Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/6f75361e-2a22-323e-bafb-eae704053ba0.roa
File:                     6f75361e-2a22-323e-bafb-eae704053ba0.roa (raw, json)
Hash identifier:          QhermB1aF+M5Dg7mDTeykpgYpJUmTk8MiYyoMNuQU8Q=
Subject key identifier:   8D:DF:0F:6B:C1:87:9E:0D:22:F8:23:A7:84:17:B0:F1:4A:CE:08:72
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584B7DECABA9224F69450CDD3980
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/6f75361e-2a22-323e-bafb-eae704053ba0.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     19637
IP address blocks:        192.19.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:ab:a9:22:4f:69:45:0c:dd:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=e464cbb0-8a88-45f1-a0e2-62de10fc352b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9a:63:a2:53:59:49:bd:d1:a5:b0:38:5a:72:
                    14:b8:ce:22:42:8c:d5:53:d2:50:bd:8d:04:14:85:
                    f0:38:58:91:d9:bb:23:4c:ac:9c:94:79:73:21:82:
                    17:a9:98:f2:31:88:31:7a:e4:8a:83:45:d5:9f:06:
                    95:8a:9d:ce:1f:9e:58:d3:83:0c:cc:9a:31:56:a7:
                    99:99:9c:21:58:82:d5:9f:24:17:cd:20:6c:7f:e0:
                    19:0d:02:f6:01:ac:3e:19:b2:3c:9d:7b:8b:6e:ab:
                    78:26:ae:d8:ee:bc:ee:14:0f:67:e4:0b:92:10:bc:
                    24:f3:a6:b8:76:2f:a7:2e:e8:80:f3:26:64:d2:a4:
                    64:e1:17:92:e3:97:f4:6e:cc:b6:25:d7:ee:ca:a9:
                    5b:3c:5d:2c:2e:07:b2:a2:5a:13:7d:da:da:bd:e6:
                    b9:a9:50:6b:61:c0:4d:21:9c:f1:3b:04:b4:a2:55:
                    9a:6a:d5:09:cc:d8:96:7b:29:c5:10:89:b7:8f:f6:
                    e3:15:51:3a:3e:12:b6:c4:6e:d4:ec:4a:fb:b9:97:
                    76:58:0f:98:7d:f4:49:e8:f4:7a:81:f5:9e:07:71:
                    7f:16:64:83:f7:76:4d:64:08:4b:8b:e6:97:b9:01:
                    58:20:15:8d:cc:35:4b:2b:d2:18:06:89:c8:ed:31:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DF:0F:6B:C1:87:9E:0D:22:F8:23:A7:84:17:B0:F1:4A:CE:08:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/6f75361e-2a22-323e-bafb-eae704053ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a4:10:97:f7:e3:4a:6e:14:90:18:f0:ea:d3:49:f2:12:3b:
         e2:10:35:e1:e4:db:2c:20:69:a5:aa:86:2b:70:de:ee:4d:eb:
         c5:f1:f3:ff:82:3c:0c:a6:29:3a:72:65:ab:e0:bb:a3:e1:4e:
         41:13:19:d7:bd:25:2b:8c:ba:8d:ad:4c:fc:43:40:60:9e:cd:
         a4:21:e7:23:54:b0:20:48:38:db:5f:a0:4d:1d:d5:51:da:a0:
         18:fd:fb:a7:9c:42:50:11:3b:24:27:f6:f4:ce:0f:45:7c:72:
         fc:4f:a6:73:2b:fd:ed:76:fd:e2:d9:7f:1e:5b:e3:fb:57:75:
         d8:14:99:41:79:f6:84:be:d6:18:5d:0e:47:5b:41:0e:f4:5a:
         6c:a9:81:71:d1:79:34:91:d6:44:76:40:f3:07:fb:4c:80:6b:
         71:4e:71:87:fe:ed:67:a7:c6:bc:1f:cc:51:c7:1b:86:fd:d1:
         26:97:3d:cb:c8:1b:e5:e9:98:c0:ea:31:4b:2c:c2:26:98:b5:
         54:69:ba:b0:9f:f9:8f:18:8d:bd:cc:09:35:e3:cd:1b:da:c5:
         27:90:99:97:86:d0:f7:23:7e:60:cd:96:bf:a5:46:06:4c:e7:
         01:7c:60:18:b9:13:64:c8:26:5d:20:50:8c:df:34:a0:8f:05:
         4a:eb:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:48 2025 by rpki-client