Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/257bba9c-737b-32f8-afa2-28d7618d1067.roa
File:                     257bba9c-737b-32f8-afa2-28d7618d1067.roa (raw, json)
Hash identifier:          vc60X8T49jyFoGl+3am51BmXk0qyl2XQUu5II6jKPoI=
Subject key identifier:   1D:75:39:2E:27:9C:F3:8E:79:0C:E5:D2:32:23:0A:0B:B1:15:D6:7B
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584B2496DBB972A68D5FD7037180
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/257bba9c-737b-32f8-afa2-28d7618d1067.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     54994
IP address blocks:        168.235.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:db:b9:72:a6:8d:5f:d7:03:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=24cca521-3e7e-4163-bb89-7510555c02a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:88:c0:3e:3a:0d:70:b4:58:34:65:09:22:
                    65:cc:b3:16:1f:2f:7f:0c:87:f4:a3:52:ec:41:2e:
                    8f:77:42:2b:d3:00:91:1e:b9:5c:fc:b1:48:a8:76:
                    14:69:0d:a1:81:29:80:2b:07:4d:54:6a:f5:46:1f:
                    02:22:27:0c:ed:58:dc:bd:f3:a8:49:99:8c:ca:3a:
                    a2:79:3c:6b:52:ef:75:af:de:c0:65:29:42:33:02:
                    07:ba:77:28:f8:bc:62:28:7e:35:b8:b1:9f:8b:8b:
                    0d:8f:62:cb:f4:cf:5a:c7:82:77:2e:3e:8f:0c:8e:
                    ec:e0:f1:66:63:13:9d:22:90:77:0d:a7:30:ca:07:
                    ca:90:23:9f:4a:b3:59:98:15:36:1a:4a:f8:2c:a3:
                    a2:cf:a5:16:6f:6f:51:2d:2f:94:c3:1b:44:ed:e2:
                    90:0f:a5:6c:8f:5a:c4:cc:a1:03:72:a4:58:0d:1f:
                    c0:d2:24:a1:1d:37:73:5c:a7:15:fa:f2:5a:f5:32:
                    ed:f8:6a:83:91:05:b8:01:80:19:3a:16:cd:78:eb:
                    b5:e6:2c:44:a1:34:94:df:4c:a6:37:f6:f3:ea:45:
                    f0:03:38:c7:1e:c1:cd:3e:79:97:71:3b:ce:03:66:
                    61:f3:f1:d5:1e:5e:de:68:50:9f:b8:41:fb:2e:3c:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:75:39:2E:27:9C:F3:8E:79:0C:E5:D2:32:23:0A:0B:B1:15:D6:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/257bba9c-737b-32f8-afa2-28d7618d1067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.235.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:36:08:fa:dd:b7:46:d9:76:4c:73:16:5c:e1:37:b0:00:d0:
         22:fe:63:01:a5:3d:a0:57:3d:63:9f:29:17:38:93:63:1e:65:
         0b:b8:9c:e7:36:9d:1d:2b:9f:c7:28:e9:16:22:73:1f:af:4d:
         e1:03:a0:5c:10:b5:0e:a1:59:e2:42:91:2d:9e:98:75:55:5d:
         7f:1f:c7:31:7c:4e:3e:1c:80:95:36:c0:09:0c:04:0b:57:96:
         65:2f:06:fa:9e:b1:22:28:8e:76:aa:85:72:fb:93:ce:6d:bf:
         f1:ea:48:81:8e:22:57:9e:82:4d:cd:ad:c5:be:45:ce:93:1d:
         02:6a:a5:e3:2e:fd:34:52:eb:ac:1f:08:63:e7:7b:a2:b4:c7:
         1e:bd:7f:f1:aa:55:02:4a:8f:c5:7b:24:e1:53:4b:3e:8f:24:
         c7:5e:42:5a:e8:1c:ab:af:5f:9e:1f:16:8b:73:25:1c:9b:90:
         f1:a8:f5:c8:6b:a5:7e:82:6f:4b:60:4e:6c:de:39:bb:fd:5e:
         24:5b:42:27:d5:aa:2f:c0:f4:8a:ed:45:be:18:c4:cc:d6:99:
         e4:c8:33:ed:0f:89:39:23:50:5c:b3:49:07:9d:1f:95:e2:e1:
         e2:40:50:e3:88:f4:6e:10:e0:06:14:5f:92:04:ed:15:e5:50:
         53:25:91:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:42:14 2025 by rpki-client