Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa
File:                     18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa (raw, json)
Hash identifier:          fVAZrNscXxqRTnF1gAqJINvN6mM11fiXJQfHeyny7I0=
Subject key identifier:   08:ED:FB:29:8A:A9:04:FD:82:09:56:B9:59:FB:11:CC:85:02:56:55
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F4328584B92DCEF1C822BA1A5246FE180
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     26535
IP address blocks:        207.251.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:ef:1c:82:2b:a1:a5:24:6f:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=3736be32-4797-4d74-9c3c-0f7e453ad65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:73:b0:e3:da:ff:83:39:f0:e4:a5:ee:05:cd:
                    9b:5e:9d:86:ee:4b:22:a1:8c:7f:98:61:93:5a:c9:
                    5f:9e:88:21:32:1f:30:03:50:55:3d:86:ae:8a:7e:
                    b6:d6:77:f6:55:33:08:bf:71:76:45:79:20:7b:e8:
                    3a:c5:d2:e1:75:c2:e6:c1:01:90:10:29:aa:73:60:
                    57:71:0b:f3:f4:5e:e7:19:d0:82:db:5d:21:8b:34:
                    6d:d0:ef:7d:c8:6b:cf:e1:05:32:8d:4c:a5:a8:46:
                    15:32:e3:09:47:1e:c3:a6:9a:83:b0:97:1f:b1:e7:
                    74:42:cd:df:1c:d6:e8:5e:81:a6:7b:59:13:bf:12:
                    64:e3:16:16:49:17:46:e0:54:a6:89:ba:9c:73:4e:
                    60:5d:49:00:96:41:03:4d:ef:27:9f:b3:f6:ab:66:
                    86:79:bc:13:f9:93:53:ad:c1:07:d7:fd:10:e0:fd:
                    1d:1b:98:4c:6d:7a:40:1d:de:af:27:97:77:fc:e1:
                    7f:f5:45:09:80:f2:8d:b6:4e:0e:9e:6f:5e:4f:16:
                    90:ba:dc:7a:57:b3:50:03:ff:4e:40:c4:72:53:c5:
                    1b:50:fe:0b:8e:a1:21:6f:51:1c:e1:cc:30:0b:c5:
                    ae:4a:09:29:ec:9f:b1:fe:40:22:5c:16:9a:b8:e5:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:FB:29:8A:A9:04:FD:82:09:56:B9:59:FB:11:CC:85:02:56:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f6:49:78:92:37:f2:38:58:a2:91:60:78:90:c0:3f:b9:c7:
         85:b8:d0:65:4c:4b:97:bf:3f:fb:b0:5c:f9:0f:74:0c:c2:d8:
         04:7d:2c:c7:33:c0:5c:fa:28:e0:79:54:4e:8f:66:bc:a8:0f:
         cb:ea:fc:c8:74:ee:31:58:b7:f0:13:45:6d:12:60:c0:92:0f:
         c2:5b:04:23:35:88:da:c9:e1:e2:ce:04:fb:58:45:00:c9:46:
         05:4b:82:e5:32:cf:4b:fc:79:7a:04:ed:ed:0d:48:19:8a:46:
         9b:26:32:18:f7:f9:df:3e:c5:0e:9a:47:42:d5:6d:c5:48:99:
         40:04:84:2e:3f:ae:f7:0d:34:05:62:f2:5e:7e:c7:c9:15:71:
         cc:51:03:3e:ce:0d:9d:96:75:82:f7:1b:27:0c:79:63:df:2f:
         e5:26:0d:77:46:6b:dd:b6:fc:65:90:31:0a:a3:7a:19:5b:5a:
         bd:98:78:44:04:29:64:44:3e:57:8d:5c:34:bd:2e:d4:a8:c3:
         81:d9:5f:aa:71:ee:06:ce:38:25:58:f2:83:d3:1a:0e:91:4b:
         f1:1c:77:c4:79:d7:54:dd:53:4d:1b:7d:b0:1a:72:a1:70:12:
         75:20:3a:dd:93:b1:cb:a5:b7:f9:99:d3:c1:b7:1c:a5:6b:5b:
         61:ff:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:11 2025 by rpki-client