Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/5dc294f6-f75b-34a7-87f3-e8e909072ab6.roa
File:                     5dc294f6-f75b-34a7-87f3-e8e909072ab6.roa (raw, json)
Hash identifier:          CAvx22W+dPudhG++X2wKJWqui6K7IkQ/qHXVj5vhHNk=
Subject key identifier:   2A:46:6A:1C:5C:99:D3:72:57:42:7F:89:67:14:FD:17:28:F2:B3:65
Certificate issuer:       /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
Certificate serial:       010D0C9F4328584B2066D570EFD499B80118A3C0
Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/5dc294f6-f75b-34a7-87f3-e8e909072ab6.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     4185
IP address blocks:        192.104.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d5:70:ef:d4:99:b8:01:18:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=ab362fca-fcc4-4b64-b31a-7cba2170db93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:85:32:28:d8:e4:92:04:ca:2b:56:be:b6:
                    e2:fe:04:b2:a0:e7:92:72:87:f0:c4:66:9f:a3:4c:
                    78:ac:b1:a4:00:0e:97:fb:25:78:51:29:71:ad:5a:
                    fa:b5:ec:82:55:76:ae:ed:d1:98:a1:9a:12:47:5c:
                    6c:9a:e8:84:cd:45:a0:82:6a:47:17:6a:9b:6a:7f:
                    bc:22:a3:02:8e:15:b9:14:d5:6e:33:e6:17:f3:1c:
                    05:1e:31:99:04:94:a8:40:44:d9:4e:df:99:42:49:
                    ac:7d:69:7d:32:fe:b1:d8:f7:3b:12:b4:68:33:72:
                    71:4f:6c:80:d9:c1:25:68:95:d6:b6:a2:3d:d1:5c:
                    a3:d6:48:a3:37:18:36:d6:fd:f0:c5:ea:ac:b2:b9:
                    9a:af:ad:a8:ef:f5:11:4e:cc:7b:ca:bc:62:ca:0e:
                    96:18:25:13:0b:71:bf:0e:f5:e3:6a:db:61:b4:8e:
                    9f:15:62:ce:c1:f6:81:a7:15:fd:11:65:b3:f9:86:
                    de:0f:06:b4:06:6b:c5:21:e4:74:9b:1d:4f:b7:fc:
                    e8:ba:1d:3a:4e:23:04:6a:b9:47:51:e6:79:cd:a6:
                    82:fb:74:e6:aa:65:5e:c5:88:a0:44:e6:b1:a2:80:
                    4f:e4:1e:84:a6:e2:25:d7:24:72:b6:c8:26:1c:be:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:46:6A:1C:5C:99:D3:72:57:42:7F:89:67:14:FD:17:28:F2:B3:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/5dc294f6-f75b-34a7-87f3-e8e909072ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl

            X509v3 Authority Key Identifier:
                keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8d:48:6b:17:02:dc:fe:3c:18:d2:c9:98:71:db:70:7c:bf:
         64:14:eb:76:f3:8d:f0:91:55:e5:f1:0f:03:eb:b8:5b:2e:48:
         ad:d2:2b:cd:6e:1a:ab:44:c0:80:ea:8a:b5:29:3c:20:a8:82:
         b7:27:52:c7:c4:56:14:ae:fd:be:e4:df:89:af:b6:e3:f3:eb:
         c8:a0:32:37:aa:cf:60:f8:ac:cc:ce:e1:1f:4e:95:01:41:64:
         c4:8f:37:e8:6b:56:64:30:8d:7e:3e:2b:a9:3b:7e:ad:af:d3:
         e4:43:9a:83:95:05:43:08:00:78:4d:bc:ca:5c:0d:a7:55:73:
         55:47:7b:ba:e5:b1:46:d9:3e:7e:f4:4a:37:b2:9f:f5:e4:63:
         2f:fd:8c:89:6f:0a:68:b5:8b:8f:e9:74:d9:8d:b5:1f:89:39:
         b5:f9:c0:d7:80:53:e4:8b:4b:fb:d3:58:6b:13:26:07:c3:d1:
         d8:c3:1e:dc:64:0b:5f:f8:8b:66:e7:f5:45:1f:87:db:51:1f:
         d6:33:db:6a:ee:50:ad:1b:4c:cf:26:2e:71:ea:91:c5:cf:22:
         ca:74:d2:fd:f0:5e:23:29:67:ec:55:03:4c:0e:22:a7:67:64:
         21:19:c4:be:74:9d:14:f1:ea:58:ef:02:b1:a3:79:a8:40:30:
         75:b8:42:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:00 2025 by rpki-client