:          6JlTi1I9ACxcjwpjBVTIvbcrKVebN2HEcNMCdb5TS3U=
Subject key identifier:   88:E8:78:C2:BC:0E:6B:5B:F7:FE:12:3A:88:5F:86:68:C4:5E:6C:20
Certificate issuer:       /CN=22a2b00e-11a0-4c50-abf7-a74adfea69e4
Certificate serial:       010D0C9F4328584B4D11D925345A0EA43D5E3B20
Authority key identifier: 8E:DC:20:EF:33:21:29:1E:50:62:9A:DC:C8:EC:B1:59:A6:6E:CD:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/d1fb6743-6930-3219-a256-da13d772b588.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     32156
IP address blocks:        192.75.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d9:25:34:5a:0e:a4:3d:5e:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a2b00e-11a0-4c50-abf7-a74adfea69e4
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=c60209df-a6e5-4c5c-92fb-ca0bd388320b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:4c:fc:cd:4f:28:6c:2b:3c:5c:3f:39:7d:
                    84:23:72:94:72:d7:55:b7:7b:56:de:3e:cb:62:dd:
                    ac:02:5a:60:1e:6d:3c:f7:3a:ed:e0:aa:12:fd:2d:
                    d0:6c:16:ea:9b:fd:bc:9b:78:02:93:0a:c0:6e:4b:
                    52:38:24:0d:7d:05:2a:a2:09:db:15:b3:94:c8:50:
                    5a:da:78:3f:3a:7a:4f:7e:67:0a:be:a1:48:ae:c2:
                    60:b7:01:c0:49:cd:6a:2d:7f:b4:3d:4b:60:9b:4f:
                    16:e2:a7:e1:11:38:5c:95:a0:25:1e:7c:ca:cc:a6:
                    61:6b:8d:73:8d:68:6f:c2:26:c1:6e:0f:08:e0:44:
                    e7:c6:84:f1:59:f0:b0:9b:82:2a:0a:ce:d0:44:6e:
                    7c:fe:33:20:0b:19:bb:4d:7a:69:b2:1f:1d:9c:98:
                    cf:0a:32:67:d5:d0:07:39:ee:73:b8:e7:a9:59:ee:
                    6f:77:eb:08:75:65:52:64:00:92:b5:a1:45:87:7c:
                    5d:58:3b:91:cb:67:fc:a8:21:ae:9f:5d:5b:38:9c:
                    0e:b4:d6:d1:99:e4:4c:5a:05:bf:22:99:f9:51:22:
                    16:f6:d5:dc:d7:81:fa:8f:b7:b4:14:80:49:f5:4d:
                    5b:b1:1a:1d:0d:7c:5f:b8:2d:c5:84:c8:f6:a4:5e:
                    c6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E8:78:C2:BC:0E:6B:5B:F7:FE:12:3A:88:5F:86:68:C4:5E:6C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/d1fb6743-6930-3219-a256-da13d772b588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.crl

            X509v3 Authority Key Identifier:
                keyid:8E:DC:20:EF:33:21:29:1E:50:62:9A:DC:C8:EC:B1:59:A6:6E:CD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f5:c0:65:80:12:9e:ed:34:3d:2f:b8:e5:df:3f:93:dd:10:
         f3:7c:ea:eb:ab:81:8a:04:34:8d:37:93:e1:82:59:c7:84:2f:
         9d:ac:b7:5a:82:56:84:4d:16:76:fc:ea:22:25:1e:44:9f:1c:
         3c:03:be:90:91:76:ca:9f:85:f8:e4:ff:c6:1f:32:75:0f:a1:
         3a:dc:de:1e:5e:23:21:e3:0e:59:28:11:e1:11:59:ae:76:76:
         4c:bf:67:4c:f0:5f:64:19:de:dc:50:b5:f8:0c:be:f6:a0:f8:
         2d:53:61:4c:de:df:fc:fb:63:7f:91:25:98:13:86:f4:6e:21:
         d3:12:dc:55:ed:50:35:90:ff:97:ea:a7:a4:d3:69:41:a9:14:
         63:34:b0:ab:6b:23:80:4d:e9:8d:aa:74:40:70:98:bb:d9:6b:
         7a:d2:17:7f:e9:cc:56:92:4f:a8:21:61:ed:14:15:2e:da:a9:
         b9:2a:e4:e7:a8:bf:fc:b6:0e:2e:16:cd:2c:04:de:80:4e:54:
         b2:c3:ab:13:b6:75:50:d8:46:f1:09:72:cf:32:08:da:c0:e1:
         46:b7:46:b6:d6:f2:14:7a:8e:63:18:9f:2d:f9:36:b3:7a:cd:
         c2:b9:cf:be:0f:07:3c:72:31:03:cd:a3:4d:7e:ea:17:4c:70:
         5f:56:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:12:54 2025 by rpki-client