Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/d17476cd-ab22-3dbf-bf7d-690bf6c1d218.roa
File:                     d17476cd-ab22-3dbf-bf7d-690bf6c1d218.roa (raw, json)
Hash identifier:          iqdnNBFRDqxvtY0tRDns4tzBdfweWIuXgkmhxCnfIj4=
Subject key identifier:   C2:6A:6C:64:48:F2:70:A3:F0:D4:CD:95:D2:AE:E7:97:80:99:05:F2
Certificate issuer:       /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial:       010D0C9F4328584B2B9196966735D13AAFD80A00
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/d17476cd-ab22-3dbf-bf7d-690bf6c1d218.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     10616
IP address blocks:        204.193.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:96:96:67:35:d1:3a:af:d8:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=1c475199-c2b3-4559-9eb3-49d8b4fdae7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:38:aa:6a:75:87:21:10:b6:8d:d9:4d:e2:
                    b1:85:75:c7:31:91:1a:49:83:24:b3:b1:dc:5b:9e:
                    f5:f2:d7:45:8a:59:b9:88:ce:65:45:11:e1:37:93:
                    fd:39:c7:36:a4:4c:3a:d4:48:5e:78:eb:1f:2b:f6:
                    83:3e:90:8b:ee:ab:03:10:5b:18:d6:80:94:e1:a6:
                    8f:50:91:cb:70:4c:28:ee:3b:de:da:84:4f:b6:22:
                    8c:60:ef:65:a0:02:78:16:0c:19:e4:55:a4:45:23:
                    be:b8:83:7e:ef:de:e7:26:0a:e3:30:42:22:1a:5e:
                    b3:b2:e3:8b:20:29:f8:95:1e:e1:66:32:0e:4d:e5:
                    ed:6c:0f:d9:ec:8d:01:26:21:f8:08:b1:f9:72:d5:
                    90:a6:24:73:93:6b:a9:01:32:d6:a2:11:3f:26:97:
                    f3:b4:1e:e2:32:32:c0:68:92:82:8b:76:33:50:2d:
                    bb:cf:56:5b:e3:76:7e:f2:d7:3f:fc:7b:57:4e:34:
                    6d:d1:83:36:66:55:eb:41:5b:8a:61:4f:2a:de:cf:
                    f2:b7:43:5f:e7:8c:f6:06:4d:e2:8e:37:a4:37:f7:
                    b6:87:20:97:a7:f2:8c:df:a2:21:a4:84:3b:e6:38:
                    fd:42:a0:ec:5d:f3:92:25:fe:3e:db:dc:30:06:4d:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6A:6C:64:48:F2:70:A3:F0:D4:CD:95:D2:AE:E7:97:80:99:05:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/d17476cd-ab22-3dbf-bf7d-690bf6c1d218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl

            X509v3 Authority Key Identifier:
                keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.193.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:c0:32:5b:4b:41:1b:ee:8a:69:ad:21:c7:9d:39:69:55:
         a4:b4:9c:cc:eb:d3:2f:39:e6:0f:03:1e:00:30:86:23:0c:7c:
         07:5d:f4:ea:19:32:49:6d:fa:10:ee:5b:7b:42:f4:f1:8f:73:
         a3:43:e1:50:96:98:a3:9f:eb:d7:ed:40:5a:71:00:6f:b1:fe:
         a0:b9:3c:25:05:94:30:d1:8e:d3:2e:f5:0a:ff:c3:be:e4:45:
         db:23:b1:fe:5e:83:9c:32:5d:bf:0b:c7:fa:5b:bd:48:f1:a9:
         25:c9:6d:db:6c:33:34:57:f2:f6:ae:19:fd:32:a1:27:1d:ab:
         0d:cf:85:a5:76:a3:3f:81:ca:3d:e3:d8:2f:9c:bf:f4:e7:c4:
         09:3c:ce:db:25:ad:e0:22:6a:89:4a:25:17:ea:14:c5:4d:a1:
         f0:f8:64:3f:4b:34:b5:1c:d6:5c:d8:8b:87:e8:8b:48:0f:b8:
         2d:aa:e5:59:3a:c2:0f:5c:06:c6:08:7c:0f:92:97:3b:96:29:
         4f:d6:fc:36:83:48:cd:de:b0:fd:8e:fa:f7:54:9c:ab:0e:1c:
         5d:63:94:9f:ea:4e:af:8b:0b:c9:66:06:7d:69:4a:00:53:9a:
         8c:af:03:21:1c:01:b2:60:da:e3:70:23:a7:ed:01:56:c3:9a:
         7a:d4:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:10:55 2025 by rpki-client