Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa
File:                     a789ba80-8aff-3b9c-92e1-e386d72187ea.roa (raw, json)
Hash identifier:          fnhtHXLf3/EnCeuBAFBOkHL1QrxpvUkdyteC1VxxmPc=
Subject key identifier:   71:CF:FE:76:5E:DB:3B:80:3A:61:05:28:23:71:6F:D5:70:45:B5:88
Certificate issuer:       /CN=0ace9928-8310-4c75-a54b-a4085ec0045a
Certificate serial:       010D0C9F4328584B8EACEDE6DF7D92CA8E63D640
Authority key identifier: EB:E8:D8:EF:F1:B2:6E:87:EA:47:78:DD:83:AD:01:0F:B6:FF:81:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     16668
IP address blocks:        199.181.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ed:e6:df:7d:92:ca:8e:63:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ace9928-8310-4c75-a54b-a4085ec0045a
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=2eebfac6-2f7f-463f-8efe-228dc41596f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:3b:42:fb:c8:fa:92:10:d5:58:71:29:cb:
                    df:44:61:55:e1:0c:68:b8:cd:15:28:54:d7:e7:b5:
                    7b:38:74:b1:7d:d9:4a:6e:a7:a7:90:0f:8e:41:eb:
                    6f:4a:01:ba:9c:15:c9:8f:4c:0f:64:91:9f:55:39:
                    6d:67:ac:58:bb:1f:39:20:34:56:5d:2f:f8:8b:c3:
                    9a:15:8c:9a:f6:e0:a5:9e:53:09:0b:d5:65:16:41:
                    1d:ad:50:ee:65:15:37:6c:44:70:31:14:36:97:7f:
                    f4:d3:cf:de:9a:10:db:73:ab:37:43:46:84:27:c5:
                    e2:11:b0:c4:58:da:78:dd:07:90:86:a9:5f:48:9d:
                    3d:27:32:44:dc:53:9f:77:ed:c0:b6:d6:3a:03:eb:
                    e2:39:12:29:ef:36:b5:91:39:4f:dd:b5:67:b8:21:
                    17:95:41:0d:5d:2e:c1:24:df:04:85:35:de:70:56:
                    c0:b1:2e:fe:b6:80:06:56:99:18:a9:71:45:f4:7e:
                    fa:0d:fb:c9:d8:0b:e5:76:51:33:2b:9b:3f:a3:34:
                    5f:a1:3d:b7:ea:1c:97:cf:c4:b9:b6:a2:2d:76:26:
                    24:0a:99:50:bf:5e:66:37:e6:66:60:e7:0c:1a:d5:
                    3b:80:02:88:4a:e9:6d:19:8a:8b:87:d1:f5:c5:cb:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CF:FE:76:5E:DB:3B:80:3A:61:05:28:23:71:6F:D5:70:45:B5:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.crl

            X509v3 Authority Key Identifier:
                keyid:EB:E8:D8:EF:F1:B2:6E:87:EA:47:78:DD:83:AD:01:0F:B6:FF:81:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:8e:81:4f:9e:30:ed:46:5c:c4:cc:15:dd:3a:d1:03:11:
         be:5c:76:75:c2:6b:1a:ff:3f:d6:d2:03:25:3d:7d:37:c2:e2:
         6d:0b:2b:e0:a2:49:64:e0:59:9f:b6:02:12:d9:cb:36:71:98:
         5d:8d:7d:69:3b:d5:52:56:f8:37:12:12:1b:c7:18:63:df:47:
         6a:4b:7f:f4:0a:01:a8:b3:7d:f9:10:54:6c:58:d4:0c:bd:a7:
         3f:26:1b:46:83:5c:fa:99:b8:d8:6e:6b:de:a5:2a:fb:8c:82:
         bb:c4:d3:35:2a:6d:e3:50:66:17:d1:2f:d3:be:a0:4f:23:ae:
         2d:c8:57:37:a2:e1:ef:ac:ce:0d:13:94:ce:b0:c5:68:3e:9d:
         f0:f1:93:22:d2:4f:16:7e:12:38:92:1f:6b:ba:0e:14:25:3c:
         b0:97:bb:bb:67:bf:ee:11:0d:3b:c3:76:aa:bf:38:15:71:f7:
         11:27:9e:d3:b0:0b:1b:ef:56:fe:bf:f2:ba:65:d6:19:9e:80:
         c3:8c:b5:99:28:ee:1a:48:47:ff:5f:63:57:14:72:17:5a:b5:
         70:92:d6:65:fd:a7:a6:3e:c6:a4:c3:0c:4a:5c:20:80:52:9c:
         76:dd:51:ad:19:10:27:c2:8a:9a:60:3f:16:43:7a:0f:fc:2a:
         64:26:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:03 2025 by rpki-client