Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa
File:                     d2015878-4527-3557-82c5-f62f18fd4715.roa (raw, json)
Hash identifier:          bWIRmLcfjoT4yuGTCFuYmyYZuUXkApVO6J6KWkMBk2o=
Subject key identifier:   15:2E:12:4B:44:BC:23:E5:1A:B9:49:58:F0:F3:ED:7A:D2:3F:7B:8E
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584B8EACECF0C73567D0EA4AD600
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     394927
IP address blocks:        204.155.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ec:f0:c7:35:67:d0:ea:4a:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=224c171c-f77f-4279-8e2a-ff7c65db176b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:66:0c:47:47:f1:76:80:b8:a5:65:58:81:
                    04:ff:3b:ce:4a:d4:ab:5b:48:9a:77:92:d4:b4:c5:
                    39:2b:40:2b:e6:22:3f:1e:b9:ee:be:e0:dd:e1:fb:
                    26:c2:7e:c5:6c:e6:a0:ef:d1:86:35:d4:5c:07:01:
                    36:5a:02:87:83:58:92:cf:9d:41:f7:6b:ab:82:4d:
                    7f:6a:7d:b0:85:b9:30:2a:3a:f1:33:72:c6:cf:cd:
                    35:5a:d2:fd:ef:27:08:12:53:21:18:b3:e9:53:0a:
                    7c:a3:6a:a6:22:e4:b7:c0:d5:e7:66:d7:ed:c1:a6:
                    91:80:c1:15:42:15:00:e9:1d:48:2f:a1:49:ed:5d:
                    db:b5:2d:02:3c:97:fc:db:26:40:37:29:ce:dc:75:
                    f2:4b:86:91:07:4f:9c:4c:64:2a:a5:fc:f4:b1:a0:
                    5e:ab:62:51:b1:fe:70:0c:ff:ce:97:b6:9b:5e:93:
                    6d:71:60:76:9c:88:e5:a8:c2:b2:37:a7:40:80:bd:
                    3e:a4:80:d8:69:f5:24:b7:21:cc:e4:d7:96:e1:fc:
                    5a:d1:ca:33:cc:3a:5e:06:f2:57:b1:7a:69:34:2e:
                    26:83:af:7e:43:fb:03:c4:16:7c:d8:ae:f8:3d:35:
                    3e:de:f0:13:65:e6:7b:87:d0:03:c7:72:a8:fb:99:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2E:12:4B:44:BC:23:E5:1A:B9:49:58:F0:F3:ED:7A:D2:3F:7B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6a:45:39:c6:f2:f8:33:f7:7c:c4:d7:74:b1:aa:49:17:3d:
         59:12:0e:7b:c9:ba:77:28:29:11:ce:6e:16:d5:d8:6a:86:9f:
         c2:00:5e:01:a3:ec:b7:d4:61:79:0b:3a:3b:9d:ca:85:3e:2b:
         ef:42:b1:a6:bb:54:df:21:cb:2f:24:96:00:0f:5c:8b:06:c3:
         95:4c:26:cb:1c:2d:16:df:ea:7d:17:e8:b1:ff:c7:66:0f:32:
         e7:b1:f0:6d:81:b3:ab:73:9a:2e:86:57:f8:68:e9:04:31:b9:
         00:aa:8d:25:43:94:5b:5b:55:88:f3:1d:68:98:de:ad:f2:ec:
         be:77:5a:2b:14:a3:19:cd:f7:59:c7:a9:2d:ad:d2:7c:3e:e1:
         e7:a7:3b:2c:32:f8:ab:0c:46:09:b3:77:62:d3:95:a9:06:51:
         95:65:8c:9a:3c:dd:fa:ab:e9:40:d1:87:7b:76:40:c5:f5:48:
         cf:1a:c0:89:8a:21:7f:26:e4:6e:35:1c:13:86:ac:c2:cd:f0:
         00:61:48:fd:98:cc:64:d0:94:21:b5:e8:96:f9:dc:a4:84:40:
         da:d1:ac:96:82:b7:0b:38:46:b4:ce:73:29:cb:d8:9d:03:99:
         cc:2d:71:db:40:7f:a5:94:2d:09:1f:fd:21:0c:de:9e:6f:95:
         0c:d6:ec:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:26:04 2025 by rpki-client