Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa
File:                     441ba8c3-51b4-353d-b914-e586c621a0f9.roa (raw, json)
Hash identifier:          NQEyf5DUboaKSAEFIEGJHNq1JjAzx/VVCMCIPtRx+Cs=
Subject key identifier:   F7:9B:52:06:B7:C9:17:B5:00:51:DC:65:F0:82:4F:28:75:AB:2D:8A
Certificate issuer:       /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial:       010D0C9F4328584B8EACCF796987107801D36A40
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     30148
IP address blocks:        192.161.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:cf:79:69:87:10:78:01:d3:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=00660c13-e1ce-4361-87eb-205002a3c3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:cb:97:5a:2b:35:05:62:1b:f9:4a:12:fe:
                    3e:b4:7f:49:2e:b5:6f:e2:a2:d5:d8:d3:51:ec:dc:
                    15:c1:33:ad:be:b1:18:36:1b:9d:ed:f1:44:a0:66:
                    8a:1d:31:13:af:58:ce:c7:8f:fa:69:7d:ca:0e:fa:
                    e6:21:ed:27:7e:af:4b:4d:18:e1:e3:73:b0:d4:66:
                    cf:b3:27:a0:a8:64:fd:41:ca:3a:0a:67:38:47:db:
                    9d:be:df:5e:48:63:ad:ff:d9:f3:93:68:3d:e6:df:
                    26:15:31:35:c5:ef:71:29:40:a4:13:2a:25:4c:9d:
                    d0:b9:8c:5e:29:af:95:3d:b1:73:61:6c:4c:d0:10:
                    3a:6e:9b:5f:88:7a:46:da:5f:e9:16:26:41:a4:cd:
                    66:0e:7a:54:71:ac:bf:17:c7:69:9f:17:18:55:8b:
                    bb:b0:b2:47:cd:85:c5:49:08:d3:c6:99:31:9d:50:
                    89:f8:20:a3:d9:88:92:d0:82:5f:66:3c:6e:d5:15:
                    f5:a3:09:c8:77:ab:fa:10:e6:6d:6b:73:9c:81:d9:
                    b1:0e:fd:07:fe:6e:69:9b:0d:dc:83:f9:5b:25:c1:
                    ca:9d:79:51:93:24:20:a3:41:f2:e4:76:41:0e:85:
                    c3:d5:f8:3c:7a:58:37:b0:44:14:65:84:3b:84:6b:
                    80:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9B:52:06:B7:C9:17:B5:00:51:DC:65:F0:82:4F:28:75:AB:2D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:13:ac:46:70:8a:23:4a:c5:9a:0a:28:bc:ee:18:7f:43:11:
         e7:82:65:ac:e2:b1:ed:af:79:29:4a:b0:86:eb:99:f9:4c:72:
         dc:40:bd:e5:92:b8:66:f6:9b:c0:0c:1d:b6:b2:24:45:b9:b7:
         4e:19:af:cc:33:74:50:67:5c:b0:49:26:c4:46:b1:5b:99:4a:
         ff:0c:63:80:3f:a1:dd:19:02:0c:15:cd:4e:d6:fc:09:60:b5:
         df:e4:b6:b1:b6:82:53:b5:97:d7:82:da:9f:ec:e5:52:dd:be:
         b6:90:75:94:6e:7c:f4:4c:d7:61:90:38:d4:55:f5:e8:33:15:
         3a:2a:4e:97:6c:19:72:94:9d:04:87:43:f1:52:51:6e:63:fc:
         49:8c:76:37:00:d4:8d:57:c6:e2:5d:3f:a5:fd:6b:08:19:82:
         f1:8a:4a:c7:79:d4:c6:fa:c0:9a:7c:a4:3b:c4:b0:32:83:fc:
         3e:a3:51:41:d3:31:a1:29:5b:e0:60:26:b6:22:bb:f5:fc:e7:
         c8:35:b2:da:4f:7e:9a:3b:17:dd:bf:03:f3:4c:93:b5:50:9a:
         ee:ea:12:ec:ab:ca:8d:81:30:d2:8b:59:33:60:87:4c:d7:6c:
         3c:eb:b0:ba:f0:b1:cf:d3:2d:e0:60:26:7f:9b:d3:c8:07:af:
         3d:89:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:47:58 2025 by rpki-client