Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/752c601a-7e44-38fa-a562-2121c064f9d3.roa
File:                     752c601a-7e44-38fa-a562-2121c064f9d3.roa (raw, json)
Hash identifier:          4SHRo7ValLFkrf2HqHzsFQ8wMX3vlWWIcHTSNiNMKRA=
Subject key identifier:   A5:27:30:BA:49:DA:06:2D:79:6D:07:12:A2:11:38:CB:F4:7C:14:A2
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584B4081AA1895D4B728F98265C0
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/752c601a-7e44-38fa-a562-2121c064f9d3.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     393573
IP address blocks:        192.254.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:aa:18:95:d4:b7:28:f9:82:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=81b96c2f-6378-49b1-8c35-4de4abea808d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:83:ee:93:20:10:6f:a7:3b:f5:c6:a3:2b:
                    12:b5:ad:76:54:96:ee:05:28:d2:98:65:34:54:95:
                    d3:b4:3a:13:30:6f:55:6f:ae:59:ee:13:33:2c:c6:
                    c4:53:ca:54:f6:25:8b:9d:00:2c:64:d3:d6:81:02:
                    e4:04:97:79:dc:a8:c5:da:2d:a3:50:e1:49:1e:23:
                    97:fd:96:64:e3:48:9f:10:90:27:8e:e5:01:97:f1:
                    e3:3e:85:37:df:73:eb:26:81:02:97:ce:a1:de:c2:
                    4d:f1:a4:47:70:83:bc:3f:af:d1:68:0a:a3:fb:ac:
                    bc:af:5e:cc:7b:8a:30:d0:88:cc:d5:68:34:cd:bb:
                    b6:32:e1:61:a3:41:52:3c:03:82:ee:72:aa:29:be:
                    e3:64:5d:0a:4b:07:72:58:03:8a:5d:93:74:3d:3c:
                    61:f7:a6:e1:44:97:3f:30:1d:e7:d0:6f:89:93:ba:
                    1b:a4:d7:db:f5:e5:6d:f2:c4:3d:e4:ca:1b:32:6e:
                    04:89:41:f7:e8:1d:79:67:70:73:d2:7e:42:fd:73:
                    7f:68:46:7c:29:5f:f4:f4:f5:6d:c3:99:80:5b:e1:
                    b6:e1:d3:f8:da:29:4e:24:42:ec:8e:c9:c5:2f:fb:
                    c7:ff:5d:b8:8d:96:22:4a:5d:a4:ae:48:36:99:45:
                    b0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:27:30:BA:49:DA:06:2D:79:6D:07:12:A2:11:38:CB:F4:7C:14:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/752c601a-7e44-38fa-a562-2121c064f9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.254.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:53:d3:bd:d1:bf:d8:5b:5d:92:fd:04:08:d3:32:5c:96:f1:
         41:22:10:b3:24:da:f4:65:87:6a:ad:7e:7f:26:b4:0e:0f:03:
         b7:4a:c0:03:5c:0a:30:b7:9a:29:45:d5:e8:29:c2:b3:4a:8a:
         06:b1:33:80:ae:6c:65:eb:ef:7e:0b:16:4d:35:00:10:b1:93:
         8d:b0:fb:25:cf:d9:c6:9b:02:a4:02:73:7e:ae:73:d8:9d:70:
         fd:bc:05:3f:b5:68:74:37:99:83:3b:4b:2b:fd:7c:74:35:c4:
         f2:e7:4e:f9:b8:e5:89:b1:dc:2f:2b:30:45:23:39:60:2e:53:
         3b:78:b8:e4:0b:fd:79:6d:6c:40:e6:80:6b:ef:87:65:2b:af:
         7e:ae:df:11:1e:d8:c5:d2:38:70:89:a2:49:81:f3:92:1c:e6:
         92:2e:a0:44:a0:29:5f:91:2f:84:9d:20:db:9f:d5:e1:d9:cb:
         23:48:46:1d:64:54:8b:55:f0:76:9b:16:cd:be:f7:1b:ca:aa:
         1d:f9:ca:38:d6:83:55:fa:cd:c9:fe:90:59:22:76:92:7f:b2:
         a7:e1:09:62:20:91:1a:74:59:4a:d3:d2:c5:6d:f9:16:17:1d:
         08:04:92:12:0f:f0:c4:8f:1d:6d:e3:1c:35:1b:09:9b:8d:0a:
         9c:bc:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:33:46 2025 by rpki-client