Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa
File:                     2e76c261-fdad-3290-a47c-70e64b04cc41.roa (raw, json)
Hash identifier:          +znGlJpFUBQVRcL5VXNwQIpUyqComL6UydWbYRwc2cg=
Subject key identifier:   CC:C3:7F:81:8E:83:85:F2:E5:0C:BF:7D:83:41:7B:7A:CA:88:D8:1A
Certificate issuer:       /CN=d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed
Certificate serial:       010D0C9F4328584B328C303121D844C0F54AE580
Authority key identifier: 2F:F7:BD:CB:F6:81:8B:78:85:D8:33:81:75:70:E4:2D:F3:A5:F6:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        199.250.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:30:31:21:d8:44:c0:f5:4a:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=948c0c75-6337-4764-808b-441ff85a7735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:29:2d:c2:b7:11:f0:cc:61:fc:a4:f9:88:
                    a2:fb:fb:98:67:09:c3:57:f2:ac:31:d9:e3:db:a8:
                    b0:78:60:33:a5:f6:6b:f9:97:77:6f:1d:c5:0c:50:
                    26:59:be:cb:8b:08:d4:07:27:7d:6c:c0:eb:56:e7:
                    37:af:56:25:9e:1c:67:0e:58:42:dc:6d:99:e6:7a:
                    17:ee:24:1e:2c:58:a3:04:a2:21:bc:e1:ed:34:c5:
                    0d:1c:cf:af:11:ed:a0:7d:ee:7c:2b:d8:b0:58:ae:
                    01:bc:03:40:1b:b7:2e:40:c2:b4:13:ad:3a:bc:b0:
                    8a:ed:81:4f:3a:4a:ba:09:5f:55:73:09:3b:da:b3:
                    42:28:18:56:30:4f:a9:77:0e:28:a3:7a:5f:c2:a2:
                    ba:4c:e9:2b:17:a2:b5:6c:04:74:e6:31:69:eb:59:
                    71:6b:e1:f1:96:f4:45:cd:c3:41:d8:b8:1b:e8:90:
                    48:ed:c1:ee:af:37:77:f1:4e:7c:ca:ab:a4:6d:8f:
                    ca:83:29:b5:2f:b1:7d:50:a7:b8:e3:c1:eb:0d:c4:
                    55:d4:af:41:ae:35:f8:6e:ec:ec:5c:92:e1:7f:78:
                    d4:6b:fc:02:cd:54:30:be:ce:71:30:c8:68:8a:21:
                    60:73:e2:fc:2a:71:e8:7b:b1:31:83:9f:da:88:1c:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C3:7F:81:8E:83:85:F2:E5:0C:BF:7D:83:41:7B:7A:CA:88:D8:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.crl

            X509v3 Authority Key Identifier:
                keyid:2F:F7:BD:CB:F6:81:8B:78:85:D8:33:81:75:70:E4:2D:F3:A5:F6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:c2:e7:27:07:a1:ac:50:2c:1e:fc:39:eb:de:04:9f:db:
         51:a7:d4:a0:2a:cb:bc:3a:f8:d7:b1:01:ad:11:35:38:4f:55:
         d0:93:0b:6b:51:90:01:8e:da:53:c8:4f:65:74:db:96:69:2d:
         c1:c6:35:f2:7d:20:59:53:e8:17:a8:65:48:e2:8f:5b:01:11:
         62:09:b2:79:ac:44:5a:54:3f:ab:e9:6e:bf:07:64:91:9c:38:
         76:9d:c6:2a:66:f9:47:69:c8:30:30:bd:30:b7:87:ce:7c:e2:
         7b:e8:17:9e:82:14:eb:48:fa:03:b1:fd:8f:36:77:51:f0:b0:
         ad:44:b7:6e:ff:3f:d5:c8:9f:96:0e:c6:df:10:cb:60:05:6e:
         d2:fd:1f:65:93:e9:a8:77:0d:bf:ab:18:3a:a6:09:9f:aa:a8:
         8a:89:0a:dc:f2:6a:2e:00:ab:17:06:b8:21:6f:76:19:17:4a:
         90:7d:2c:4b:0f:fe:76:28:0d:93:97:b5:13:a1:39:bf:f4:47:
         e6:55:6d:aa:45:96:7c:b2:17:57:0d:5f:33:cd:84:cd:a6:23:
         52:ea:69:00:a5:01:d8:b2:40:26:ce:a9:e2:6a:f4:91:d8:43:
         1d:c8:27:97:1c:06:9d:eb:81:5f:db:9c:d9:04:1b:9c:aa:00:
         fe:51:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:47:03 2025 by rpki-client