Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b755758c-60d2-3554-b997-d3dfb30c1403.roa
File:                     b755758c-60d2-3554-b997-d3dfb30c1403.roa (raw, json)
Hash identifier:          7N+V9/1LmCDmdqQDNRtsjPtse2pcjFccAx9KdNBqrZI=
Subject key identifier:   26:A1:DA:84:B6:52:DE:9D:6F:36:38:04:4B:33:DE:4D:C3:0C:1C:5C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B85904C2C889811A55F665F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b755758c-60d2-3554-b997-d3dfb30c1403.roa
Signing time:             Tue 14 Oct 2025 18:40:57 +0000
ROA not before:           Tue 14 Oct 2025 18:40:57 +0000
ROA not after:            Mon 12 Jan 2026 19:40:57 +0000
asID:                     262328
IP address blocks:        198.242.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:90:4c:2c:88:98:11:a5:5f:66:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 14 18:40:57 2025 GMT
            Not After : Jan 12 19:40:57 2026 GMT
        Subject: CN=4c020d53-9d20-4f85-a95d-06102a374306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:93:ce:70:7d:9a:2c:f7:de:b8:8f:ce:f3:
                    cb:96:1e:04:65:16:bf:67:55:43:e3:2f:d6:23:3a:
                    44:11:c6:ca:1e:ac:d6:f2:4a:18:65:9f:a7:0e:cf:
                    99:71:27:a2:56:17:4d:47:4b:05:e8:05:db:22:59:
                    bf:ef:95:9c:bb:07:ab:2a:f2:ff:5c:18:2f:8a:e5:
                    42:1f:9c:eb:69:5e:6c:f7:83:4b:6c:46:f2:af:35:
                    23:b4:0b:4d:e6:e1:23:2e:7d:b4:76:f5:af:91:6c:
                    33:70:52:e8:f0:e3:a2:fb:68:40:2c:3c:94:13:41:
                    52:5f:bf:68:01:bf:ca:3b:3a:a4:b1:1c:e9:22:9c:
                    bc:b7:3b:2c:c9:b8:35:fc:48:48:db:df:6c:bb:21:
                    03:14:db:be:fc:3d:e5:30:24:21:47:17:1a:0a:31:
                    bc:81:eb:2f:c0:e1:4d:e7:23:c9:4e:f6:27:14:79:
                    b2:f4:e9:e5:5c:85:9b:58:6b:b5:a2:87:f6:21:be:
                    ee:b7:ae:e9:94:96:a6:30:b1:db:a7:8a:e3:9b:47:
                    e8:ef:c0:2e:66:b3:03:3c:13:9c:d7:7c:52:ce:95:
                    0f:cc:cb:9d:65:e9:99:37:80:a4:28:19:eb:70:07:
                    e6:54:a4:b3:26:c7:61:56:43:0d:f8:5f:c1:11:9a:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A1:DA:84:B6:52:DE:9D:6F:36:38:04:4B:33:DE:4D:C3:0C:1C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b755758c-60d2-3554-b997-d3dfb30c1403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.242.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:97:9e:c2:bc:7d:35:29:6c:df:a2:49:f6:28:e3:e1:17:1f:
         d1:58:72:92:9f:cf:be:b3:3f:38:d3:af:26:33:dc:9a:a2:83:
         63:75:70:b0:34:77:8e:80:48:52:e2:e5:4f:59:46:f2:f9:00:
         a0:ac:54:c3:74:7b:8a:0d:c0:00:3a:c1:d8:9b:b7:a5:2a:e6:
         05:0e:13:e5:b9:0d:a9:a5:06:d1:ea:f5:f4:69:9a:78:3e:a9:
         85:2a:26:47:55:66:c9:cd:91:6a:ff:2f:bf:73:be:6f:c0:c1:
         a2:83:12:3b:de:5a:fb:69:9d:55:be:b6:e9:98:30:42:e7:36:
         a0:60:61:00:45:8b:84:2a:d4:65:ec:40:93:2a:09:a1:8f:33:
         54:40:58:0d:94:99:ac:3a:da:a0:8d:39:b3:20:02:1b:41:1c:
         e4:ba:6b:ba:1e:f7:a1:8b:3a:20:b7:90:c2:6b:e9:69:41:a9:
         01:8b:5a:eb:47:cd:48:d5:a7:c7:ac:f7:29:8e:e8:8c:26:68:
         17:17:c3:d6:ae:66:c0:5a:cb:16:f9:71:b5:2e:ea:79:2e:4b:
         94:1c:41:34:4e:a6:b6:ea:60:74:73:42:2c:35:27:8f:e0:ce:
         26:43:59:6b:65:5d:34:ba:d7:d4:ab:a7:de:71:60:a7:39:03:
         b0:ea:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:09 2025 by rpki-client