Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/deb3d6bf-d629-3854-ab53-853046a69a9d.roa
File:                     deb3d6bf-d629-3854-ab53-853046a69a9d.roa (raw, json)
Hash identifier:          nVuRvbzLdNR3EsC1BmFw3miNqxX8wMKqhOGyc9ACOv0=
Subject key identifier:   6B:A6:EE:11:66:D1:CA:82:18:F1:E6:1A:EA:F4:A4:BF:BC:51:6C:84
Certificate issuer:       /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Certificate serial:       010D0C9F4328584B1F016FD7DEB6BD40EDE46B80
Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/deb3d6bf-d629-3854-ab53-853046a69a9d.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     16276
IP address blocks:        192.31.246.0/24 maxlen: 24
                          192.82.115.0/24 maxlen: 24
                          192.240.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6f:d7:de:b6:bd:40:ed:e4:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=e8f7dbcf-6e18-4d43-a539-4a5943488a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:51:b3:f6:42:20:0c:23:7e:91:ae:9e:fe:
                    0c:0a:ca:ec:71:7a:4f:99:ef:1e:76:54:a6:ba:af:
                    f8:39:32:5d:c3:d1:5a:d0:62:51:2a:07:78:c7:cf:
                    2c:50:b5:0a:b2:09:01:9c:f1:5a:38:dd:76:d7:ec:
                    1f:87:09:0d:22:f8:ac:93:46:67:9b:41:b0:a2:83:
                    45:8f:aa:f9:87:cd:7d:c1:f7:d8:f5:7c:d7:50:26:
                    15:79:27:0d:ad:2a:5d:21:97:84:c1:08:23:5a:08:
                    dc:59:61:76:47:13:ed:a8:00:17:b2:8f:c9:e3:7a:
                    3e:9f:54:71:13:cf:0d:db:a8:a7:b2:67:6f:81:b8:
                    97:83:04:1c:04:35:3e:86:d1:36:45:b4:0c:63:85:
                    e3:6f:0c:62:fa:22:ef:2b:3c:60:a7:cd:ee:01:ef:
                    22:0c:f8:3f:2d:f7:f7:bc:d1:9b:09:5f:38:aa:e5:
                    00:6b:a2:ec:00:21:2e:52:b8:b7:b0:d6:55:ef:3c:
                    2b:7f:af:00:c4:24:67:d9:1b:f6:ff:1d:78:49:ff:
                    36:26:3a:53:e8:f6:f8:fc:01:0f:62:83:9c:3f:d6:
                    da:da:b7:07:cc:3d:ff:33:ef:33:68:2e:9a:ce:df:
                    12:9f:e4:a4:ea:22:d8:5b:3e:bb:25:90:cb:65:e5:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A6:EE:11:66:D1:CA:82:18:F1:E6:1A:EA:F4:A4:BF:BC:51:6C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/deb3d6bf-d629-3854-ab53-853046a69a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl

            X509v3 Authority Key Identifier:
                keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.246.0/24
                  192.82.115.0/24
                  192.240.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:4b:14:c2:a6:68:07:98:17:60:ce:60:7d:ee:cb:9a:62:
         99:5e:13:71:7f:86:7c:21:4d:c5:c7:0e:74:37:b7:d6:eb:d1:
         04:6b:7d:db:c8:47:2f:81:af:c1:a6:d8:14:8f:bd:0e:05:53:
         71:93:bb:00:25:b5:4b:64:d8:12:13:3b:fc:1a:be:e0:a3:4d:
         cb:2d:75:88:c1:ed:92:22:91:60:1a:ce:90:b1:a0:2a:b4:38:
         4a:be:84:4b:77:28:4d:38:3c:89:4e:f8:e9:47:ae:bd:c4:34:
         c5:ca:ab:d9:96:dc:36:37:81:ef:1b:52:e0:f6:f9:dd:63:a7:
         ae:6f:1c:6f:73:0d:ab:57:bb:f3:c2:7c:ef:a8:0c:d2:f0:22:
         65:b9:2b:e0:f6:1d:04:a0:e3:ac:56:22:01:19:ac:ca:c3:9a:
         24:df:3b:0e:29:13:84:ce:00:64:82:bf:08:e9:a2:8e:d6:32:
         33:8a:33:86:ca:9c:f3:77:e0:20:f3:24:09:b1:99:7b:77:78:
         1d:82:67:71:c6:f1:82:8a:db:68:a2:1b:d8:f6:b8:6a:3d:36:
         84:35:af:06:f8:3a:6f:c8:67:d7:76:10:bb:54:25:e4:49:8b:
         d7:2c:cd:39:ae:1d:d4:63:d8:10:76:0c:eb:ce:a7:99:e3:79:
         4c:07:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:46:49 2025 by rpki-client