Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/c9c5c34e-a234-3f50-a132-48cfe11b74ee.roa
File:                     c9c5c34e-a234-3f50-a132-48cfe11b74ee.roa (raw, json)
Hash identifier:          tt4AZde8quFx+j6wlj8V+UdMlHHGaic2y0DD0F5mJ/k=
Subject key identifier:   31:32:4E:E5:E6:2C:A3:58:76:7F:66:5C:15:B0:97:AC:57:10:9A:6D
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584B3DB704D38A15502B70E1CD80
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/c9c5c34e-a234-3f50-a132-48cfe11b74ee.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        141.193.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:04:d3:8a:15:50:2b:70:e1:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=1bea1406-8fd0-41d3-ad30-3fd988dc569a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:df:cf:e7:32:80:cf:a2:26:05:57:0f:c9:
                    8a:d7:67:f0:7a:ed:45:a2:6a:0b:85:09:ee:54:4c:
                    79:09:26:98:7e:40:ed:bb:c9:7f:61:e8:a0:4c:12:
                    d1:84:b0:e9:5e:f7:50:31:eb:d0:af:49:09:16:c8:
                    ef:8a:28:b2:cd:07:05:dc:9b:73:42:d9:ff:eb:71:
                    84:b1:08:24:23:6d:6f:dc:1d:5e:c8:3f:07:00:71:
                    ac:83:d8:a2:df:ff:e4:73:04:8d:d2:cd:dd:92:27:
                    a8:b5:50:1c:36:3c:bb:fa:51:4c:d2:72:00:69:98:
                    15:6a:13:9a:a4:b6:6b:f3:4c:8f:af:32:40:99:31:
                    07:73:57:50:32:86:9c:34:05:af:b7:6b:9b:53:7f:
                    9d:f9:43:56:88:d9:09:f7:45:f3:0b:db:95:91:6a:
                    5d:20:4f:15:0a:98:17:e2:b5:b8:59:18:84:a0:c2:
                    07:7d:b6:88:0a:61:ef:99:29:81:18:da:8f:e6:44:
                    7b:a0:7d:e7:f5:88:a0:be:71:ec:13:7e:f8:b3:47:
                    de:a6:e2:67:ae:22:a6:dc:a6:bf:74:da:c0:51:6f:
                    31:52:1e:bd:00:b8:cb:81:72:a5:54:7e:86:9b:b5:
                    4b:81:24:46:d0:46:63:cc:15:1e:9a:3a:fe:11:e6:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:32:4E:E5:E6:2C:A3:58:76:7F:66:5C:15:B0:97:AC:57:10:9A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/c9c5c34e-a234-3f50-a132-48cfe11b74ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:02:c4:6f:fa:76:83:54:89:dd:0e:c3:6e:32:b6:86:43:a3:
         40:be:b5:18:cf:3f:87:df:a8:c2:11:b8:7a:6a:af:c2:38:16:
         7c:23:90:be:15:af:6f:23:76:63:a2:2b:b4:eb:3a:f2:c0:b0:
         d8:cf:86:5d:1d:33:c6:12:3b:0b:57:61:59:19:19:97:2a:a4:
         cb:b1:9e:a3:bb:eb:c2:e8:30:ee:e8:f0:2f:6c:39:e3:da:3c:
         96:21:a3:34:35:c2:8f:27:f1:12:12:64:67:26:ce:85:b1:7e:
         bb:f1:5e:8d:10:f8:49:73:b7:c9:0b:5f:35:f2:41:c2:c7:9d:
         d0:f1:82:01:a7:40:81:34:8f:ae:c9:f5:2f:ee:67:b3:64:20:
         82:af:e8:a9:96:c9:1b:22:0d:41:c0:1c:b9:0c:fe:f9:da:15:
         9e:27:09:1b:e0:35:6f:ca:97:2a:ea:82:be:08:f3:eb:d4:4e:
         43:2b:b7:43:69:76:9b:e0:a1:ed:03:36:65:0e:64:2d:32:aa:
         05:29:50:f5:1f:75:24:e7:4f:dc:d8:fe:b6:66:98:f4:14:dc:
         b3:48:5e:07:d2:3b:8b:1b:9e:d5:b7:fe:52:8b:8f:ee:58:65:
         20:df:ac:bd:0e:31:95:9b:f9:e5:10:14:6f:64:02:3f:1a:2d:
         46:e1:73:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:24:16 2025 by rpki-client