Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/01d09bb1-7c77-3f8b-9577-e2b18969eb86.roa
File:                     01d09bb1-7c77-3f8b-9577-e2b18969eb86.roa (raw, json)
Hash identifier:          fZ/iFyPlzS5BYtv1fqX0gH47Chi8HGfZl01HeflIDvk=
Subject key identifier:   AE:31:0D:8A:FD:AA:31:24:3F:80:5E:A1:52:8A:B0:B4:1A:9D:54:C2
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584B87B21C228A74402834866A40
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/01d09bb1-7c77-3f8b-9577-e2b18969eb86.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     55178
IP address blocks:        192.230.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:1c:22:8a:74:40:28:34:86:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=55a5bc87-a24f-47dd-b697-43fd625a3edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:bc:52:8f:f1:3c:89:fd:9a:74:7a:78:5f:
                    c1:2e:ea:80:df:f4:1c:00:3b:f8:34:5b:e2:4b:8f:
                    cb:b0:97:19:80:dc:4e:c4:92:74:c8:8a:89:4c:6e:
                    0d:df:1a:97:2a:14:1e:35:67:36:70:9f:27:72:b4:
                    9e:66:00:55:8f:fe:50:b4:63:ca:d7:54:ef:36:e6:
                    b6:09:d1:50:87:d4:88:b9:23:d7:af:4e:66:7b:95:
                    fe:a9:e5:87:d6:b7:4d:17:f6:02:8a:9f:90:7c:71:
                    83:0e:83:9a:bb:08:25:dd:d1:ec:b5:ba:e4:ed:36:
                    22:eb:25:48:6c:7e:db:ce:4f:0e:eb:57:e9:f8:03:
                    94:0e:3a:dc:df:fd:c8:df:f0:86:32:05:82:ae:6f:
                    ce:f4:4b:59:74:ec:c7:8c:cd:0a:02:9c:8f:0b:98:
                    b0:fe:0b:c9:20:4e:88:c4:da:b1:74:71:12:76:2e:
                    fa:1b:0b:bc:0b:32:3c:7c:b8:a9:2b:e3:37:fd:c4:
                    e2:59:a2:6a:20:86:38:b6:8e:f4:ea:3e:55:3a:ff:
                    f6:20:f0:56:60:8c:b6:7d:43:da:c8:f5:1c:d6:34:
                    67:28:f1:e4:83:a5:4f:ef:5a:15:0e:bb:64:b6:a9:
                    de:f1:58:ed:3d:94:dd:44:38:ac:47:33:7d:f7:be:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:31:0D:8A:FD:AA:31:24:3F:80:5E:A1:52:8A:B0:B4:1A:9D:54:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/01d09bb1-7c77-3f8b-9577-e2b18969eb86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b0:27:d4:28:ea:c4:c6:d6:d8:5b:ce:10:a0:03:26:cc:9b:
         92:68:7d:f7:4d:97:f2:63:07:61:cf:dc:1b:aa:1c:15:b6:4b:
         3d:68:b5:f0:f0:2c:2a:07:0c:bd:85:64:33:45:c4:6b:d9:b9:
         8a:97:f9:8a:2b:95:17:63:30:89:6c:53:e9:27:5b:87:81:f0:
         9b:9e:da:04:36:29:0e:dc:17:81:1e:bd:43:90:71:34:d9:2a:
         2c:e3:3c:2a:57:49:b3:2e:da:7a:55:cc:b0:92:f3:06:3f:6c:
         69:81:f9:19:1f:71:2d:ed:ba:d3:9f:de:5c:31:e0:68:b6:85:
         ae:b7:55:de:cd:0f:40:33:23:d9:3c:d8:47:a1:40:92:66:1f:
         cf:df:24:c0:85:8f:78:83:7b:d1:8c:b5:73:8d:f3:b6:8f:67:
         ad:14:9b:ce:b9:6b:72:46:ae:63:ea:66:23:6f:cd:6c:49:9f:
         de:20:40:77:51:15:5c:b3:cd:f4:62:c9:cc:12:1c:fb:4a:ef:
         fc:0d:ad:39:ca:c4:2c:83:b8:33:2c:ab:0d:aa:eb:55:78:c4:
         cd:97:d1:29:76:4f:d6:c0:dc:da:24:02:e0:52:97:76:0b:43:
         e1:3a:92:9d:3e:c4:90:32:65:87:e1:4e:28:3b:f3:b1:03:f1:
         78:7b:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:05:42 2025 by rpki-client