Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/79614c92-6f4f-3686-9e86-44c15b924a90.roa
File:                     79614c92-6f4f-3686-9e86-44c15b924a90.roa (raw, json)
Hash identifier:          QGBthSZpOkP1g0kuLgoxcv2qWJd0wQhgS3nvXvnluHY=
Subject key identifier:   B6:2D:68:DF:D4:A7:D1:6A:72:DA:D6:3C:C8:6B:B0:E2:AA:0A:08:72
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584B4081A9EFF4E315D4AD9C4E00
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/79614c92-6f4f-3686-9e86-44c15b924a90.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     10524
IP address blocks:        192.254.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a9:ef:f4:e3:15:d4:ad:9c:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=50ccae45-d2d6-42ab-ac6f-d6e7387ea90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:fe:b4:35:2d:3b:18:97:da:80:f3:43:c6:
                    53:8e:d3:ce:99:c8:38:36:52:fd:a5:2b:e2:86:33:
                    78:30:cf:50:ef:ff:27:c0:3f:11:a1:bc:84:89:d8:
                    15:4c:2b:7b:fe:f7:b4:ad:7e:4f:ce:cb:fd:7a:3d:
                    6f:71:b5:0a:3d:a4:9f:6b:f8:a0:48:3a:1b:74:c7:
                    3e:e5:9d:f0:e7:33:55:40:11:82:d4:fa:a9:49:68:
                    6c:3f:25:22:bf:06:6d:87:1a:a9:67:56:0c:91:30:
                    42:3a:b2:2b:74:cf:b5:75:a9:c3:d4:43:8d:c4:57:
                    c4:a5:f8:8a:d6:84:c8:56:63:6a:02:21:84:60:1b:
                    fc:19:c2:b6:39:b2:68:27:61:30:3f:32:b5:f5:c2:
                    5a:1c:12:81:c1:76:bb:bf:c9:98:1c:72:22:6b:b0:
                    f3:e2:9e:c8:4f:0b:e9:c0:d1:61:85:c5:b2:0b:ba:
                    a3:da:42:38:e8:aa:4d:8f:fb:c7:a6:c8:b3:1e:20:
                    18:e8:96:7a:73:36:7a:8d:a5:13:e8:8f:d0:8b:3b:
                    31:06:c2:b2:45:f8:29:f1:a3:4c:53:6f:9d:5a:44:
                    8d:1c:f6:4f:c7:67:63:80:5b:b2:04:ab:39:b1:30:
                    49:40:9d:62:86:8a:6a:ef:9d:f4:17:f2:6d:86:c4:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:68:DF:D4:A7:D1:6A:72:DA:D6:3C:C8:6B:B0:E2:AA:0A:08:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/79614c92-6f4f-3686-9e86-44c15b924a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.254.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:2f:2c:df:ff:c3:d1:17:a9:8a:51:7c:a9:da:a1:16:c4:29:
         5a:06:df:15:f6:87:81:f3:a9:23:1e:56:9a:29:4e:91:92:e3:
         bb:ae:2b:28:47:1e:a7:dd:06:e9:f2:36:0e:31:cf:cb:c9:e4:
         73:91:a4:66:9b:3e:2e:31:43:db:b5:ae:fc:55:79:60:96:b3:
         9a:2a:35:48:b6:13:35:64:37:28:02:19:f6:3c:00:ce:d4:28:
         0e:2c:1f:69:1a:a2:1a:93:fa:35:dc:28:dd:89:1a:b4:15:a8:
         17:1f:b8:2d:5e:fc:b1:60:2a:73:50:23:f1:25:5d:07:ac:fe:
         f7:42:fd:01:a4:35:32:76:b6:ed:a4:88:2e:f9:a5:e2:08:c5:
         88:f4:64:9e:13:2e:ab:d7:ff:18:39:4e:77:7a:89:44:35:93:
         bc:63:bb:3a:e0:19:6d:91:92:99:4b:68:3e:4f:2c:c3:91:26:
         2c:f0:c9:96:de:ee:6a:df:34:64:91:0f:7b:7c:29:20:3e:d8:
         7b:6c:16:5a:f1:d7:05:91:83:36:89:82:a6:08:d7:dc:27:3c:
         e6:f1:a4:e2:ef:f8:de:78:62:93:5f:f6:3b:50:2e:5c:d9:87:
         9c:16:63:de:9a:e1:b4:c6:29:36:74:36:8d:c6:8b:39:b5:28:
         e2:3c:69:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:33:46 2025 by rpki-client