Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/372749b3-ba25-396b-be3e-d865d4373684.roa
File:                     372749b3-ba25-396b-be3e-d865d4373684.roa (raw, json)
Hash identifier:          vdbTta61rtq6rH/fo9kMc0+lqeKk6zpRru3F+SMsvJo=
Subject key identifier:   7F:9E:C0:B3:16:FA:85:B4:6E:91:24:EC:D0:99:F4:9B:DF:DD:9B:6A
Certificate issuer:       /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial:       010D0C9F4328584B48E1AEEA968A3720AAC5D480
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/372749b3-ba25-396b-be3e-d865d4373684.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     7752
IP address blocks:        192.41.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:ae:ea:96:8a:37:20:aa:c5:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=b152d6ab-cfd9-40c9-a6c1-e7218bf0d292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:c6:dc:c3:d4:7c:e3:9d:64:c8:d6:d7:fb:
                    03:2a:55:03:a7:be:59:24:90:cb:ec:1f:54:1d:02:
                    86:4d:2e:e0:79:f1:df:d3:cc:97:8b:32:b6:29:d5:
                    f9:c5:3f:a7:5f:81:0c:7b:3a:d1:56:76:cd:63:ca:
                    75:23:07:af:e1:b8:8e:57:6a:37:3f:c0:dd:75:1c:
                    76:cb:b3:0f:5d:e8:77:a2:b9:53:87:15:9e:41:f2:
                    7e:6c:45:9d:04:f0:37:95:9c:80:2e:5f:18:9d:75:
                    95:59:75:cf:97:e1:5b:47:c3:42:0b:6e:21:de:89:
                    4a:ac:ab:de:f7:50:af:82:81:70:ca:49:67:84:8d:
                    b9:ef:b0:02:d7:a4:9b:ba:8a:19:4a:f4:af:23:4e:
                    e7:28:31:f8:f6:db:e0:61:07:b8:7d:26:fe:af:ee:
                    d8:57:44:64:33:58:ae:bc:50:90:cf:36:83:f2:88:
                    0c:6f:d3:4a:37:4e:9e:61:e1:26:99:82:9d:4c:f4:
                    16:ae:a5:0f:45:3a:87:8e:b6:26:75:08:a6:f6:6e:
                    cf:ad:98:56:95:5a:40:85:50:80:bd:7d:3d:c6:50:
                    a7:4b:7e:93:d3:ff:47:14:e1:c4:fc:5e:91:21:d6:
                    ba:49:26:04:c3:83:a7:98:f9:86:2f:5e:34:92:04:
                    43:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9E:C0:B3:16:FA:85:B4:6E:91:24:EC:D0:99:F4:9B:DF:DD:9B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/372749b3-ba25-396b-be3e-d865d4373684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl

            X509v3 Authority Key Identifier:
                keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:cd:46:72:76:97:6a:70:50:0d:38:15:68:a5:1c:4a:b6:12:
         ca:b5:0c:c2:e4:1e:07:c7:90:f4:da:bb:34:2b:3a:b5:96:cc:
         9f:8d:26:da:70:d1:87:d4:f2:dc:63:f6:8c:e2:8c:9c:4c:90:
         91:c0:56:83:39:99:7e:a5:24:ce:25:e9:a0:20:b8:a3:50:cc:
         00:10:26:51:92:91:52:aa:41:82:e2:7a:46:00:30:fe:09:cb:
         8f:8a:04:c8:d5:f3:3a:14:42:c5:b1:c8:e4:05:63:d6:b5:89:
         aa:0c:c8:89:74:86:5c:1a:16:ce:81:fc:ca:43:7a:08:24:4c:
         40:cd:14:2f:00:e2:86:11:9f:44:71:d5:ad:af:7a:c1:04:cd:
         8a:81:3d:54:a2:77:c5:74:81:69:fa:0f:29:8e:9b:b8:65:50:
         c1:77:05:69:1a:2b:39:1f:89:ad:1b:d3:29:e5:3b:20:5b:64:
         56:f1:8c:ec:66:03:a8:4c:7a:18:3c:49:a5:84:2f:f3:ea:b3:
         f4:6e:72:10:23:26:1a:f0:bc:0e:7d:e6:d2:7c:43:5e:cb:74:
         4e:32:4b:19:fb:f0:3e:6a:38:e6:1e:74:21:75:50:49:43:15:
         d8:96:ae:62:a5:78:73:61:8d:be:96:d3:c9:15:75:2a:20:18:
         d5:af:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:14:14 2025 by rpki-client