Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa
File:                     685237db-c4d0-36bb-974d-c4141e668c5d.roa (raw, json)
Hash identifier:          HabxeeQAAGkPtFqZmgOBWRUrsc0WnUcDcuUyM5cUHLk=
Subject key identifier:   66:90:3A:5A:23:C1:B2:21:DD:19:33:AB:CF:83:2C:30:60:98:C4:F5
Certificate issuer:       /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Certificate serial:       010D0C9F4328584B583C820B9608315195BFC5A8
Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     394141
IP address blocks:        206.57.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:82:0b:96:08:31:51:95:bf:c5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=528ae0e1-b3e5-4277-bf0b-655f81edcd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e0:fa:a5:48:15:bd:40:e7:6d:9e:68:1f:96:
                    21:a7:6f:ca:fb:e1:d3:99:2d:72:c2:07:ce:91:d8:
                    16:08:9d:b4:d3:61:e5:41:b2:d8:ea:8e:f8:05:af:
                    d6:5e:0d:fe:ca:c1:76:39:7e:ed:b2:6b:02:ed:4f:
                    6b:33:b0:93:50:bc:40:4d:6d:1a:96:59:2f:48:8f:
                    9e:5f:68:95:2e:1c:37:79:c9:3b:e2:ba:b7:c3:02:
                    22:ac:b7:da:f6:3f:51:3d:89:34:6d:2a:55:01:11:
                    f6:88:79:a8:08:80:2a:59:22:89:f1:2e:bc:03:20:
                    04:a8:bf:03:7e:71:90:e5:5a:72:a3:ff:a8:c6:5d:
                    75:26:98:5a:03:34:92:63:7f:33:ee:47:ec:b1:03:
                    19:82:b9:6e:5b:ab:a2:cb:ba:f5:2c:c7:45:a1:91:
                    14:5d:9b:ba:9a:11:1c:75:08:d8:33:ed:b6:71:e2:
                    75:f5:e3:ab:07:61:a8:86:40:5b:94:1b:41:b5:d6:
                    ac:38:79:4e:af:05:7a:46:13:b9:b6:a1:57:62:34:
                    1e:9d:fa:27:99:dc:17:7d:27:ef:82:2a:e9:b7:d6:
                    20:bb:e1:72:9b:ba:07:1a:cd:44:d8:3f:0e:ab:5b:
                    62:e8:03:d4:8b:d4:3a:d5:48:13:03:b0:86:18:70:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:90:3A:5A:23:C1:B2:21:DD:19:33:AB:CF:83:2C:30:60:98:C4:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl

            X509v3 Authority Key Identifier:
                keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.57.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:86:a9:c0:51:d2:a8:42:f3:d2:81:d8:f4:30:ce:fb:fd:04:
         e2:63:1e:52:2d:96:63:38:b0:c4:5b:70:96:56:a8:b6:75:6b:
         71:a4:8a:84:96:8c:17:c3:04:71:53:3e:94:b2:74:fb:d0:db:
         96:6a:d4:e2:d2:56:8d:bc:f3:e6:55:b4:26:c7:7b:21:b4:44:
         f8:8e:3c:57:5b:a2:e4:41:7f:c0:32:c5:7b:aa:40:34:68:38:
         aa:99:07:5d:99:eb:7b:b4:f5:fa:ab:f3:fe:8c:47:3e:8d:66:
         c8:8e:f7:89:d1:2c:b8:b3:6d:ad:3b:4b:eb:4a:e2:6d:cc:84:
         62:4d:e9:7d:a7:49:68:b5:2d:d0:42:d0:9f:26:91:4c:58:4f:
         de:4d:2a:10:66:fd:51:28:c4:92:5d:fd:e0:e8:48:c8:37:d1:
         5f:8a:fb:36:39:bb:1f:f3:d0:ae:5f:94:5e:23:1f:a4:1c:89:
         5a:6f:e1:10:83:3f:56:42:f0:b2:53:a5:62:48:0e:92:da:88:
         88:3a:40:cb:ca:20:2a:4a:7e:85:8f:91:06:24:d9:66:23:dd:
         c4:18:44:8d:d8:26:35:64:e6:6a:49:cb:5a:73:d4:cb:9a:6b:
         ff:13:3c:70:8d:52:2a:30:03:18:fb:d2:c6:75:a3:3f:74:52:
         45:d0:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:51:43 2025 by rpki-client