Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/eb8a6289-85e4-328b-a1ba-fe1cf8e38653.roa
File:                     eb8a6289-85e4-328b-a1ba-fe1cf8e38653.roa (raw, json)
Hash identifier:          5UMgCCbmeiKPte7V1TnMBCDgm5hk5OlISjPVbKLLgTw=
Subject key identifier:   37:25:77:92:D3:E5:EC:65:32:53:A1:C5:26:E4:92:F3:00:F3:A5:9C
Certificate issuer:       /CN=86375a98-0294-4970-a5b8-3fec0469382c
Certificate serial:       010D0C9F4328584B8BE23A5F42ECC4D3EAB7B7B0
Authority key identifier: 49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/eb8a6289-85e4-328b-a1ba-fe1cf8e38653.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     3783
IP address blocks:        192.91.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3a:5f:42:ec:c4:d3:ea:b7:b7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86375a98-0294-4970-a5b8-3fec0469382c
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=12e68441-bd73-47e0-82c8-8f6b1b4adbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:11:55:ac:8b:23:2b:ef:8e:a1:65:84:af:
                    a8:26:e8:ce:c1:6f:07:43:c6:8c:a0:ee:32:4e:2a:
                    e8:e8:55:cd:59:d2:71:c1:5f:12:6b:e1:09:81:a1:
                    b9:b3:01:8d:5b:2e:aa:31:62:e2:ef:b3:b3:ec:fb:
                    c3:8a:46:03:98:42:e1:f7:1e:ba:55:53:f9:df:4d:
                    bf:c2:78:63:22:e8:a8:62:c3:22:2f:d5:4d:5a:25:
                    27:b4:63:33:3e:25:85:4a:88:c8:83:c2:9e:ee:9c:
                    71:6b:9c:c0:1b:98:54:9f:de:23:16:cc:66:f9:f6:
                    56:d1:8b:66:1f:af:8e:4d:e3:be:89:ff:3a:cd:30:
                    3d:5f:da:87:11:95:86:81:3c:90:66:f6:9f:9d:ba:
                    a8:d9:b1:ff:84:e0:de:61:0e:3d:6b:91:65:ed:48:
                    96:1e:f3:7c:1a:9e:ec:6e:f3:6f:1a:19:bf:f8:97:
                    2f:ba:69:b9:2f:91:14:cb:56:9a:2e:2b:29:af:e5:
                    88:da:69:18:71:9b:00:25:11:9c:0c:14:84:a3:33:
                    14:7f:56:e9:68:d3:13:28:da:f0:96:20:a4:3f:fd:
                    c5:02:be:f0:05:88:4e:48:ce:e8:64:30:19:85:7b:
                    3b:59:0c:2a:62:c5:1e:14:6a:da:8c:19:23:3e:8f:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:25:77:92:D3:E5:EC:65:32:53:A1:C5:26:E4:92:F3:00:F3:A5:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/eb8a6289-85e4-328b-a1ba-fe1cf8e38653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl

            X509v3 Authority Key Identifier:
                keyid:49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.91.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:90:3d:99:52:52:3e:0d:91:f9:21:cc:b4:23:c5:15:09:
         b0:d9:fa:25:fd:88:cb:f9:3b:86:43:c4:d5:24:82:fa:f8:77:
         32:ba:33:04:55:c7:32:77:c2:49:42:6b:84:78:9a:13:8c:05:
         4c:e6:62:f4:69:3c:9e:2c:63:6e:87:27:72:85:b4:e0:e8:54:
         da:fc:fe:13:10:5c:83:5b:8c:73:ed:31:9b:5b:67:21:58:69:
         b0:a2:7e:dc:e4:6b:35:19:82:a5:e0:34:e7:c5:30:d4:63:ae:
         73:10:a6:fd:4f:40:e0:52:5f:70:e8:f8:d1:a5:e6:a9:e5:5d:
         eb:ee:70:69:f3:c6:e8:87:95:d2:1d:72:46:6d:63:2c:61:99:
         de:fa:10:ae:60:75:7d:ad:dc:88:ef:c6:f7:57:d8:ab:87:a3:
         cb:89:7d:c2:2f:3f:63:fc:3a:57:f2:cd:16:68:75:1b:c6:a6:
         dc:4a:a3:c0:9d:e5:e6:06:fc:69:66:ff:f9:f2:8f:57:e1:a4:
         cd:6e:c2:8c:87:76:e9:be:c7:4c:83:99:9f:a8:23:5b:d7:3b:
         f8:41:2d:e2:f5:20:10:f7:9a:47:b9:d7:43:c1:a1:91:7f:af:
         76:53:d6:63:3b:0f:7e:a5:9f:b0:72:59:76:ea:cd:ce:01:8e:
         53:58:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:35 2025 by rpki-client