Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa
File:                     0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa (raw, json)
Hash identifier:          Tc/Vgyu5GpoH1ncEiY0sLiZIiTReAv3FJsbV9db83gc=
Subject key identifier:   F0:CD:20:3A:74:A9:83:A0:A5:E2:B7:09:31:67:C8:52:3D:B3:6F:5B
Certificate issuer:       /CN=b18324da-6458-413f-b067-6f50e625e3dd
Certificate serial:       010D0C9F4328584B031695CFE15225EE1AA8B10C
Authority key identifier: 1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     46692
IP address blocks:        184.94.224.0/20 maxlen: 24
                          192.40.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:95:cf:e1:52:25:ee:1a:a8:b1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18324da-6458-413f-b067-6f50e625e3dd
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=900449c2-0afc-416f-bb9d-0e905ad28808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cc:fd:e1:ec:23:06:75:c2:34:b0:19:b4:a0:
                    ea:b3:20:d9:9e:40:27:34:4d:48:dd:e6:79:55:2c:
                    23:17:23:25:8d:62:43:95:6c:40:39:e4:55:07:fb:
                    a7:44:ba:f8:b8:5e:d5:ef:bb:b3:c8:e1:d6:65:ba:
                    22:06:a7:70:8d:42:58:8f:27:5d:e5:f4:78:a1:40:
                    9d:26:85:20:4f:10:8b:8a:f0:df:ee:bf:9f:d1:3e:
                    b0:fa:da:16:28:b6:d3:7f:1d:5f:81:c7:c3:d2:ea:
                    73:1a:d5:b9:d2:b1:44:15:6c:38:30:9e:0a:50:de:
                    b5:fd:cb:ff:0c:5e:bc:fd:7d:1c:da:7c:8b:30:bc:
                    48:1f:03:f9:99:10:03:75:86:a3:fb:4f:15:79:b4:
                    d4:9f:68:60:64:37:eb:ec:46:f4:6a:12:1b:93:37:
                    6e:08:8d:7e:4f:4f:2a:aa:a1:76:a6:21:92:ef:61:
                    ab:61:7b:4b:8f:17:d8:09:a8:52:af:02:ab:02:2d:
                    1d:b6:07:13:09:64:61:53:b9:4d:cc:c5:b4:85:a6:
                    14:eb:6b:50:93:d7:4b:3a:28:f0:f6:af:7c:d6:4b:
                    2a:2b:26:8e:2e:c7:26:52:03:e4:bb:2a:77:44:b1:
                    50:3a:d4:e3:5c:bb:17:1e:2f:ec:2a:bc:44:10:6a:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CD:20:3A:74:A9:83:A0:A5:E2:B7:09:31:67:C8:52:3D:B3:6F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.224.0/20
                  192.40.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:23:5e:3f:10:dc:a5:f6:b2:4c:07:12:ff:84:40:b3:21:9f:
         9b:a3:a1:22:db:d2:8a:64:70:a6:0d:22:eb:c5:ec:48:51:07:
         ae:fb:1a:5e:6c:a4:1e:fb:6f:98:f1:38:e0:36:a4:5e:82:05:
         3a:c1:47:d5:44:91:ea:72:e2:18:a2:03:8b:5a:30:6b:69:40:
         da:a5:f2:01:a2:89:d4:3b:72:4d:e6:cf:4b:05:7e:c0:a1:22:
         cb:95:62:32:20:39:eb:12:06:9d:22:2a:e3:0c:77:34:59:f2:
         17:cd:81:2f:f7:d3:a6:d2:3b:a9:04:ca:e2:db:e2:ec:51:59:
         bf:0c:ec:68:8b:94:3e:74:18:d3:75:c5:64:dd:a7:77:c1:d7:
         b6:30:80:c5:ba:e6:46:60:88:17:f9:d9:fb:0c:21:3c:7d:b3:
         ac:ea:7d:a0:6e:4d:03:eb:d1:9b:52:c9:27:82:4d:3e:b8:2b:
         2d:d7:50:a5:23:96:dd:b4:47:1e:58:a9:81:c7:e2:cb:b0:d2:
         28:da:18:66:71:72:d7:1d:6f:f5:7d:38:56:10:b6:55:3f:92:
         31:72:d1:e1:20:5f:22:8f:0c:a5:17:23:11:58:3c:2f:b4:58:
         a2:fb:78:ba:9d:46:df:26:ae:3e:fe:be:60:3b:eb:af:50:60:
         5f:39:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:39 2025 by rpki-client