Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3be427a8-ebdc-33dd-937c-12b027b07d3a.roa
File:                     3be427a8-ebdc-33dd-937c-12b027b07d3a.roa (raw, json)
Hash identifier:          XImFvyz9C4xb9QappPWyB8/OBbQ9mWrXkcvgCXMN4Kk=
Subject key identifier:   04:7D:A9:37:EF:32:63:FF:FC:9D:89:5E:23:17:62:9D:CC:58:2A:0C
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584B6A61EA227FD7D8EB06462F80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3be427a8-ebdc-33dd-937c-12b027b07d3a.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     55293
IP address blocks:        192.190.94.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ea:22:7f:d7:d8:eb:06:46:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=3023c2db-f924-422d-aa0a-8ce2b6bad975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:81:cc:ae:50:a0:6c:c5:d7:e1:3f:96:57:
                    08:f3:98:b5:fd:03:90:51:a3:3f:9f:a9:7e:c9:0f:
                    ff:ef:3a:34:4f:a9:39:f8:cc:aa:97:26:f4:db:ae:
                    a1:5b:61:71:cb:db:58:8e:83:a2:e3:35:6e:ca:a4:
                    2a:68:a5:b4:2b:b5:1a:09:44:7c:69:e0:b3:c5:65:
                    8a:4a:09:ad:0e:f7:e5:84:98:72:ae:57:c8:2a:6e:
                    44:96:c5:f9:25:e9:af:85:49:99:ac:b9:cb:32:9c:
                    ab:6e:6b:84:cb:21:d6:b3:84:b4:90:bc:41:36:9c:
                    84:61:38:ba:1c:d9:83:53:a4:01:09:b7:7e:2e:39:
                    72:7d:89:db:c2:15:f7:ed:57:84:04:e0:39:a5:c3:
                    6e:e7:f4:93:94:71:5e:bc:91:8d:0e:42:c5:a7:95:
                    26:92:41:7a:3f:2d:13:65:cd:5a:f8:08:e7:55:06:
                    7e:0d:b4:47:65:4b:6b:8c:82:60:f4:d8:d4:85:7c:
                    3c:86:af:73:08:04:f2:fa:68:01:c8:57:39:19:39:
                    08:fb:e9:4e:1c:cb:82:5b:71:25:3f:c4:ed:dd:21:
                    c8:83:19:28:61:f5:93:21:31:ee:69:8f:51:74:52:
                    fb:e8:8c:51:fe:c3:86:6a:4d:00:44:a0:e4:b8:db:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7D:A9:37:EF:32:63:FF:FC:9D:89:5E:23:17:62:9D:CC:58:2A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3be427a8-ebdc-33dd-937c-12b027b07d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:ec:25:61:3e:56:98:98:68:88:f9:54:9e:11:8f:95:d3:
         b9:3e:69:77:61:f5:db:31:7a:14:a6:96:c1:59:d2:77:b0:7c:
         91:66:48:cc:2b:e5:8a:f3:c3:b0:1f:47:6e:47:af:f9:55:d6:
         e3:f0:d5:85:1b:12:f7:19:d7:bd:5b:89:d9:f2:0e:41:38:85:
         d8:0d:88:f1:a0:26:1b:c2:49:62:74:e5:a1:b7:71:b1:60:fc:
         34:a0:1e:63:ab:ad:ec:83:3e:ee:52:13:08:0e:52:d4:26:c7:
         36:24:88:5d:fc:ef:55:ff:37:fb:09:08:22:77:2b:8c:c8:1d:
         11:ef:a5:55:f0:8e:45:34:6e:02:1e:0e:f3:0b:17:d3:4d:db:
         ee:eb:c0:0c:dc:4c:71:30:3d:5d:74:54:d6:b4:f8:30:95:ba:
         4a:b7:93:ea:87:d9:ad:53:02:5a:6f:93:89:e0:8a:25:d2:b2:
         1b:9d:fb:62:e9:a9:dd:3a:8c:2d:35:14:1d:81:b7:13:69:f6:
         a8:fa:b2:3d:fc:af:cd:d2:da:a7:f3:1b:db:7d:6f:d4:f8:0f:
         b5:dc:0f:9f:e5:46:29:2a:fe:4e:65:df:99:8c:2a:72:92:ee:
         16:03:3a:27:6b:a7:d8:93:de:66:2b:3b:5b:fe:33:4e:2a:85:
         d0:e5:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:50 2025 by rpki-client