Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/d7f33344-e1f3-3e8b-aa8c-1c8d07c67854.roa
File:                     d7f33344-e1f3-3e8b-aa8c-1c8d07c67854.roa (raw, json)
Hash identifier:          106agCCv0PIEHwR0NquM93zLSGlC7tQUd6fRxXqCS64=
Subject key identifier:   ED:DB:51:9E:38:55:73:B9:C5:A5:ED:AB:F2:5E:10:CE:1D:19:F8:E6
Certificate issuer:       /CN=12622c55-ff6f-4fce-9274-cf19831d7726
Certificate serial:       010D0C9F4328584B16A1704BBB3707472CF40F80
Authority key identifier: CD:8D:DF:73:5C:FA:80:10:BF:22:21:FE:B2:73:6D:E7:33:C1:07:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/d7f33344-e1f3-3e8b-aa8c-1c8d07c67854.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     19682
IP address blocks:        192.48.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/12622c55-ff6f-4fce-9274-cf19831d7726.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/12622c55-ff6f-4fce-9274-cf19831d7726.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:70:4b:bb:37:07:47:2c:f4:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12622c55-ff6f-4fce-9274-cf19831d7726
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=52ee4dd0-cccf-40d0-a97b-420244aff661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:dd:ed:b1:08:d3:e3:70:70:f7:cf:be:2f:
                    ca:50:e3:83:de:79:e3:d7:80:87:32:e7:50:ee:09:
                    31:ae:e3:a3:bf:a1:54:91:18:99:b3:3c:e7:bb:42:
                    60:13:e5:f2:d3:39:9e:c0:ac:b9:be:27:62:5a:92:
                    f9:c6:2d:77:99:e6:8c:41:d6:80:16:71:70:9b:a6:
                    1c:f4:b5:3a:10:4d:ea:99:74:49:f4:fb:96:23:16:
                    73:a8:56:6a:63:f5:58:c9:2e:b3:26:17:2d:05:70:
                    54:1e:51:c5:a9:19:3e:70:14:77:f0:8b:97:d5:a7:
                    0b:24:3c:fb:03:6b:99:e9:6f:d7:9c:44:18:1b:f0:
                    e2:2f:f5:5c:4b:37:e9:9a:a8:82:0b:2f:9f:9d:cf:
                    96:50:96:d4:7e:5b:7b:75:a1:42:7d:76:13:cb:9f:
                    af:12:6e:6a:ae:a6:d9:96:2d:9b:c2:44:64:8b:48:
                    f1:c2:06:34:af:48:17:75:2b:4b:43:43:08:91:ec:
                    54:7d:41:82:60:9e:8e:a0:34:60:06:38:4f:fe:b2:
                    66:60:80:d7:d5:67:da:a8:84:d7:59:bd:d8:4c:89:
                    1d:1f:8d:20:0e:c8:81:67:d7:04:b4:55:87:8a:14:
                    ec:fa:1f:e2:c5:fd:c1:30:ad:9f:bf:8d:dc:59:6e:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DB:51:9E:38:55:73:B9:C5:A5:ED:AB:F2:5E:10:CE:1D:19:F8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/d7f33344-e1f3-3e8b-aa8c-1c8d07c67854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726/12622c55-ff6f-4fce-9274-cf19831d7726.crl

            X509v3 Authority Key Identifier:
                keyid:CD:8D:DF:73:5C:FA:80:10:BF:22:21:FE:B2:73:6D:E7:33:C1:07:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/12622c55-ff6f-4fce-9274-cf19831d7726.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:33:a5:1f:3c:b7:bd:53:cb:ec:6b:a5:4d:ff:3a:12:ef:aa:
         f9:bd:87:33:69:15:dd:12:38:96:7d:fa:37:ec:7d:3c:b8:2c:
         ff:ac:59:e9:91:cc:47:87:50:40:ce:b6:e4:b6:7e:e8:76:41:
         7c:cd:0f:3a:54:db:ac:34:32:c9:3a:7b:75:73:9c:27:ab:04:
         b0:59:31:a0:30:30:37:fb:3e:31:16:73:f6:ff:f8:e9:52:3d:
         89:a1:93:9d:14:64:bd:44:87:e0:a4:16:69:3b:66:06:84:72:
         af:ae:b8:61:4a:4f:fb:59:f6:d7:ef:f2:8a:98:a3:26:cc:aa:
         99:66:d9:9f:73:ee:ed:53:fb:ce:5d:ce:04:7e:f3:a1:61:2f:
         44:f4:26:05:96:27:f8:28:9a:41:1a:b2:cc:8b:ae:29:70:a6:
         4e:76:21:08:09:c3:bd:49:2d:d3:76:75:92:c2:2d:91:d8:c6:
         7d:dd:0c:f6:e5:97:cc:b4:cb:40:ea:44:41:2a:69:5a:1e:aa:
         e5:fb:83:05:15:af:81:f8:d9:47:b6:36:69:83:1e:61:9c:11:
         4c:a4:93:f4:a5:96:54:f5:d4:b6:1b:7a:e5:52:61:ed:22:da:
         d7:59:5f:40:a8:4e:15:6e:a9:28:ba:3e:19:94:6d:ba:b0:06:
         4a:57:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:57:47 2025 by rpki-client