Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/f188524f-d4f1-39b5-9a52-fbbd10d25950.roa
File:                     f188524f-d4f1-39b5-9a52-fbbd10d25950.roa (raw, json)
Hash identifier:          5jos/XF2Ru9C1m541lOKQinC8BRDVcJik90lQ9mUZ7c=
Subject key identifier:   97:6E:45:4E:44:60:7A:22:C5:A7:26:F7:85:6B:DD:D7:36:55:ED:64
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584B8EACECBC2A1882A87FAD6AC0
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/f188524f-d4f1-39b5-9a52-fbbd10d25950.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     394927
IP address blocks:        204.155.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ec:bc:2a:18:82:a8:7f:ad:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=a9813d58-5858-435f-8039-aadc86f34049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:04:c8:ab:6a:05:47:2f:ec:65:fd:83:3e:
                    b8:27:e3:6e:60:b8:bc:3c:6f:88:35:12:3e:6a:8b:
                    8d:ca:4b:b9:c1:53:0b:f9:7d:fb:07:8a:23:7f:b9:
                    cf:ef:9f:03:8c:ba:c4:0e:36:24:da:c0:2d:3c:c7:
                    27:08:a4:44:6c:08:21:39:64:0d:0e:47:d2:d0:50:
                    52:a6:fc:ee:7c:d6:40:85:98:7c:06:f1:ff:cb:70:
                    a9:08:df:09:e5:65:37:d9:f1:94:8d:81:91:b4:78:
                    2b:81:ec:3c:4a:e7:39:b3:8c:4f:09:2d:7c:25:5a:
                    2f:b2:9c:e8:72:c4:b3:ab:ba:2d:98:5c:88:f0:69:
                    b0:3d:d1:75:05:2a:2b:8d:21:f4:73:5c:73:04:98:
                    e2:ad:34:5c:fd:6e:d7:cc:c4:bf:39:3b:30:74:4a:
                    86:df:b1:06:37:26:56:5b:24:e6:4e:24:8f:01:b9:
                    68:8b:b2:c1:b7:e5:53:cc:ff:46:78:54:4d:4e:02:
                    48:6a:60:77:1d:29:d7:29:cb:6d:ca:bf:2c:2b:61:
                    61:db:1b:2f:8e:53:51:f5:17:96:39:c9:24:2e:0c:
                    a0:48:e6:3c:27:b3:08:32:e8:83:6e:bc:09:72:4d:
                    73:a3:40:0d:36:66:1b:d2:d5:79:6e:21:56:88:d8:
                    73:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:45:4E:44:60:7A:22:C5:A7:26:F7:85:6B:DD:D7:36:55:ED:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/f188524f-d4f1-39b5-9a52-fbbd10d25950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:7a:4c:13:6d:d7:98:6b:2c:42:fa:4e:76:3b:87:9a:20:
         33:64:60:be:72:b3:87:a0:02:7c:69:b0:52:75:e4:f6:19:73:
         5e:05:81:a8:e3:02:fa:a5:d9:8f:5a:88:58:7b:b4:92:df:98:
         e1:74:1a:f9:25:a1:d2:a1:2d:4b:2a:6d:a5:89:91:a6:f2:16:
         6e:a8:8b:9a:2d:20:be:0a:15:46:37:1d:90:73:80:d9:14:64:
         7c:27:ef:29:6a:f4:16:72:1f:25:67:5c:76:52:84:8a:c6:d3:
         6e:b9:97:40:d0:c5:3c:22:09:8e:c1:16:bb:3a:7f:1d:41:f6:
         8c:02:95:67:7a:f7:2b:2c:b7:f9:30:a4:da:18:4c:24:18:9a:
         40:27:1e:eb:23:9a:ae:3b:7e:a8:63:94:c3:8b:80:8f:42:12:
         3e:df:b9:89:b3:6f:d1:39:f8:e0:ee:d5:53:d4:69:5e:4c:b3:
         ec:f6:86:dc:b3:09:fb:24:a0:d5:fc:b0:03:98:c9:a8:1d:88:
         14:17:ee:51:a9:55:90:22:40:f5:e2:ee:88:7c:8a:1e:d7:aa:
         c1:67:8b:02:aa:0e:07:73:5f:9f:cc:09:c3:0b:11:62:1a:90:
         e1:4d:ba:e3:7d:cf:be:b0:8a:fa:85:85:e9:ea:84:d6:82:eb:
         5d:2f:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:18 2025 by rpki-client