Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/f1532e9e-3130-3e07-afc4-4d0d9612434c.roa
File:                     f1532e9e-3130-3e07-afc4-4d0d9612434c.roa (raw, json)
Hash identifier:          boFLed7YqcA9M1hh/4npTPougEeUWJ15edq3qDa5sKg=
Subject key identifier:   39:2F:09:BC:DE:85:E2:04:8D:52:84:5D:CD:E0:65:20:C9:79:C2:15
Certificate issuer:       /CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7
Certificate serial:       010D0C9F4328584B85878DFEC3931B56094B4B80
Authority key identifier: 77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/f1532e9e-3130-3e07-afc4-4d0d9612434c.roa
Signing time:             Tue 14 Oct 2025 18:23:20 +0000
ROA not before:           Tue 14 Oct 2025 18:23:20 +0000
ROA not after:            Mon 12 Jan 2026 19:23:20 +0000
asID:                     199524
IP address blocks:        199.175.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:87:8d:fe:c3:93:1b:56:09:4b:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7
        Validity
            Not Before: Oct 14 18:23:20 2025 GMT
            Not After : Jan 12 19:23:20 2026 GMT
        Subject: CN=93496493-7d1b-42b6-a0af-03b9e6aa0edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:97:5d:9a:03:96:a9:6d:bb:54:58:c8:bb:79:
                    38:3f:ab:e0:0d:b9:d5:ab:59:c9:d0:3c:ec:22:b4:
                    41:40:ba:44:62:88:c4:04:bf:17:73:be:11:89:2f:
                    a0:6a:ed:60:f5:bd:b0:0b:65:a1:38:00:04:3e:d5:
                    22:8f:fd:01:1f:28:ff:4d:93:00:cb:05:36:2b:83:
                    0b:31:29:0e:b0:41:55:02:92:5d:4b:57:25:e9:83:
                    77:8e:09:6b:8e:42:e9:4c:96:1a:a4:7e:97:1c:1e:
                    13:56:d2:68:a4:4f:96:16:0e:48:6f:93:ac:8d:fa:
                    ce:5f:3d:d8:a6:c0:aa:25:c3:06:5c:dc:a5:ad:8a:
                    28:29:0e:5c:5f:b7:66:3a:30:a5:6b:54:90:ce:8d:
                    7b:fe:27:54:82:18:cd:6a:9b:cc:82:99:d0:2e:30:
                    85:35:87:fe:8d:63:68:12:20:ee:62:bc:ea:09:67:
                    52:86:20:5f:7a:7e:18:c7:3d:56:5c:be:d2:5a:60:
                    cf:17:51:9b:bd:5b:4d:01:4a:23:1a:92:b9:8c:3d:
                    e2:33:cb:4c:2c:d4:03:bc:82:b0:34:7f:40:a0:c7:
                    05:a4:48:5c:15:83:4e:fd:08:b3:74:9b:42:09:6b:
                    9d:b0:0d:0b:e0:65:b8:75:ac:b5:28:51:c7:4d:de:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2F:09:BC:DE:85:E2:04:8D:52:84:5D:CD:E0:65:20:C9:79:C2:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/f1532e9e-3130-3e07-afc4-4d0d9612434c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl

            X509v3 Authority Key Identifier:
                keyid:77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9d:c8:d2:96:f2:74:2c:81:84:18:cb:18:db:65:ff:93:79:
         c3:4f:3b:e8:eb:25:7a:02:8b:f4:14:4c:e5:5d:70:d7:e6:18:
         d6:83:71:d6:b5:dd:fa:af:a6:08:89:14:51:01:fe:04:6c:05:
         84:f8:3a:a8:b7:17:97:bf:1a:39:a8:55:51:bc:f5:fe:8b:39:
         0b:82:ef:86:1a:59:70:4b:52:12:0a:e1:19:5d:48:65:06:46:
         06:b4:4a:8a:2c:f3:8f:2b:aa:cb:b1:31:5c:79:53:3a:d9:95:
         36:33:31:c9:de:ed:69:93:86:ff:59:79:fe:91:98:e6:ca:b0:
         ff:2b:e4:47:b0:a6:d6:fc:1e:dd:f0:84:06:43:50:13:f7:77:
         09:86:c8:b5:29:5d:9a:80:ac:e5:4e:40:fe:c3:f6:df:8c:8a:
         fb:82:42:7b:48:51:ea:d4:73:b5:7c:e3:bf:70:e0:33:9d:7a:
         fc:e8:3c:fb:4d:7e:2b:db:4f:52:b0:28:2f:43:b9:19:8f:08:
         e1:11:25:65:e2:aa:36:7b:97:79:75:a6:a5:9f:37:1f:20:3b:
         ab:3b:f3:23:87:7d:fb:5f:66:a1:d9:0b:83:e9:75:ea:3e:56:
         fc:d7:66:32:d0:cf:99:c4:d6:03:a9:dc:4e:50:9f:5d:ae:d3:
         45:55:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:39 2025 by rpki-client