Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e6864e6e-b767-322a-8677-17c828d50a13.roa
File:                     e6864e6e-b767-322a-8677-17c828d50a13.roa (raw, json)
Hash identifier:          +AsmiMfpoC7fTnQfwJ/mWkjVRodNNzzDObi5dUJpKiI=
Subject key identifier:   E6:B7:BA:34:EF:B7:08:F0:C5:67:3F:5E:4A:92:54:BA:FA:8C:44:E3
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B2066D3A0609A8D3A30507A80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e6864e6e-b767-322a-8677-17c828d50a13.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     2568
IP address blocks:        184.95.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d3:a0:60:9a:8d:3a:30:50:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=d12279c3-0460-4c92-b2bd-7f2f42e7a821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8b:51:cd:e5:2d:6c:c0:53:34:d6:94:4a:53:
                    1e:08:54:2d:27:73:11:dd:0c:aa:b3:36:a3:34:a9:
                    3e:9b:7f:8d:a2:1a:5e:b0:e4:04:4a:a9:9b:14:c6:
                    63:35:76:4c:c4:07:38:88:ab:29:f0:ae:b1:a3:da:
                    66:07:de:70:55:c6:51:da:ee:d5:24:db:b7:e9:c0:
                    0f:22:4e:9f:07:13:a9:29:ba:17:2d:30:b4:90:80:
                    c2:6f:11:ea:31:cd:c7:3d:30:4f:af:80:84:f4:c4:
                    68:44:d4:89:4d:c8:60:88:6b:e5:b4:c7:b9:30:d7:
                    c4:b6:47:96:c7:69:ad:dc:d4:0e:6a:a7:7e:ca:6e:
                    08:fa:df:77:08:db:76:ae:4f:e2:46:40:50:46:22:
                    f7:eb:6e:43:b8:2f:da:3d:96:0c:7b:56:55:75:bb:
                    25:14:35:88:93:5a:ed:47:af:8f:47:b0:30:c1:04:
                    35:be:5c:ad:2c:0f:d1:17:ae:37:ca:be:3d:2c:5f:
                    67:88:1f:43:fa:3b:40:01:15:92:89:72:92:31:b5:
                    74:70:dd:9d:9f:da:6f:c4:4b:5c:f8:87:08:99:ec:
                    1d:c4:9f:05:97:18:d4:7b:bd:8a:5c:ff:14:41:89:
                    df:2c:1d:d3:d7:70:8d:5e:33:5a:de:a7:70:63:73:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:BA:34:EF:B7:08:F0:C5:67:3F:5E:4A:92:54:BA:FA:8C:44:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e6864e6e-b767-322a-8677-17c828d50a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:bb:96:76:8f:a1:fe:21:ce:dc:47:d2:03:b0:d5:bd:f2:42:
         7e:1e:f7:24:9e:dc:56:a7:9a:d2:bf:9d:3c:e8:e3:0a:b9:0f:
         31:8b:92:fc:23:41:3d:f1:87:b0:43:9a:6d:40:84:96:29:dd:
         ef:55:9c:94:f4:24:72:f6:e5:f3:43:79:7d:a7:9d:d9:c4:b8:
         58:70:16:34:5f:7e:9a:76:a5:b5:25:51:ed:11:ed:b9:d5:6c:
         60:34:8f:b6:67:d6:f3:34:2f:1b:a5:5d:9c:42:c4:8e:ea:5c:
         b3:eb:e0:1b:85:b1:5c:e1:48:df:ca:f0:d3:b2:7e:c9:79:5c:
         18:f8:e8:19:86:0b:e0:f5:31:1b:a1:d4:7d:ba:dc:a8:97:96:
         9d:4d:64:bc:1d:49:15:1c:ec:59:21:6e:60:0f:41:0e:e5:5a:
         9a:2c:42:f8:4b:ee:fd:5e:3c:6e:2b:b0:eb:66:84:20:67:10:
         53:9e:4f:a4:7d:e9:2e:f6:02:9d:65:3a:15:b0:87:d4:dd:64:
         81:b8:f9:46:d9:ef:e8:b8:97:4a:a8:9f:8d:6f:41:4c:9e:20:
         f9:7e:ac:db:7e:0c:5b:ee:f0:bb:94:ea:4f:3a:28:3b:ce:59:
         f8:5a:92:91:5f:80:75:a8:08:d5:bc:39:1d:51:f0:51:86:35:
         e9:0f:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:10:35 2025 by rpki-client