Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/78a9aed6-bc4b-3ad6-a2d6-feb41fcafe0b.roa
File:                     78a9aed6-bc4b-3ad6-a2d6-feb41fcafe0b.roa (raw, json)
Hash identifier:          FHmo1NvHSvV73tYnk1cqyyrAbyfQyyccHyKS3z8VcQ4=
Subject key identifier:   98:83:E4:D6:BE:F3:FC:A7:FE:2D:26:7B:D6:65:E2:2D:41:4D:51:F6
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584B4D9651EC9449BE7187E05840
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/78a9aed6-bc4b-3ad6-a2d6-feb41fcafe0b.roa
Signing time:             Wed 24 Sep 2025 17:27:49 +0000
ROA not before:           Wed 24 Sep 2025 17:27:49 +0000
ROA not after:            Tue 23 Dec 2025 18:27:49 +0000
asID:                     7015
IP address blocks:        190.99.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:96:51:ec:94:49:be:71:87:e0:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 24 17:27:49 2025 GMT
            Not After : Dec 23 18:27:49 2025 GMT
        Subject: CN=04b3dc6a-b52d-4e22-9d33-b0182f08a222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:1e:63:95:c4:ad:0a:ea:d2:4a:e9:ab:bc:
                    6b:f8:12:4b:a7:45:6a:fb:f1:e9:60:f7:00:58:64:
                    96:fd:ea:74:3b:1f:f8:0a:93:e2:7d:ff:cb:2d:f7:
                    b6:ec:80:77:c7:bc:5a:6b:5e:e7:59:cd:98:f8:98:
                    b3:77:99:ff:91:d5:0f:80:fa:ac:a7:17:8b:9d:7e:
                    87:5e:ae:3f:02:be:cd:66:b0:c1:b6:0d:c3:5a:58:
                    3b:58:cb:8a:17:99:55:02:eb:2c:8c:d0:65:18:0c:
                    32:a5:90:b2:9f:a5:a7:37:0a:96:b6:fd:e8:58:4b:
                    0a:45:25:dc:d9:b4:c0:a5:ea:b4:fa:41:24:93:e4:
                    e7:9c:0f:c0:29:a8:38:ef:05:a2:6a:ab:7c:82:cc:
                    b6:62:27:3b:02:86:a2:24:61:bf:ad:b9:25:ae:73:
                    db:6d:db:64:4d:90:cb:22:09:fe:e6:cd:bb:4f:bf:
                    d9:e7:ef:ee:de:ff:0b:16:40:8f:77:1e:65:32:fd:
                    c3:77:bb:c4:50:8e:9e:05:d1:52:e3:af:19:bb:9e:
                    5d:af:cf:bd:f9:1e:83:1e:89:38:ea:a4:9f:7d:e8:
                    e3:13:2d:87:d8:8b:bc:68:a4:ab:3e:e7:20:c8:f0:
                    93:31:b2:da:a3:a7:98:bb:bc:1d:43:10:03:3f:45:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:83:E4:D6:BE:F3:FC:A7:FE:2D:26:7B:D6:65:E2:2D:41:4D:51:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/78a9aed6-bc4b-3ad6-a2d6-feb41fcafe0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:04:b5:1c:8b:3f:fd:4d:a0:2c:22:e9:aa:98:a4:42:4a:52:
         f2:35:83:b5:09:1f:b9:90:f2:e8:78:42:32:7a:97:28:50:10:
         9b:4a:ff:fc:3e:f8:d9:1e:30:2f:6e:2e:18:2f:88:af:a5:73:
         2b:aa:ae:b3:89:ff:0a:3e:1e:da:a9:d0:e8:72:57:ed:8e:5b:
         9f:6c:42:6c:0b:ff:b0:96:ef:cd:1d:0e:30:79:15:e5:c9:0f:
         cf:38:48:ee:a0:ce:a5:28:d0:45:4d:6c:63:8e:67:5b:49:80:
         34:fe:41:70:f5:14:44:94:00:ad:7c:ff:9d:47:44:23:96:4e:
         80:ec:f1:df:47:2b:5a:a3:cc:25:94:6b:c6:83:8f:e8:0e:60:
         dc:bc:a8:c5:64:64:54:6c:5c:e9:53:e7:89:0c:bf:bb:e1:db:
         c3:de:e2:80:88:cc:db:24:02:63:56:ac:89:ce:43:c4:37:25:
         82:97:30:04:4a:f3:7f:6b:b5:82:2d:ec:83:12:42:e9:45:19:
         f8:d9:67:b7:ea:57:78:b1:19:8e:94:4c:d8:16:3d:78:1a:a5:
         fb:ae:ad:0c:09:3c:7d:7d:d4:d0:d6:e6:ba:c6:63:ea:89:85:
         1c:68:06:4f:45:c1:3d:c8:5e:c7:b9:57:a0:fe:4d:84:50:f8:
         94:00:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 18:44:25 2025 by rpki-client