Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa
File:                     9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa (raw, json)
Hash identifier:          aLBGolFkfvXJFm2my/eYZz7LIgVtRMc4fpOyUktL20M=
Subject key identifier:   06:F3:BA:6C:CE:C8:44:A7:4C:77:47:BE:D1:8B:CE:ED:14:1F:BB:1B
Certificate issuer:       /CN=5e4e9a46-06dc-462d-a10c-710a3c461796
Certificate serial:       010D0C9F4328584B4BAC5BAD137162E146641880
Authority key identifier: 7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     237
IP address blocks:        192.88.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5b:ad:13:71:62:e1:46:64:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4e9a46-06dc-462d-a10c-710a3c461796
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=c5409369-efba-49f6-9ca5-0baa9615dacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:00:9e:af:bc:06:c5:53:6b:32:e4:d2:52:
                    c6:8a:84:84:5e:8a:71:fc:17:a7:b9:c8:d5:37:4c:
                    15:3c:b7:7f:ea:b6:83:c9:fd:5b:aa:53:89:a5:6a:
                    3d:15:8b:b8:d4:6d:38:01:a8:52:9c:cf:c0:af:7d:
                    3a:81:2b:1e:d3:55:d9:c2:f4:3e:a9:f2:ed:0d:46:
                    91:73:ed:4c:c7:66:75:e3:18:43:33:06:39:3e:8e:
                    b4:f4:5a:1f:69:18:50:52:7e:fa:8d:29:2c:d6:46:
                    ea:58:1f:5f:93:3d:6a:ef:64:a9:bc:bb:5b:55:f6:
                    c1:cc:1e:f1:be:b1:45:c6:c6:18:e2:65:e1:b2:89:
                    a1:25:90:7c:5f:a7:cb:61:eb:7f:bf:1f:68:46:05:
                    f0:07:81:57:a8:f3:9e:1a:8e:9b:11:10:24:5d:1e:
                    04:c8:8d:f8:a0:8f:b9:7d:19:1f:25:10:6c:d2:58:
                    15:05:4c:1c:a9:0d:8d:81:71:61:5a:b5:e7:80:82:
                    54:57:eb:39:41:af:10:4d:0f:65:43:5d:55:be:b4:
                    b5:41:8f:bf:25:d9:00:35:d0:23:9c:1a:d8:8a:2d:
                    40:ef:6c:4a:80:92:26:3a:24:62:83:96:30:87:42:
                    cf:72:e8:7b:64:01:d8:e7:91:bd:8b:79:7e:bf:1d:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F3:BA:6C:CE:C8:44:A7:4C:77:47:BE:D1:8B:CE:ED:14:1F:BB:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.crl

            X509v3 Authority Key Identifier:
                keyid:7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:69:d9:fe:d8:ff:10:6a:71:0d:cb:fe:f4:c8:00:8d:bb:29:
         b6:34:f8:29:e1:3f:15:b1:00:28:c6:62:08:33:bb:da:37:44:
         ee:a7:a2:94:a6:f0:7c:1d:d8:95:5f:c5:41:4f:31:ff:1a:56:
         9b:2d:a1:63:56:b7:a1:c3:cc:6b:d8:69:4e:42:1f:4d:33:ce:
         e2:20:5a:71:cc:19:40:69:96:86:c1:c0:bc:5e:09:14:b7:c9:
         38:f3:a8:1f:0d:27:e2:1c:d2:5b:32:65:99:de:31:ae:ec:5b:
         15:5a:7f:9f:61:a8:fd:e2:ca:a5:37:ce:e7:b8:cf:d6:40:3e:
         e1:1b:af:f3:5d:cc:06:6e:e5:ae:06:c4:94:6d:a2:8a:7b:f3:
         e9:76:2d:1d:c2:1d:b7:5e:8d:c0:7b:3d:4d:60:6f:9b:11:4d:
         41:0f:83:88:38:17:4e:86:bf:fd:fd:b1:3a:48:20:5c:96:e0:
         b8:79:8a:e2:91:d5:70:21:ee:d0:2d:a1:da:fb:d1:67:a8:fb:
         31:15:a7:85:ee:f6:81:63:02:6b:0a:27:8e:24:ec:a3:4b:24:
         7d:ca:47:81:17:01:8e:d1:5f:8c:f8:3b:ea:be:2d:4a:39:11:
         0f:a4:2d:1e:1b:4b:d7:9f:4e:d1:e9:41:fd:d4:1a:f7:f7:10:
         6f:f9:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:54 2025 by rpki-client