Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/551ac281-d9fc-30eb-905b-4baecb30fb3d.roa
File:                     551ac281-d9fc-30eb-905b-4baecb30fb3d.roa (raw, json)
Hash identifier:          6yVoWkY5fgoD4qFoYUceYdiSPTLbsSdQC/czLyEGaHI=
Subject key identifier:   3B:60:C7:CD:18:83:9D:B7:E8:8F:C4:D5:74:A2:C0:AC:62:D8:82:43
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C67B3A16B9AB8B6A26680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/551ac281-d9fc-30eb-905b-4baecb30fb3d.roa
Signing time:             Fri 10 Oct 2025 15:41:19 +0000
ROA not before:           Fri 10 Oct 2025 15:41:19 +0000
ROA not after:            Thu 08 Jan 2026 16:41:19 +0000
asID:                     81
IP address blocks:        192.101.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:67:b3:a1:6b:9a:b8:b6:a2:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:19 2025 GMT
            Not After : Jan  8 16:41:19 2026 GMT
        Subject: CN=62a7d879-0514-44f5-af62-7244e5f88848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:35:f0:ed:ec:73:98:2a:5d:07:97:e1:6e:
                    bd:c0:d7:2b:5f:04:50:96:f1:53:34:cc:23:d8:80:
                    53:86:a1:00:bb:eb:85:90:6f:76:29:77:ea:28:7f:
                    d5:13:ee:02:53:29:d8:ca:1c:f7:b7:e2:84:a8:71:
                    90:71:5d:6a:e1:6c:d8:98:80:16:39:e1:f9:3b:c2:
                    8e:08:96:65:cf:54:ba:d0:51:09:eb:59:6b:74:18:
                    b3:3b:33:f1:d7:59:c3:a9:8a:21:e2:75:62:db:65:
                    cf:dc:52:ad:10:d4:eb:e4:b2:26:d5:6c:81:fa:6e:
                    b9:9d:64:86:7e:6b:19:f6:5f:95:5e:d9:a3:fe:4c:
                    02:1b:af:bb:e6:0d:94:dc:e4:73:d7:f0:d2:cf:0e:
                    d2:9c:2e:34:4f:a2:1b:cb:f1:2e:f6:36:85:cb:ef:
                    8b:34:5c:c8:26:2f:36:b7:34:f9:12:08:e2:d3:ac:
                    22:df:7f:50:11:ef:c6:b1:65:f3:e6:66:1b:b8:97:
                    ec:e6:f2:05:b2:6b:71:03:70:02:6d:e5:ba:b9:a6:
                    9e:48:dc:58:4b:6f:76:a4:c2:dd:9e:0d:77:ad:d6:
                    b3:63:e3:5f:cf:7f:7c:a9:de:3b:63:eb:3c:01:f9:
                    aa:7b:d0:47:9c:41:10:63:d7:21:9e:f7:d7:d8:ab:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:60:C7:CD:18:83:9D:B7:E8:8F:C4:D5:74:A2:C0:AC:62:D8:82:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/551ac281-d9fc-30eb-905b-4baecb30fb3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:e6:cf:ef:29:4c:89:3e:37:e9:80:e8:b7:24:97:2b:1b:
         ff:80:ce:4a:51:81:ff:47:d8:8e:7a:5f:34:bc:9e:b7:56:bc:
         68:87:c5:ae:82:f8:d9:70:f0:5a:0c:91:bc:97:3b:7f:6d:13:
         55:b5:78:4c:a2:c3:e3:96:10:9a:d2:d0:47:fd:fc:75:7c:86:
         31:dd:16:91:26:82:49:0c:1a:8c:34:5c:1a:70:c3:4e:47:95:
         1f:be:12:44:c3:a1:e7:3c:3b:5b:3b:6b:d6:28:72:c7:50:4d:
         b9:19:9a:83:ab:50:6b:1b:42:e7:3e:36:0a:86:24:17:58:29:
         4e:79:97:63:75:ac:f9:a2:5d:f1:63:2f:f4:c6:b8:a7:f9:5d:
         a2:59:27:eb:8a:06:5d:13:41:f9:e7:e7:7e:f9:e0:74:1f:c0:
         85:1e:c5:66:37:85:a9:2d:11:d2:a8:a9:f3:6e:28:53:6c:e1:
         05:89:55:c4:0c:91:c3:e9:36:4f:a1:b2:31:8a:f1:16:70:6a:
         5d:d9:98:ea:b0:12:5f:f3:15:db:bf:6a:96:59:49:bd:59:6e:
         4a:d7:56:7f:7e:4d:65:dc:5a:40:9b:32:6d:0d:97:46:0a:5c:
         36:db:54:14:93:48:8c:6d:6f:87:23:1a:04:b1:e9:7b:ff:52:
         c0:b4:2d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:00 2025 by rpki-client