Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa
File:                     a082d65c-6976-35d6-be33-792a4918c345.roa (raw, json)
Hash identifier:          1y0Y1zQLMv4Qum79YgiwLeDGJl+vfe4nnwIQVEpseIE=
Subject key identifier:   3B:95:59:4A:4B:CB:26:01:34:BA:8C:66:65:00:3C:16:5C:45:F6:80
Certificate issuer:       /CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b
Certificate serial:       010D0C9F4328584B031694CD4EEF0F7ACEA996A0
Authority key identifier: 40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     394438
IP address blocks:        192.163.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:94:cd:4e:ef:0f:7a:ce:a9:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=44b44c85-47cc-40c9-9b45-d389ba8e1b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ca:19:d1:92:6d:be:8e:f7:87:81:e0:75:e6:
                    f7:62:da:b5:a1:a9:49:74:be:27:54:53:90:c7:b3:
                    2f:96:16:2a:b6:82:4f:78:6b:ca:d0:f9:88:03:ce:
                    3b:e7:b6:46:90:55:1a:c0:5c:88:66:95:ab:8d:0b:
                    a7:57:78:46:f3:2b:2b:e0:45:9d:71:a4:76:94:c8:
                    39:78:f5:9d:d5:e0:0e:d8:a8:d1:69:9c:0f:be:62:
                    31:a2:6c:7d:db:db:9a:1c:30:10:56:1f:64:87:1f:
                    d1:12:85:d9:f6:91:94:d6:c4:f2:a0:28:1f:2b:e0:
                    aa:4e:5b:59:94:24:92:c9:b4:90:1c:dc:d7:c6:13:
                    98:e0:17:c2:b3:da:29:5d:64:af:82:98:77:8c:e9:
                    8f:c8:cb:93:c2:32:89:18:09:13:85:e1:18:87:34:
                    bf:cc:de:7f:9d:6e:85:e3:d2:32:b0:92:6b:25:12:
                    cc:45:8e:0a:10:bb:11:af:7f:d2:fc:d3:34:b6:51:
                    b2:3d:b9:66:04:51:29:31:94:67:7a:c5:44:cb:a2:
                    0f:90:ad:d3:e5:8f:be:cf:e3:ae:61:76:68:29:ca:
                    13:bd:be:32:18:10:6e:82:09:a1:76:83:b4:1e:c6:
                    65:6c:00:1d:b8:85:66:4f:fa:d5:18:d3:a0:bc:af:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:95:59:4A:4B:CB:26:01:34:BA:8C:66:65:00:3C:16:5C:45:F6:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl

            X509v3 Authority Key Identifier:
                keyid:40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:15:7d:e0:bf:57:30:ca:78:5d:33:ee:e4:ea:b4:96:56:4b:
         af:cd:ca:7c:63:5a:75:be:fb:02:fb:03:88:97:26:82:89:ff:
         65:81:46:de:ef:37:8b:ba:ae:11:ad:e1:4c:78:6d:b0:d7:87:
         22:cd:9e:1c:0f:7b:68:4d:db:27:56:93:c9:9d:1f:8f:06:93:
         9a:6a:d2:e8:5f:74:ae:a5:6f:72:53:2c:1e:49:b8:66:31:99:
         6e:c5:0b:17:db:15:05:7d:40:1f:29:fb:2c:f3:e2:24:23:9a:
         b2:42:b1:df:11:36:a2:d3:e1:c5:be:24:50:85:3c:02:87:b9:
         40:e8:c0:44:7b:1d:d9:c2:f6:0d:f8:58:ea:b5:03:88:7c:a8:
         66:c3:cf:26:18:3b:b7:2d:12:b0:51:4d:69:e8:e8:41:a2:ac:
         8e:fa:30:4d:e7:96:9c:43:82:4a:55:d8:d3:b6:7d:24:38:d8:
         ca:a8:51:c1:61:56:82:b6:ef:eb:49:38:2c:9f:11:1f:bc:a6:
         f2:17:12:f3:fb:e2:d6:89:4a:56:e1:9c:68:3b:4c:94:05:46:
         88:a3:02:68:87:2b:79:f5:5f:80:9e:b9:ba:14:de:6c:cb:4f:
         2f:df:d0:e5:04:6e:0e:25:e9:f1:32:53:3f:f3:53:66:62:d0:
         4c:e8:d2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:21 2025 by rpki-client