Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d0740821-c0fc-3e7c-ac29-2d0403368ff2.roa
File:                     d0740821-c0fc-3e7c-ac29-2d0403368ff2.roa (raw, json)
Hash identifier:          KG7B2D8lWOPdTDgqpgUtX11xJeZach9RrEElv9GBoDQ=
Subject key identifier:   04:14:D1:53:67:C6:06:30:FA:33:0B:61:89:F9:71:B9:3F:FD:76:58
Certificate issuer:       /CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
Certificate serial:       010D0C9F4328584B796B26AB83F59015B55F0150
Authority key identifier: 84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d0740821-c0fc-3e7c-ac29-2d0403368ff2.roa
Signing time:             Fri 10 Oct 2025 10:16:24 +0000
ROA not before:           Fri 10 Oct 2025 10:16:24 +0000
ROA not after:            Thu 08 Jan 2026 11:16:24 +0000
asID:                     49592
IP address blocks:        192.88.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:6b:26:ab:83:f5:90:15:b5:5f:01:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
        Validity
            Not Before: Oct 10 10:16:24 2025 GMT
            Not After : Jan  8 11:16:24 2026 GMT
        Subject: CN=86888b49-3f72-4975-9683-556447ea2d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:94:74:20:e9:8a:24:5d:ef:cc:1c:d4:40:
                    cf:30:2d:b8:b9:35:a9:f7:6e:fa:e5:d4:0d:e8:1b:
                    3d:a2:52:f3:2b:b9:e2:c2:34:24:95:c3:46:e6:cb:
                    06:cb:26:87:e1:7f:10:20:0e:a8:d7:65:5c:65:2a:
                    fd:3b:bb:63:ba:d6:67:fd:24:f3:ac:12:3e:72:f9:
                    66:16:1c:5a:5d:e5:70:0e:1f:92:73:1a:7b:76:94:
                    d9:34:ce:8b:9f:12:42:75:05:53:97:6c:00:51:16:
                    3a:8d:c7:3d:81:e1:43:fc:f5:14:a0:20:9c:b7:00:
                    01:81:60:5b:38:88:d8:d7:27:de:0e:87:9b:52:97:
                    25:a9:69:e5:b0:df:25:4e:a7:11:da:46:b6:2b:98:
                    c8:27:e5:1d:fa:1e:d9:c4:ef:f2:1b:37:51:81:6e:
                    56:7d:8c:12:dd:17:06:de:12:1f:5b:8d:36:ed:54:
                    5f:53:e9:ab:d9:37:29:d5:b5:2c:dd:d4:59:03:5c:
                    31:d7:e6:dc:b2:64:40:32:99:2c:da:33:08:39:e3:
                    65:1f:9b:a4:c6:0d:17:ac:9b:9d:05:70:1b:ea:e9:
                    db:3f:0b:c8:70:58:f1:7f:b4:da:d0:25:33:2a:00:
                    76:f7:d8:a2:28:56:9c:62:b1:a3:11:31:46:bf:f9:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:14:D1:53:67:C6:06:30:FA:33:0B:61:89:F9:71:B9:3F:FD:76:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d0740821-c0fc-3e7c-ac29-2d0403368ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl

            X509v3 Authority Key Identifier:
                keyid:84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:cc:a1:36:85:02:bb:e0:cf:2b:f3:57:7e:3e:b6:8c:37:
         44:e5:b1:94:29:06:e4:4e:19:51:61:68:fa:a6:4e:14:65:cf:
         15:ee:f1:d6:dc:f1:27:bc:8f:0a:c6:af:52:7d:6d:4b:c3:b7:
         af:48:8a:a9:ba:02:86:e6:9a:85:70:5a:83:c4:17:a3:1f:0a:
         8c:b0:aa:a9:85:89:43:49:03:7a:98:23:6f:b1:a9:cc:9f:a2:
         23:4e:73:b8:7e:0e:1e:e3:90:5f:85:7d:4c:56:dd:04:ce:f4:
         52:11:d3:06:ee:2c:4c:4b:ef:bc:d7:48:41:80:43:3c:64:59:
         47:ab:c9:67:94:71:5c:c9:d9:0b:ad:19:a1:66:eb:53:a6:c0:
         b9:69:8e:00:92:98:89:f3:c7:d9:c5:b5:e0:12:b4:27:c7:fa:
         a9:64:8f:58:d4:5c:79:fa:cd:0a:a7:27:23:8a:ca:c2:82:a8:
         71:93:f8:de:51:ba:92:83:cd:54:de:9d:92:04:7e:b1:01:73:
         05:cc:16:3e:de:14:0b:26:17:48:0c:e4:35:2a:f0:22:d0:ea:
         ff:04:63:8e:c9:21:40:6d:e8:7a:87:19:b5:27:e9:d9:d3:d3:
         57:67:b0:2e:b3:38:02:70:bd:cb:44:19:54:de:2f:18:fa:80:
         9f:cc:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:22:15 2025 by rpki-client