Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
File:                     6f6c6da7-938f-331f-aa19-5573ef780ea3.roa (raw, json)
Hash identifier:          GYZyos6VOfBmfZSFT/gvjEhau4Zx1xHdUr+51HyPElw=
Subject key identifier:   84:A0:AB:B4:E5:24:DD:82:8C:C1:A5:94:4F:BD:19:01:2B:5A:A2:3E
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F4328584B7C8763968E67422A5C0C31E0
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     397913
IP address blocks:        192.148.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:63:96:8e:67:42:2a:5c:0c:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=da623cb1-cd39-4d2b-9fdf-05a786cea755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:94:d8:53:6f:bd:06:b6:f4:70:83:8b:5e:
                    24:29:4b:4c:d9:b9:d4:97:90:06:cb:c5:43:56:09:
                    af:bd:44:a9:9b:8b:17:b8:6b:f9:85:b4:46:d0:72:
                    81:c5:5f:bc:a7:ec:f7:0d:18:3e:3e:5a:d5:2d:91:
                    fd:f2:05:14:43:a5:a5:57:bd:13:26:75:89:a6:80:
                    a3:28:4e:94:51:23:4a:7a:88:92:2e:dc:4b:26:b0:
                    32:67:dc:d4:43:0b:99:73:68:c2:19:e2:86:53:86:
                    c4:7e:4b:47:ec:0c:67:08:44:a3:e0:8f:0a:77:1a:
                    fd:10:2e:68:cd:06:0b:cf:9a:5e:b2:d6:a5:94:32:
                    f8:0e:2a:c5:09:72:6e:b9:83:c1:ef:8f:ec:12:02:
                    b4:00:3b:aa:01:76:05:fa:1e:60:0d:ab:cf:e9:a7:
                    aa:0a:e3:fe:48:d2:6b:2d:6a:39:26:a7:df:18:43:
                    eb:c5:97:8d:ae:74:73:d1:da:de:17:68:b2:3b:f7:
                    e1:9f:d8:58:77:d6:8b:fb:1c:e7:60:73:e7:cd:85:
                    54:20:64:92:98:74:de:a2:6a:6d:ce:11:42:72:1c:
                    ed:56:37:f9:0c:68:67:5f:da:d6:d9:32:25:29:76:
                    8d:2e:e0:55:c4:fa:e4:ca:4a:be:0c:ab:96:cf:14:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A0:AB:B4:E5:24:DD:82:8C:C1:A5:94:4F:BD:19:01:2B:5A:A2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:47:1a:91:01:7f:e3:59:ae:cc:ab:9a:e4:bf:bb:04:38:1f:
         53:da:58:af:96:73:38:48:98:05:86:66:9a:7d:0d:a1:a3:32:
         bd:7a:5c:9c:20:e3:4a:36:74:31:20:f1:7f:5d:b1:a6:56:76:
         67:92:77:64:ed:57:9b:08:e5:33:ae:03:56:89:75:d0:66:c5:
         c4:db:29:0f:28:6b:2c:ee:8b:a2:5d:3c:cd:fa:28:26:3b:07:
         d6:ea:a3:08:1e:87:c9:3d:28:f2:78:7d:5c:d8:13:57:98:bf:
         ed:17:da:1a:94:9a:24:65:f1:b9:dd:42:80:cf:a4:77:2e:1f:
         c6:18:25:f2:5d:88:9e:c3:b7:b3:5d:75:95:3e:a7:7d:b7:50:
         c5:56:43:68:97:98:f2:10:0d:1a:3d:ea:3d:93:63:6b:aa:c5:
         55:d4:c6:b9:4e:7b:7b:9a:c9:15:d2:fe:61:cf:76:c4:d6:d6:
         09:6c:45:26:7d:a4:22:dd:fd:b7:95:5c:d6:9b:c0:ea:3f:ac:
         4a:a5:d7:76:64:36:bd:15:9c:b5:91:bb:cc:d4:14:e1:19:42:
         f6:11:95:62:db:11:b3:b4:12:1e:e1:cf:40:55:b7:1b:6e:3a:
         00:f8:47:06:53:d3:66:1d:6c:9e:9c:13:74:0d:3b:29:37:ac:
         4c:95:3c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:05:29 2025 by rpki-client