Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/1281f76b-dae0-38e3-a6d6-c1d3ab3e31f5.roa
File:                     1281f76b-dae0-38e3-a6d6-c1d3ab3e31f5.roa (raw, json)
Hash identifier:          r8e9A1mfB9evJrmlbU8eDWho/qbREVRlC+X2+SfWrb4=
Subject key identifier:   EC:27:C0:6C:16:6D:80:F4:0D:23:57:DE:0B:80:CC:7E:6F:45:73:2C
Certificate issuer:       /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial:       010D0C9F4328584B1AD18564C0C949B4BBBADCE0
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/1281f76b-dae0-38e3-a6d6-c1d3ab3e31f5.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     2055
IP address blocks:        199.190.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:85:64:c0:c9:49:b4:bb:ba:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=34f9d3a2-a277-4b6a-9a7a-86017e1e6457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b4:b0:bc:46:0b:42:7c:2b:69:c6:99:6b:62:
                    0d:1d:63:ec:07:4d:ab:5c:04:dd:78:7f:ee:c1:b0:
                    a3:bd:67:cf:0e:ed:a9:76:cb:24:37:82:ea:69:b5:
                    1b:b5:74:6e:85:ad:77:98:d0:d7:fe:57:a6:c8:2a:
                    c0:97:e0:08:39:5c:79:b0:d9:0b:fc:f8:67:94:b1:
                    67:aa:e9:1f:06:e1:a0:6a:4c:25:20:c3:a0:d9:4e:
                    30:5a:e0:d2:d4:f1:0d:65:1f:2a:4c:35:9d:90:1d:
                    d2:74:70:eb:c5:87:f4:9b:25:de:53:b5:6d:81:3f:
                    e9:33:3d:7d:fc:d3:2e:2a:ec:9b:8f:b4:27:c5:39:
                    76:78:db:25:7e:1a:ac:8f:44:e2:d5:62:e0:00:f5:
                    d7:74:29:92:e6:a9:3a:1a:ce:4d:3e:1c:ce:d7:9f:
                    39:cb:28:c4:ea:ab:75:bb:f9:45:e7:d8:f9:e6:a7:
                    3b:17:5f:47:7d:3d:d1:f7:4c:8d:76:21:a2:77:b6:
                    58:5a:05:7a:19:11:d8:c2:b9:7a:70:30:0b:ae:5e:
                    1f:71:de:3f:ca:43:b9:c0:da:c3:d5:38:7c:33:04:
                    e0:99:ea:37:90:8d:06:cb:c9:28:17:5a:c6:6d:a8:
                    dd:2f:a3:0a:9d:ed:db:6a:2c:91:30:09:09:18:05:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:27:C0:6C:16:6D:80:F4:0D:23:57:DE:0B:80:CC:7E:6F:45:73:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/1281f76b-dae0-38e3-a6d6-c1d3ab3e31f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl

            X509v3 Authority Key Identifier:
                keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2e:4e:d1:f0:c7:32:8c:b7:95:c2:84:61:9d:ff:d5:64:78:
         52:d3:8b:b9:cd:a0:b3:10:99:a7:43:fe:b0:c0:a2:a9:c5:a0:
         62:14:fd:9e:c0:0c:b3:a9:4a:2a:82:3a:a5:f0:d0:05:7d:51:
         29:63:3b:2b:af:bd:38:29:74:bf:6c:c6:8c:e9:6b:c1:92:31:
         45:6c:cf:c3:7b:56:1a:62:df:7d:c9:f2:ab:30:15:29:c1:7e:
         9a:a0:43:55:a6:77:a0:79:09:5a:59:d3:6f:b5:af:68:df:68:
         f2:de:99:59:48:37:9c:21:9b:e1:d1:c9:7c:79:2b:33:77:c1:
         ef:97:71:7f:46:a6:aa:44:61:a6:b8:96:1b:55:f0:a9:47:64:
         d3:18:67:a0:0f:cb:f5:f2:cc:a5:06:a9:8a:47:f1:aa:c3:0d:
         ad:69:1e:78:56:05:c3:b6:05:6d:f4:9b:0a:da:78:2e:63:3c:
         55:46:d6:05:75:8b:da:2f:62:4a:5d:b0:85:b7:60:65:90:05:
         20:7a:a9:26:2e:87:11:7f:01:43:cd:be:8c:d4:a3:ee:df:73:
         10:39:f6:b0:f6:67:41:48:1b:f4:e5:22:42:e0:b1:85:50:11:
         34:8b:88:09:6b:e0:5b:55:79:2f:44:37:54:89:01:4a:02:5d:
         30:b8:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:09:20 2025 by rpki-client