Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94642da0-0b73-329a-a5d2-938ea6e8f7a3.roa
File:                     94642da0-0b73-329a-a5d2-938ea6e8f7a3.roa (raw, json)
Hash identifier:          pDOXryhS0poB/v7peYQSGH9//AYqRiKavdTbF0HTyOk=
Subject key identifier:   99:76:5B:B7:08:83:D7:DE:EE:2A:6B:3F:07:B4:F7:18:3B:96:61:4F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A472BBB3264865135DAB1E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94642da0-0b73-329a-a5d2-938ea6e8f7a3.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     203
IP address blocks:        205.141.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:2b:bb:32:64:86:51:35:da:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=9582ac54-8461-4828-a49c-209995d1bbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:cc:b1:e4:15:15:1c:b2:6f:c7:ca:cd:4d:
                    d0:43:c5:8b:2f:3e:59:2b:b6:a0:bf:ad:3f:7f:2d:
                    37:9c:23:fd:9e:61:ed:8f:f3:29:bd:20:77:38:af:
                    3c:1d:34:6e:f2:06:7e:81:ec:4a:c5:93:4c:58:59:
                    35:6e:11:e8:17:ad:13:90:4d:9d:f2:59:89:c7:4a:
                    38:10:c9:7b:18:63:21:e7:0c:39:48:20:59:40:b6:
                    59:e3:dd:4f:5c:93:72:e3:92:0a:62:bb:00:52:bb:
                    1a:55:9b:2a:91:71:d8:65:09:97:ca:06:42:6d:18:
                    e6:ce:04:1a:06:86:ca:2d:1e:3f:1f:1a:e5:b8:35:
                    3b:30:a3:66:07:67:ec:d1:d3:5a:85:ff:ef:03:8f:
                    6c:cd:05:fc:67:ac:8c:30:75:f4:b9:16:bf:5d:8b:
                    b5:df:cc:4e:9c:1a:e7:01:6c:75:bf:74:bf:5d:37:
                    79:2b:11:fc:b0:a1:0d:ee:69:0b:98:76:ed:d3:84:
                    c7:fc:8d:fb:86:76:0b:49:79:18:cc:e3:2b:0d:3e:
                    56:e0:50:6d:98:ed:d5:ea:e8:23:8e:ba:35:5c:9d:
                    cc:e9:04:22:a1:c7:65:2c:c4:ee:7d:e9:db:70:3e:
                    d8:50:37:de:9a:68:55:ae:28:00:63:65:27:af:84:
                    1c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:5B:B7:08:83:D7:DE:EE:2A:6B:3F:07:B4:F7:18:3B:96:61:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94642da0-0b73-329a-a5d2-938ea6e8f7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:72:36:db:08:37:68:a0:8e:4d:6a:0b:69:48:d6:d7:40:52:
         e2:6c:70:41:73:87:37:56:29:19:e1:02:e2:a1:24:c0:82:43:
         40:f1:87:da:df:06:54:36:5d:e1:21:46:9b:e4:55:1a:2b:9d:
         d7:f6:ef:b5:79:1e:02:3b:55:0e:41:fc:9d:4e:f1:fd:8c:b1:
         2c:94:77:e1:16:5d:6b:13:3b:75:10:0b:df:1b:06:2f:bb:06:
         f0:44:10:06:41:9f:bf:ec:ba:c7:f3:9e:78:ec:4d:97:04:24:
         da:3e:1e:3d:d2:22:7d:29:ac:1f:ea:e0:d8:74:60:79:05:ac:
         ce:e9:2b:2b:2d:f9:42:b0:67:3e:f8:80:9f:e9:1e:18:55:da:
         b8:27:07:24:e4:80:fc:7d:9d:9a:de:74:b4:7c:91:a2:83:45:
         38:b0:4e:d0:73:3a:13:ae:b8:54:7a:f3:4a:48:a1:c8:51:54:
         cc:3e:86:3f:9b:a0:d1:2e:6f:b5:b0:5a:3c:ba:94:43:54:7d:
         5f:93:ab:b7:a7:7f:08:d2:c3:9c:f6:b3:0c:2a:7d:c4:0c:cf:
         4a:5e:a9:a0:23:b7:51:4c:01:1d:df:35:47:b1:88:89:ee:cd:
         dc:ea:0b:e7:0b:39:c3:4b:c3:8a:db:be:89:8a:30:da:0c:2c:
         44:3b:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:42 2025 by rpki-client