Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa
File:                     b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa (raw, json)
Hash identifier:          A4CenVK6Slf2TaZfM/G6yGradZky/NKnds5iUFdR1Ko=
Subject key identifier:   6E:34:12:57:80:84:4D:9A:4F:4B:81:5A:7D:FC:77:A0:FF:FF:D4:B5
Certificate issuer:       /CN=32e1eff5-1423-4100-89f4-3340efd8f1ea
Certificate serial:       010D0C9F4328584B742755313E591526CF72FE00
Authority key identifier: 25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     393577
IP address blocks:        192.104.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:55:31:3e:59:15:26:cf:72:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e1eff5-1423-4100-89f4-3340efd8f1ea
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=ba40d844-7abd-4f74-b04a-2cb0e3be33f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cc:2a:b7:c7:71:34:73:db:af:d8:59:90:22:
                    db:79:1f:1d:27:97:be:22:f6:bd:59:36:66:6d:73:
                    e7:a1:77:33:82:86:a6:77:84:9e:a2:7b:af:35:b1:
                    e5:01:86:80:2a:fd:78:9a:6a:e3:59:f2:01:48:81:
                    b0:b0:a5:9b:fe:1c:c9:37:9f:d7:63:0a:68:10:a5:
                    a4:f5:76:6f:2d:8a:3b:8d:eb:59:4a:4e:10:5f:01:
                    5c:74:9a:7c:0d:d5:12:cf:43:93:ba:c4:87:b9:77:
                    76:2f:04:32:d0:fb:2f:92:71:b5:6e:cc:af:65:a6:
                    d0:b7:0f:81:80:50:13:24:cb:d0:7f:2e:0e:66:f1:
                    30:66:cc:1b:dc:b3:f7:a3:2f:7a:52:51:5d:19:d8:
                    42:6f:fd:57:5b:ac:33:21:90:70:81:69:8a:63:ef:
                    b1:a5:07:26:60:46:26:99:06:0d:93:3f:32:c9:df:
                    46:64:3c:35:25:0c:ba:a1:21:0e:af:a6:cd:b6:26:
                    e4:1a:99:c0:85:84:c6:d2:1f:7b:d5:c2:f0:fd:21:
                    04:cf:3c:3a:e5:ce:43:22:15:48:0c:f8:0b:ad:eb:
                    42:4c:ef:0e:b3:d2:79:6b:9a:6c:63:f1:2e:f7:3b:
                    91:8b:5f:8e:ae:de:3c:30:5f:ab:b6:39:c2:4b:16:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:34:12:57:80:84:4D:9A:4F:4B:81:5A:7D:FC:77:A0:FF:FF:D4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/b56ea2ad-090c-3a33-986e-4939a8ecb40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl

            X509v3 Authority Key Identifier:
                keyid:25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:d5:d6:6f:45:91:01:37:fd:5a:ef:bc:dd:40:82:ab:51:
         0a:e9:82:cb:fb:e7:72:e2:be:99:f6:56:e3:e7:83:87:ba:09:
         8e:ac:89:eb:dd:81:06:68:73:df:05:fe:7f:e3:4f:2c:fb:10:
         18:ae:1d:60:74:67:15:c3:74:50:80:81:06:40:3b:91:bd:ec:
         cd:7a:fd:a9:50:8f:f8:ba:8d:7c:bb:9e:05:8b:c2:7b:cf:70:
         99:ee:ef:e6:d0:0a:f9:ab:5b:ba:34:10:ae:20:fa:71:de:6f:
         17:89:af:e0:7a:68:d1:49:66:2a:7e:e6:d1:14:50:85:f8:b0:
         78:ed:d3:64:c7:2e:24:03:ba:7b:28:13:db:21:b9:b9:b1:7d:
         27:70:07:ca:68:3c:7d:22:a7:7d:9e:97:4c:8f:0f:d9:55:88:
         df:47:dd:71:cd:5a:95:96:35:07:2b:20:a0:ad:fb:85:86:4b:
         73:75:c8:05:05:95:8d:d4:bc:6d:76:75:04:ba:6d:ba:8f:54:
         66:09:71:7d:da:b8:27:d7:f5:4b:54:68:c4:b2:27:d1:62:f3:
         7d:a8:2f:a1:a7:57:00:89:e5:73:24:fd:fa:95:7d:00:c9:d9:
         1e:cb:5b:91:49:4c:2a:30:2c:36:0a:06:7b:72:78:71:96:95:
         b1:a6:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:12 2025 by rpki-client