Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/e5243efb-e03b-3d00-b86b-6208d15b0295.roa
File:                     e5243efb-e03b-3d00-b86b-6208d15b0295.roa (raw, json)
Hash identifier:          WK9bTf0mlQ8ArNYoazAyniHySK3l3QsBFv6XBNo6e6o=
Subject key identifier:   D4:6E:03:51:81:BD:E3:D2:7E:3E:95:0D:E6:D1:2F:EF:32:A3:19:31
Certificate issuer:       /CN=4884cca8-e13a-4d48-82af-7839862b6341
Certificate serial:       010D0C9F4328584B21CC296B283748597779CE20
Authority key identifier: 5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/e5243efb-e03b-3d00-b86b-6208d15b0295.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        192.68.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:29:6b:28:37:48:59:77:79:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4884cca8-e13a-4d48-82af-7839862b6341
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=8707aaed-e547-4279-a60b-681bb73e9911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:e7:ed:4c:ad:25:85:87:88:74:4d:18:64:
                    de:b0:f8:91:9b:71:83:83:2c:37:b4:53:2b:43:50:
                    d0:e2:c9:e9:10:37:7c:4a:d1:54:af:53:73:dc:ea:
                    96:e3:f6:1c:ab:6d:78:13:00:e5:a8:0c:20:58:5a:
                    12:5d:9f:4c:fb:e6:8d:fa:53:99:9b:f8:8f:1b:1d:
                    2b:ac:03:ef:fa:fb:93:50:b5:21:e2:4c:bf:3c:54:
                    35:c3:0b:dc:02:d5:ba:eb:49:c6:43:b3:46:cb:5c:
                    99:07:e0:42:7f:59:2d:ac:a4:4e:41:0e:7b:0c:60:
                    43:68:fa:15:66:de:cc:72:93:74:89:81:c5:a3:69:
                    72:9e:f8:8b:38:e5:e6:31:49:05:0c:d1:58:cd:97:
                    66:0e:9d:28:2d:25:9f:92:c0:b5:7c:e3:8f:cb:78:
                    76:56:10:4b:47:f7:9d:0e:50:7c:92:5e:fe:43:50:
                    fe:9a:02:f4:42:80:0f:f4:bc:c4:25:3e:ff:6d:ae:
                    51:df:e0:59:d0:75:c8:2a:9d:fb:1c:a0:d9:0f:39:
                    e6:fc:c0:18:cc:34:45:72:10:93:8f:ac:25:76:65:
                    6a:c5:48:75:de:33:14:62:29:f4:ca:86:5b:ce:0f:
                    a8:4f:17:d9:18:1a:bd:f5:58:c6:19:6e:ad:3d:8c:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6E:03:51:81:BD:E3:D2:7E:3E:95:0D:E6:D1:2F:EF:32:A3:19:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/e5243efb-e03b-3d00-b86b-6208d15b0295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b0:0c:7e:4a:50:93:8a:e0:7a:9e:21:b7:ef:a9:8a:fc:e2:
         3e:71:4a:e6:d9:fb:1e:b4:8d:dc:1e:de:04:5c:8a:55:0d:e5:
         34:21:30:e6:cf:44:2b:3b:37:91:6e:bf:b7:72:a9:07:2c:56:
         14:b4:fa:d1:cd:12:1b:a3:42:ea:f9:ea:7c:3c:db:2e:01:5a:
         7e:5f:fc:9f:14:ed:dc:7b:cf:72:16:e2:78:f4:75:57:31:5b:
         bd:33:e2:61:35:4b:a1:3d:91:5a:ce:68:51:74:51:3a:dc:c8:
         a7:14:a4:b7:75:d9:95:43:de:8d:e5:30:12:53:fd:f7:0c:c4:
         34:d6:fa:78:a1:7f:71:71:82:84:3e:40:66:a2:8a:bf:9d:bf:
         56:4c:aa:99:67:13:a0:d4:19:e8:03:1a:b0:e6:b5:a7:ee:f2:
         78:e8:f5:dd:a7:0b:ae:3f:ae:5e:fc:31:65:a4:cc:e7:72:00:
         42:89:b9:09:ec:78:f8:e0:9f:28:32:d6:87:13:36:c3:6e:ee:
         4e:45:c5:a3:5c:29:8d:fc:35:c1:c4:fe:fa:95:46:6b:a3:1c:
         d6:1c:f6:04:ee:7a:fd:bd:3a:c2:5b:8e:cc:57:ad:d8:77:a8:
         8c:56:c9:1a:67:ac:e1:00:5b:ab:b2:53:88:51:78:a7:e0:2c:
         5f:cd:62:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:06:59 2025 by rpki-client