Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa
File:                     bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa (raw, json)
Hash identifier:          7CNha7L4Q410jznS2is+emE1WNDJZ+PQRrPDBRm4+04=
Subject key identifier:   67:A9:1C:88:71:BD:AF:C0:65:7D:F1:9F:FC:C5:0A:48:CC:C8:71:2B
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F4328584B84E7802E30FD1BBB01A4FB80
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     26677
IP address blocks:        199.212.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:80:2e:30:fd:1b:bb:01:a4:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=392a09ff-460c-4583-92c9-907a22b017a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:2d:c5:cd:ca:3a:30:3d:56:91:1c:3b:47:
                    7f:70:70:64:03:30:6a:5f:94:79:99:64:4f:35:b3:
                    a1:2e:05:03:ee:75:d7:42:34:ba:79:ce:30:df:47:
                    9e:1d:d2:29:10:a5:40:d6:8e:2f:06:2d:1b:af:0e:
                    1f:34:4a:df:0b:8c:5f:a8:42:f3:1b:f9:04:f4:da:
                    ea:1b:c8:25:48:68:47:80:c7:61:41:33:6c:bf:ac:
                    f8:64:ae:fb:0b:c3:17:b5:c3:c8:ca:0a:c9:fb:f2:
                    00:f4:18:4a:08:f4:56:06:7c:de:e1:f8:b9:da:df:
                    40:7a:14:16:42:22:7f:d1:9c:a0:cf:23:b2:66:8c:
                    4b:1f:5e:af:73:c9:12:c1:86:7f:f9:d8:08:70:0c:
                    a1:25:c1:04:83:3c:c7:b4:89:a1:93:95:d1:eb:10:
                    be:d3:f8:c7:20:cb:e1:1a:6d:45:ea:89:da:6c:c5:
                    11:cf:93:68:97:14:81:f2:28:41:66:7d:e1:c4:5e:
                    78:bf:90:df:a9:ab:f5:e4:bc:b0:23:df:9a:77:1e:
                    1d:32:9f:1c:9c:c8:79:a8:38:7b:89:1b:32:d5:d0:
                    ac:37:68:16:24:40:6b:14:31:18:90:c0:be:e6:08:
                    05:00:be:8d:b7:e2:c0:e8:f2:f5:74:a4:10:4d:e5:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A9:1C:88:71:BD:AF:C0:65:7D:F1:9F:FC:C5:0A:48:CC:C8:71:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:76:0e:c5:1c:5e:de:63:ef:2b:ff:95:3b:d9:7f:44:98:fb:
         7f:d6:58:dc:6e:d4:a5:c6:e1:8c:fc:67:dc:57:f8:10:88:eb:
         04:32:2b:4f:f2:9d:c6:5f:a3:7b:bd:ee:0e:b4:18:d0:e0:9d:
         14:5e:38:96:22:d5:3b:6b:8d:81:35:5c:ae:7b:56:a4:5c:38:
         fe:f1:4e:c1:7e:19:a7:d0:3b:46:c3:8f:36:dd:d4:76:36:40:
         ac:61:55:95:0d:f3:e8:c7:e7:6e:b5:6d:fa:3c:1b:3c:cd:40:
         dd:b9:59:93:63:16:94:b6:a1:51:37:30:ff:ac:7f:2f:0f:6e:
         7f:44:29:5e:12:d9:ad:94:c3:88:cc:50:e9:b8:81:a1:77:23:
         da:d3:df:c0:11:04:e2:f4:3f:78:45:c2:17:42:0e:86:c6:0d:
         16:fb:4c:ff:1e:6f:f0:e6:4a:ef:6b:1f:d5:ac:fb:a1:da:d5:
         a5:a6:02:de:32:fa:97:00:e5:68:21:18:55:70:57:0b:93:bc:
         90:33:cd:2e:f2:c8:96:79:69:a0:db:4e:a1:10:9c:be:91:16:
         81:9f:7d:ef:54:97:af:b5:f8:75:2d:27:b4:9a:80:a3:1e:65:
         4e:e3:fc:be:81:45:f1:36:a1:6f:fb:37:ce:52:d8:5b:90:c9:
         91:6e:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:49 2025 by rpki-client