Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa
File:                     94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa (raw, json)
Hash identifier:          6AXUdTVVYxcFxqftHvS1Fp0FDqA4CizX+9qf/+qMKGE=
Subject key identifier:   41:FA:E8:07:86:FE:70:BB:74:22:A8:48:A6:10:93:49:F6:5F:1C:33
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B36BC4AECA422978D8FCE1AA0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        65.39.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:4a:ec:a4:22:97:8d:8f:ce:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=dba6a852-3d9f-47ae-b753-54f32ed52134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:b5:fa:71:62:2e:e1:a3:cd:d2:a6:5e:12:
                    ae:08:a3:86:e0:0c:b6:70:b8:50:1e:98:ea:b4:ec:
                    98:61:fd:23:d2:27:65:23:e9:42:fa:9f:c3:00:bf:
                    f7:d5:3e:05:ed:66:df:9f:09:ff:bd:78:32:e3:20:
                    a5:d4:da:b3:b3:d9:44:20:57:a3:02:fa:81:e9:51:
                    70:ce:0d:08:eb:c0:97:82:63:e3:d4:e9:fc:90:20:
                    8a:f6:f6:34:56:a8:b5:40:a4:c3:ea:48:d7:5e:9d:
                    c1:6e:cd:72:ac:d5:99:bb:6a:6e:ee:e0:5f:62:97:
                    cd:d7:56:47:df:fb:b9:d2:f1:2e:bf:49:5b:e8:9a:
                    4e:af:36:ac:b6:eb:0a:93:e5:86:24:44:37:59:c0:
                    2f:45:a2:f0:ad:bf:9e:54:f6:f0:9e:42:2a:d7:c1:
                    67:29:fd:38:81:2b:ac:35:25:32:9c:1b:6e:f6:8c:
                    2d:c8:43:d3:8f:c6:59:38:45:b5:04:de:a0:f4:89:
                    98:df:01:a2:3e:41:f3:25:3a:60:1b:a0:57:46:95:
                    de:b0:7e:05:8e:8c:e3:44:d5:fb:e1:84:15:c5:94:
                    13:00:9e:ec:2d:cf:ed:fe:78:3b:59:45:78:75:92:
                    6f:21:df:35:24:23:35:c0:3d:a9:35:84:49:32:63:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FA:E8:07:86:FE:70:BB:74:22:A8:48:A6:10:93:49:F6:5F:1C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:37:37:45:8a:17:6b:fe:b8:73:20:f2:d3:9b:d3:54:aa:
         23:a1:67:f2:ee:d1:c5:20:c9:f0:a1:e1:1b:5f:5c:04:93:a5:
         e3:a0:53:56:fd:64:ff:39:76:c5:f8:3a:e4:6c:c9:55:f0:85:
         e6:48:e1:bf:7b:c0:20:dc:06:48:b7:ae:7c:6b:9e:9f:12:3f:
         e2:56:08:8d:fe:1c:03:63:a3:3e:a6:8f:91:45:e2:b8:7b:8b:
         a7:06:68:72:d3:c2:fe:37:8c:48:49:92:8a:a5:6f:bd:73:04:
         63:49:db:dc:b3:c1:fc:d1:08:fa:d7:44:57:51:6f:0a:c9:ed:
         84:45:84:80:67:72:0a:95:d3:ea:35:aa:a2:ab:b2:6c:70:35:
         75:5e:2a:1c:2c:c2:34:ea:1e:5e:2b:0d:03:ab:9a:bc:fd:a5:
         bf:70:e9:91:89:4a:ae:e4:b1:e0:8b:5d:97:31:73:a9:85:7f:
         f4:71:0a:26:3b:f7:5b:7c:52:3f:77:4e:51:c8:d6:b2:73:0a:
         58:52:6a:15:18:0f:06:d2:47:bf:1b:75:69:a2:8c:a3:cb:cf:
         ca:6f:c3:7d:01:2d:90:0f:65:4f:84:9f:d4:0e:76:c8:2d:bb:
         b3:ac:f0:21:15:a0:89:3f:12:6e:c6:2e:19:98:14:cc:be:19:
         d2:27:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:35:07 2025 by rpki-client