Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa
File:                     3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa (raw, json)
Hash identifier:          CYZiHIPx1lOolB3NYxy2JeMbWuFxlB+SHzq2S2vbAL8=
Subject key identifier:   C0:27:2C:DF:F1:78:8B:79:D7:33:F6:26:AC:6A:85:7F:01:D9:4E:B5
Certificate issuer:       /CN=53482e94-c66d-458c-842b-1143e3693e88
Certificate serial:       010D0C9F4328584B7F520F4A8F9100406030B600
Authority key identifier: 88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     54393
IP address blocks:        192.70.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:0f:4a:8f:91:00:40:60:30:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53482e94-c66d-458c-842b-1143e3693e88
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=6c6388aa-78b0-4099-b237-3f4aaecd11fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:ea:1d:2b:c1:b5:0e:ab:0d:62:04:7e:d9:
                    64:19:d7:c3:62:34:0e:ac:46:f6:61:51:26:7e:b1:
                    08:52:29:db:3c:c6:c7:c4:58:d2:9e:66:1e:b5:72:
                    ac:99:c3:30:ca:1a:7c:7b:85:84:8f:e8:91:48:94:
                    0e:50:6d:89:4f:9a:5d:f9:f9:ce:64:65:c5:c1:2a:
                    dd:9a:64:7b:30:e9:00:a0:f0:3a:d3:30:63:c6:f8:
                    b9:c9:50:91:e3:7f:dd:1a:a8:86:d4:89:46:a2:ab:
                    ec:d4:a7:a6:0b:58:a8:92:1d:bd:c5:a0:8b:fe:47:
                    c8:c7:a9:ae:b4:1d:41:7c:1b:3e:c0:9e:6c:d1:73:
                    ad:35:f0:36:d4:cb:9e:c4:45:bd:83:99:55:59:66:
                    55:de:4b:56:0d:11:89:81:52:f4:68:4c:6b:37:6e:
                    fc:7b:18:30:ff:41:3e:e9:ec:17:af:51:ff:38:ec:
                    67:ce:6e:71:38:34:48:1c:b9:03:fc:8e:be:9d:a4:
                    3f:87:60:4f:20:b6:6f:d5:e6:82:ca:c5:25:12:17:
                    a6:4e:c3:2a:a8:da:fc:b5:5e:1b:9e:d9:08:cc:09:
                    23:5e:dd:9b:24:6f:19:80:48:9b:9b:6d:5d:df:f2:
                    85:a8:1e:17:4f:10:a6:4d:33:ad:64:9e:03:1c:4b:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:27:2C:DF:F1:78:8B:79:D7:33:F6:26:AC:6A:85:7F:01:D9:4E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl

            X509v3 Authority Key Identifier:
                keyid:88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:1c:1e:5c:55:34:59:3d:6f:8b:4f:97:f0:7e:21:19:8f:
         05:a8:26:bf:ea:0f:17:c0:99:94:91:37:1f:a4:53:a5:d1:15:
         bf:e7:5b:2d:aa:7d:1f:26:92:92:03:bc:37:21:08:e2:32:90:
         31:12:bc:7f:61:cc:e1:1c:61:5f:bf:1d:93:0f:e5:ea:a0:af:
         1c:ca:51:13:cf:95:7c:1e:09:38:59:e4:69:7e:5a:28:25:bc:
         ed:68:f3:3d:d4:6f:82:76:2c:87:8b:cb:85:87:97:1a:53:56:
         f1:32:c3:1e:c6:fa:fa:60:8d:d5:a3:83:c6:b3:9b:92:1f:48:
         b4:71:47:07:64:05:6a:5e:56:af:0a:f7:e8:6b:c3:ae:f5:ca:
         16:dd:13:4a:84:a8:01:3a:41:3c:7a:44:34:5a:07:30:05:b3:
         dc:92:eb:1e:a1:62:f7:88:19:20:f2:17:ec:a8:22:23:a9:38:
         2d:55:04:99:b2:16:01:26:30:f0:14:08:5c:08:2f:5e:9e:28:
         25:31:4c:e5:47:fc:31:f9:62:0d:85:fd:3a:19:32:4f:0e:d6:
         8a:65:a6:6c:02:2f:ed:83:fa:3b:d3:d3:a8:e8:ae:9b:a9:1d:
         23:4c:3f:b6:7d:41:89:17:2a:1e:c1:52:8a:4c:be:21:4d:8e:
         22:0c:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:11 2025 by rpki-client