Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa
File:                     e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa (raw, json)
Hash identifier:          WcytVwMbBRiqwTvw5jmKh7qXwQEcRy+Q43u6WUtLdPY=
Subject key identifier:   74:DA:DB:DE:B6:5C:C7:A8:52:83:0A:62:DA:1C:22:99:2E:A1:2E:AC
Certificate issuer:       /CN=a1d568c5-f4e7-4018-a050-a2f04280e225
Certificate serial:       010D0C9F4328584B5B0741E9768E28F0353FFFC0
Authority key identifier: 60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     393249
IP address blocks:        198.162.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:41:e9:76:8e:28:f0:35:3f:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d568c5-f4e7-4018-a050-a2f04280e225
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=1d4ae250-fc96-4fad-ba5c-ff3ebed94a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:83:2d:63:d0:91:10:13:0a:00:11:e6:1c:
                    9b:c6:0a:50:26:78:8b:a4:88:99:f1:ce:e1:b2:7d:
                    15:33:aa:3a:cd:4b:1b:e8:50:30:f1:68:14:8b:ca:
                    55:3d:98:b8:f4:98:3f:61:de:da:76:ed:00:4d:44:
                    f8:5c:64:5b:3a:e8:06:9d:5c:0e:94:dd:69:59:cd:
                    a1:f8:90:a4:63:b0:ad:e7:ce:5b:b5:81:08:27:ae:
                    ad:cf:96:ef:5d:5c:ae:dc:e9:f6:98:4b:90:e3:93:
                    1b:8c:ea:4e:01:8a:7d:7d:28:82:9a:56:0b:22:29:
                    b0:4f:3d:9f:f0:e0:da:76:85:63:8d:80:c9:d1:8d:
                    38:d4:1f:bb:5d:71:c1:be:ad:2e:7e:fd:e5:47:6b:
                    38:e4:89:4e:dd:74:d2:cc:fa:17:f6:a6:5d:b7:9b:
                    96:ce:8d:e8:c7:7a:84:31:e7:cc:7a:3c:ff:f2:b3:
                    0a:40:70:17:02:f3:82:bf:bc:1a:65:6b:37:69:13:
                    a1:4b:de:d0:bb:81:76:87:e0:66:e4:97:99:40:ee:
                    4f:12:2c:1c:d4:e1:4a:71:e4:66:76:52:e2:de:45:
                    eb:93:f3:39:99:01:89:a9:d1:28:82:48:81:89:49:
                    5a:de:ab:09:22:d4:99:e6:06:49:64:cd:c7:38:b8:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:DB:DE:B6:5C:C7:A8:52:83:0A:62:DA:1C:22:99:2E:A1:2E:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl

            X509v3 Authority Key Identifier:
                keyid:60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0f:7a:4e:d7:0c:b9:86:9d:72:9e:39:7f:fd:00:59:80:dc:
         ef:f8:7a:5b:98:08:b2:59:72:39:97:fd:d7:3b:5a:d9:59:ac:
         05:44:e6:0f:7d:b7:73:a8:1c:b1:56:74:81:78:b6:71:75:ac:
         05:68:1c:dc:49:1f:f0:4b:85:e3:df:18:cd:62:b4:a1:73:cf:
         bd:f5:a5:65:0e:46:25:c9:2e:31:ad:b1:80:79:3b:6b:63:a6:
         0e:c9:1e:c5:8e:58:08:4e:34:2e:91:72:41:f1:4e:40:67:1f:
         8e:32:5e:9b:59:f4:a1:b5:2e:f2:09:44:97:7e:d6:b7:b0:3a:
         1a:62:f8:30:a9:91:cf:62:55:2e:e1:11:ea:d6:c5:54:66:fd:
         5c:19:df:f4:dd:b2:f1:4d:cd:bc:35:e6:16:45:42:8c:95:02:
         5d:46:a9:c1:61:09:09:d2:6c:cd:87:ce:28:9c:bb:94:1a:e1:
         78:74:b5:a7:91:15:fc:09:05:d8:d1:ef:f3:78:8a:41:ef:a7:
         cd:6f:77:a4:58:80:60:39:c0:1a:43:64:a1:fb:33:e1:ac:94:
         56:80:ef:7c:b1:a2:b8:05:2c:d0:1b:9b:f3:98:fc:86:d7:78:
         81:2b:09:31:49:c9:cb:6c:f4:75:25:ba:95:f3:a2:05:32:3a:
         77:9e:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 16:25:17 2025 by rpki-client