Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/dbcbff4f-eb5e-382d-98a0-16bb79b30a2a.roa
File:                     dbcbff4f-eb5e-382d-98a0-16bb79b30a2a.roa (raw, json)
Hash identifier:          Ps+8lEAnOE0U1vlDvn/XdFnpfbG3Wt4oK8pe83lXxi0=
Subject key identifier:   54:FF:32:C0:68:F6:18:62:48:E9:A4:5E:CA:F3:CC:0E:50:BB:8E:B1
Certificate issuer:       /CN=a896fb51-8357-466d-8186-a63abb732f66
Certificate serial:       010D0C9F4328584B92DCEE8C4707E335287AB180
Authority key identifier: 8D:A0:CD:7B:46:9A:1E:8C:CB:A9:8A:2D:BA:2F:76:1F:38:20:01:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/dbcbff4f-eb5e-382d-98a0-16bb79b30a2a.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     397423
IP address blocks:        206.183.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/a896fb51-8357-466d-8186-a63abb732f66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/a896fb51-8357-466d-8186-a63abb732f66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:ee:8c:47:07:e3:35:28:7a:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a896fb51-8357-466d-8186-a63abb732f66
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=03ff82b2-3a07-4c2e-aa89-64c3e3546c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:4d:66:dd:82:6c:ad:3c:61:4d:98:4c:9b:
                    01:b9:8c:86:21:2b:6d:5c:09:95:1f:e1:7e:5b:e6:
                    1c:95:88:75:15:36:1c:aa:bf:18:10:6a:01:92:f3:
                    05:f4:46:ac:37:e4:8f:66:42:f3:c1:e7:1d:cd:f2:
                    3e:8b:66:28:9d:4a:34:92:06:f3:1a:1c:b8:db:4e:
                    bc:2f:e7:5b:3f:63:e6:4b:00:6b:4a:88:bc:ef:80:
                    a0:c5:06:f1:51:07:dc:79:8b:33:15:54:e4:74:91:
                    b8:9c:72:f6:9c:44:7a:4f:a3:2a:74:6c:49:c4:5a:
                    79:90:30:11:bf:6d:80:f2:90:45:89:02:06:ef:74:
                    fc:af:81:4e:5a:3a:a9:79:ac:c1:4c:7c:64:f6:78:
                    52:ec:85:bc:4b:75:af:9d:f2:fb:ef:41:75:f6:c8:
                    b9:c5:20:51:bf:3d:1c:28:21:00:ff:9b:ea:07:72:
                    8b:07:2c:71:24:96:3a:af:db:09:62:40:7f:e4:19:
                    d1:9d:43:f1:3b:67:66:82:04:df:4a:49:bc:70:94:
                    94:c8:0d:ff:e1:6c:bc:2b:be:2a:8f:33:b2:18:95:
                    47:9c:0f:ac:89:6a:57:2a:12:f9:74:3d:9b:be:0c:
                    5d:7d:fa:15:97:01:b9:7d:64:53:1f:92:58:b5:19:
                    98:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FF:32:C0:68:F6:18:62:48:E9:A4:5E:CA:F3:CC:0E:50:BB:8E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/dbcbff4f-eb5e-382d-98a0-16bb79b30a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66/a896fb51-8357-466d-8186-a63abb732f66.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A0:CD:7B:46:9A:1E:8C:CB:A9:8A:2D:BA:2F:76:1F:38:20:01:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a896fb51-8357-466d-8186-a63abb732f66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:17:39:05:42:79:e2:29:61:18:c0:39:04:1d:9a:4c:f6:
         c0:fd:10:6e:aa:47:00:6d:91:af:2a:6e:31:b1:4c:63:d9:f5:
         bb:c2:a5:dc:ef:7b:44:17:22:be:b3:8f:b3:e7:4e:30:c4:52:
         cb:74:b6:6e:39:0b:15:3e:37:cc:9f:d7:96:a4:88:b0:ca:d5:
         84:ad:5c:44:cf:a0:ac:4f:06:b3:84:a2:54:91:32:b2:6e:19:
         70:b4:24:4a:af:16:f7:04:09:d8:c3:9e:5f:fa:69:13:2f:70:
         e1:04:55:08:59:78:be:c7:d1:db:d7:68:e0:00:ce:5d:c1:bc:
         dd:15:9a:da:0d:4b:a2:2d:81:90:78:83:0c:43:2a:e2:9e:8e:
         d1:18:c3:71:1b:58:06:66:39:82:de:8d:de:bf:ac:8b:0e:21:
         f9:b0:5d:23:33:3e:d5:89:ba:27:6b:44:bb:43:5f:19:b2:e6:
         85:a4:df:6c:cb:3a:33:c2:13:0c:1d:f0:13:e0:44:f2:27:f5:
         57:c9:50:ef:69:aa:d0:5a:6a:4d:8e:73:9a:9d:f9:78:8d:ea:
         e0:d7:6d:ba:c9:08:b0:f7:bd:34:6f:fa:f1:28:f7:1e:fd:5d:
         8e:81:77:1c:8b:1a:63:f6:34:0a:20:37:70:73:3e:4c:ee:82:
         8f:84:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:32 2025 by rpki-client