Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faf9b85d-3b9c-323c-ae39-48c887f5b988.roa
File:                     faf9b85d-3b9c-323c-ae39-48c887f5b988.roa (raw, json)
Hash identifier:          qf2srlRWatQIhKgS0q2zkmWQgTnOAXRklSDEet/Q3ls=
Subject key identifier:   B6:8A:33:CC:8C:AF:0C:B8:58:91:98:CF:21:25:17:1C:9C:8E:30:05
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B72C1E9C44BCDB546A442C9C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faf9b85d-3b9c-323c-ae39-48c887f5b988.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     396982
IP address blocks:        192.158.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:e9:c4:4b:cd:b5:46:a4:42:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=93612f2c-07a4-4979-b448-498d337aebe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:0e:1a:fa:d9:f8:85:e1:b7:9a:eb:f7:50:
                    41:b3:64:c6:9f:a7:90:a0:80:2b:2e:c8:5b:82:64:
                    f0:df:1f:14:b8:0a:0e:2c:4f:98:ff:14:fd:cf:51:
                    7d:d8:04:c7:06:fd:3a:ee:e0:da:9d:14:a4:bc:29:
                    0c:71:30:10:ab:0c:1f:6b:fe:1f:7c:91:74:ce:e1:
                    d9:ab:4b:f4:be:0b:1e:0c:12:c9:d0:bd:b6:60:e8:
                    34:ae:03:57:e2:71:19:a8:f1:96:32:83:ea:5b:37:
                    ab:00:d8:f3:9d:00:2e:fa:66:83:43:6c:44:a7:9b:
                    7c:2a:81:e3:ee:62:76:07:7e:a1:74:be:7e:74:a4:
                    0f:41:85:76:69:06:98:8b:c9:ad:aa:63:6f:c9:98:
                    0d:0f:38:e5:ed:49:a3:2f:c8:3e:ca:83:64:fe:41:
                    25:69:26:af:e1:44:7a:43:cf:67:74:af:c5:eb:56:
                    20:bb:b6:66:37:98:a1:44:b7:e3:20:24:b1:af:19:
                    e7:f6:82:03:52:4b:38:ca:6c:89:6e:3b:bf:fb:1f:
                    e5:d8:2a:db:f6:97:e6:b1:ea:6f:06:93:b6:9e:83:
                    52:fe:6e:74:fa:aa:e9:a4:26:bd:4b:7d:37:b3:c2:
                    41:da:14:35:e3:15:de:c6:57:a9:cd:68:9a:3d:04:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:33:CC:8C:AF:0C:B8:58:91:98:CF:21:25:17:1C:9C:8E:30:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faf9b85d-3b9c-323c-ae39-48c887f5b988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:ed:20:dc:b4:ca:49:d2:35:81:9c:8d:7d:8c:88:d3:7f:
         08:aa:84:88:0f:74:df:f8:e4:5c:28:9e:82:ea:1f:25:2f:44:
         03:00:f4:a6:ba:a4:e4:ed:81:b8:72:8a:cc:5a:61:35:3c:6d:
         30:6e:0b:3d:79:e7:e6:73:91:b1:d2:1b:87:df:1d:54:aa:14:
         2a:ce:08:a3:b4:51:eb:2c:7f:06:3e:38:6a:b8:d6:60:f8:86:
         c8:69:b8:00:6a:07:92:5c:71:f2:8d:d9:77:1b:0f:65:a7:44:
         74:6e:dc:b3:14:fa:22:c9:c7:36:c8:af:79:b2:bc:ff:69:d4:
         c1:96:e2:4b:5b:3c:d4:49:1c:ba:88:53:28:69:60:53:e0:ef:
         e7:58:6d:10:26:5f:45:7f:d4:12:c8:2c:5c:63:ba:6b:e5:d5:
         a7:be:c2:b9:b3:7e:d0:34:31:57:86:56:1f:7e:ec:31:0d:56:
         f4:32:96:1b:70:a0:46:aa:ac:58:35:ad:ac:62:1d:93:fd:54:
         78:a9:19:6d:78:b8:fb:d1:f7:03:1a:64:ff:29:e5:c2:32:e6:
         c1:67:d7:f6:31:28:a5:cb:15:d9:c8:c0:cd:36:4e:a6:9c:7d:
         08:e3:18:5b:f2:ee:ff:bc:d1:75:c5:01:4f:03:f1:06:fb:ff:
         51:93:8f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:11 2025 by rpki-client