Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/845474c5-98b4-30e8-b075-80fb762db4b6.roa
File:                     845474c5-98b4-30e8-b075-80fb762db4b6.roa (raw, json)
Hash identifier:          impaotxQLmJXUFLQnMf8p+nlPKlBI4wF7+GrCv/JbY0=
Subject key identifier:   AF:85:6A:AB:BD:FB:C3:3A:74:6D:CB:63:25:90:8F:04:11:84:8C:1D
Certificate issuer:       /CN=4884cca8-e13a-4d48-82af-7839862b6341
Certificate serial:       010D0C9F4328584B21CC297FC26A1A48C6B40600
Authority key identifier: 5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/845474c5-98b4-30e8-b075-80fb762db4b6.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        192.68.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:29:7f:c2:6a:1a:48:c6:b4:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4884cca8-e13a-4d48-82af-7839862b6341
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=a482ff3a-cfb1-4162-a748-ca1c25edf527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:92:10:75:3b:f3:eb:6f:45:40:a8:13:c7:
                    46:56:99:7c:6b:ef:62:6c:02:39:f9:c3:28:d7:2c:
                    b0:9d:13:8e:93:b3:59:71:f4:93:6e:d3:fe:25:7d:
                    2f:bf:7a:1c:c5:1a:52:84:9a:45:74:9d:81:20:15:
                    21:7e:65:87:14:2e:ab:76:ac:4a:eb:1a:d5:ce:a2:
                    fe:b7:1a:8b:8c:94:8d:8f:d4:71:13:cf:16:69:42:
                    6a:88:46:75:3e:06:94:22:1c:29:ca:12:45:9b:e0:
                    13:8a:52:69:4d:e5:b0:81:5c:0a:2d:38:41:94:90:
                    52:3f:2f:a0:5f:d1:07:f6:a9:c7:7f:3c:09:f5:12:
                    22:69:6e:8b:c6:5c:ae:5e:6d:ec:f1:90:b2:2a:46:
                    29:89:59:fe:c9:1f:b6:0e:aa:df:18:f3:94:d1:20:
                    9c:98:57:b0:b8:83:25:ca:cb:a2:bc:78:0f:76:5e:
                    62:e1:69:c8:f5:28:17:f4:fa:02:79:54:2a:43:c0:
                    24:8c:d3:80:a6:14:59:da:34:88:15:37:4c:9b:92:
                    5a:5f:88:07:bc:50:11:4e:5f:34:ed:8b:a7:e1:d5:
                    0b:0f:33:5a:f0:77:fa:e9:ff:3c:c1:0c:ea:aa:7b:
                    69:92:b8:ed:cb:f4:c8:19:37:98:29:35:3a:ad:7e:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:85:6A:AB:BD:FB:C3:3A:74:6D:CB:63:25:90:8F:04:11:84:8C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/845474c5-98b4-30e8-b075-80fb762db4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a5:5d:68:97:9e:20:c4:f0:d1:fb:3b:7d:5c:77:34:ac:d8:
         6f:c8:f8:a3:7c:44:98:dc:0d:bd:23:64:4f:22:4b:4d:d5:de:
         ea:96:30:fa:aa:eb:61:cb:e3:bf:ae:d7:57:64:23:88:a8:90:
         14:94:c8:12:a4:e7:d8:5c:c6:cc:1c:86:0f:79:76:27:ca:7f:
         57:37:32:b3:70:ea:9a:d4:94:3a:9f:56:86:39:b7:58:78:d3:
         9c:3d:e5:9e:da:8c:4b:88:72:0a:4b:6d:33:b6:b6:0b:b3:31:
         f0:61:70:0c:55:92:0a:e7:09:91:84:29:33:38:d5:6a:5f:f5:
         fc:d2:0e:de:83:72:83:80:b7:46:e5:56:96:dd:59:e9:54:cc:
         87:ba:9a:d7:8b:a1:43:20:94:19:f7:bd:41:9b:6d:67:b2:46:
         41:eb:cc:d4:52:f7:16:e3:cf:a7:d5:e0:60:5c:89:55:5d:22:
         2e:b3:f7:93:bd:3a:29:81:10:63:93:69:e7:c6:1f:6c:7f:44:
         a1:1b:66:0d:c5:88:a3:a1:a2:68:03:16:3c:fd:70:af:b1:96:
         af:b4:73:42:b7:15:e0:46:cd:c0:32:5d:c4:57:f1:9c:f1:1a:
         ab:d4:a7:1d:ff:b3:06:45:29:16:eb:9d:80:00:60:fc:86:53:
         cc:f4:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:12 2025 by rpki-client