Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ec8ede4c-5342-3d45-bbe9-b4e0a27fd416.roa
File:                     ec8ede4c-5342-3d45-bbe9-b4e0a27fd416.roa (raw, json)
Hash identifier:          WdceWXpfthGSPHrUYn87NvOP9nbAYJ9n5jwfSIv3HcY=
Subject key identifier:   0F:14:1E:FC:E7:3B:4A:9B:75:12:27:07:C8:72:CF:D1:4A:DA:39:4C
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584B52A77EF84099C126BE1B1C28
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ec8ede4c-5342-3d45-bbe9-b4e0a27fd416.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     19637
IP address blocks:        192.19.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:7e:f8:40:99:c1:26:be:1b:1c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=b55430ce-0a66-439c-9905-6b4dd88589ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:c3:08:91:84:22:a4:86:e3:3a:48:75:f7:
                    00:d1:d6:75:d9:15:3e:10:ec:80:2a:cc:08:db:b6:
                    ea:48:41:2d:8b:de:6d:84:ce:36:46:9f:c3:02:08:
                    64:8c:63:88:66:1a:ad:d9:f4:c4:99:87:c4:ad:79:
                    cf:e9:c0:94:22:af:e2:e8:8f:13:3c:e7:c2:ff:cc:
                    db:dd:3c:c7:82:89:f3:d0:f6:31:17:ea:d3:a1:8a:
                    e1:78:67:45:45:d2:f7:4a:97:7b:29:f2:80:e3:8c:
                    5b:9e:47:21:68:ca:1c:b6:e2:0b:66:36:3a:20:e3:
                    2d:f8:bc:89:1d:30:64:ca:99:8b:dd:80:e8:d0:d8:
                    8c:97:e4:0d:55:2b:73:f3:12:b8:76:f1:f8:4c:aa:
                    64:91:94:03:70:75:77:4f:3f:c3:f4:6a:ab:fa:02:
                    b2:2e:c5:9f:87:f3:7c:0c:ea:02:b1:45:17:2a:74:
                    09:42:cd:c7:70:ed:f9:b6:47:05:3f:d4:dd:3c:3b:
                    07:1b:97:98:43:fc:87:1b:99:dd:fe:af:a6:bf:0e:
                    e4:b3:36:11:dd:1d:da:ba:2f:7d:e4:d5:3d:dc:8e:
                    9a:9f:e4:9c:6c:fa:ce:ae:68:a0:47:02:0e:f1:ca:
                    67:7e:20:8c:18:44:36:21:9a:83:10:07:b6:ba:95:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:14:1E:FC:E7:3B:4A:9B:75:12:27:07:C8:72:CF:D1:4A:DA:39:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ec8ede4c-5342-3d45-bbe9-b4e0a27fd416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:01:4a:be:39:af:73:00:f9:37:b8:05:20:00:0b:0c:2f:22:
         e8:a9:ed:b4:06:97:04:4c:48:16:5e:f6:42:37:2b:35:21:43:
         13:5a:4c:24:af:ba:0b:e5:1a:ed:b5:da:a9:b8:7e:16:da:37:
         88:5d:ec:52:31:f4:a8:cf:ca:3f:5a:01:55:8b:97:0a:61:86:
         88:1f:80:a8:ad:41:30:14:4c:64:33:92:ab:c7:d4:6e:08:8f:
         9b:33:f4:dd:d3:42:6a:d7:09:fd:37:02:8a:f0:73:e1:8d:0a:
         b4:ae:3e:4a:be:11:a4:09:44:f5:21:a2:49:11:a0:80:0b:ce:
         c6:d5:a5:4e:26:03:08:97:6b:d3:8f:b8:c2:8e:4c:50:22:aa:
         1d:d5:9c:34:67:b4:e3:57:f9:de:ab:fa:6f:37:3d:e2:52:ba:
         2a:e3:a2:b5:b9:98:7b:5b:bf:ec:73:e9:ac:64:c7:2f:a4:2e:
         30:dc:48:aa:6f:f9:35:0e:5b:b5:4d:6d:e6:07:91:e0:4a:a0:
         39:02:61:a5:48:96:39:97:7d:bc:0e:3b:6f:fc:b7:f8:76:f6:
         e9:6e:4b:ea:f7:a7:8e:7b:a9:22:44:40:38:09:f2:b1:bb:09:
         0b:99:75:00:88:51:b4:41:b9:0a:60:d6:a3:06:ba:aa:25:4b:
         8b:c2:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:23:28 2025 by rpki-client