Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/232df44e-b887-3f97-af2f-cc7a9b0db57e.roa
File:                     232df44e-b887-3f97-af2f-cc7a9b0db57e.roa (raw, json)
Hash identifier:          h++2Ua0+gBcVooykR1b7e30+tzIZA2uBkgg1xPEcfD4=
Subject key identifier:   B2:A7:40:4B:2C:FA:DD:3E:DD:9A:9C:BA:48:B5:74:2B:4B:0B:06:DC
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F4328584B53DDE5EC798DEC27DA61BF00
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/232df44e-b887-3f97-af2f-cc7a9b0db57e.roa
Signing time:             Fri 26 Sep 2025 17:54:39 +0000
ROA not before:           Fri 26 Sep 2025 17:54:39 +0000
ROA not after:            Thu 25 Dec 2025 18:54:39 +0000
asID:                     6315
IP address blocks:        198.60.109.0/24 maxlen: 24
                          2607:24c0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:53:dd:e5:ec:79:8d:ec:27:da:61:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Sep 26 17:54:39 2025 GMT
            Not After : Dec 25 18:54:39 2025 GMT
        Subject: CN=b0675f6b-d676-4904-b10a-cb26ea25922a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:07:50:db:15:0e:7c:07:d0:d3:59:99:d2:
                    eb:c6:17:92:3a:97:bc:62:23:55:2c:57:b3:0e:f6:
                    92:d9:b4:98:aa:56:ef:c4:0e:67:5b:fe:d9:2a:04:
                    ec:c8:39:c0:b1:fb:58:d9:bf:df:5b:30:e2:85:70:
                    ed:a7:e8:bb:18:00:84:9a:e6:2c:b3:76:9c:16:34:
                    45:47:3a:d9:92:8d:56:3e:0b:e7:13:4b:ca:77:88:
                    0c:e3:a4:f9:2d:3d:79:99:35:31:6c:9c:64:6c:91:
                    8d:fc:b4:40:c8:58:6f:f8:0a:ca:e4:70:07:28:79:
                    7f:0e:5a:be:b1:91:ca:b6:27:d4:c6:53:8a:11:4f:
                    36:d5:5c:c3:f0:db:a3:73:3e:e3:6b:f8:a6:39:b3:
                    55:33:b7:b8:3b:3e:b2:c7:01:95:5b:6f:7f:90:50:
                    a8:93:c1:fb:d2:e7:39:c6:77:ed:ef:dd:b6:fc:a6:
                    f9:8d:7a:c8:5c:9f:d9:2f:3e:a0:f5:d7:7c:e8:8f:
                    ee:7c:fc:ad:e5:1c:47:3b:7f:f6:4d:00:39:bc:04:
                    fe:f8:4c:29:1c:d5:80:e4:92:e2:af:35:5e:d6:43:
                    f4:db:45:04:3c:97:a6:b6:eb:31:5a:5e:61:c0:28:
                    48:e5:94:95:a7:1d:fd:e1:3c:a4:c9:44:06:83:16:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A7:40:4B:2C:FA:DD:3E:DD:9A:9C:BA:48:B5:74:2B:4B:0B:06:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/232df44e-b887-3f97-af2f-cc7a9b0db57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.109.0/24
                IPv6:
                  2607:24c0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:08:81:b7:6f:c1:18:a5:75:54:6f:ce:2d:48:b5:31:73:43:
         be:4b:19:1d:7c:68:26:fd:d5:83:29:b3:b8:74:46:89:3e:ca:
         3d:b4:86:9c:32:ed:68:d4:e5:cd:30:4c:5f:51:1d:42:75:72:
         4b:ec:c8:c6:5a:76:61:29:2b:3a:df:a1:df:b3:3c:02:4c:76:
         f5:fe:bb:54:a6:bc:45:36:9a:c6:78:c1:c0:e4:99:ef:bd:f4:
         d9:59:5c:73:2c:2e:ae:9e:d5:82:f4:e5:e6:d9:85:6a:a6:e6:
         08:61:e2:93:39:ef:30:86:88:b5:ee:08:41:e5:a0:96:85:87:
         57:1e:9a:ee:cc:4e:9e:a2:f9:36:6e:9b:f2:e7:60:98:5c:4c:
         c5:c3:b7:8a:ef:0e:74:b4:3a:76:6c:e3:e5:9f:f2:8a:fe:39:
         f6:42:02:0e:17:74:09:30:15:b3:6c:a8:65:48:61:1c:ec:f2:
         dc:20:86:b0:da:28:81:7b:23:e0:2f:78:2d:eb:c7:8c:c2:f3:
         5e:a5:bd:9d:2c:b7:65:3e:85:a0:ea:5c:36:fd:6f:84:a1:d4:
         cf:13:ac:b8:da:4b:6b:c0:6b:0a:19:a3:31:e5:64:02:d3:f6:
         59:6e:86:68:b6:94:e9:3d:94:e5:66:9d:da:a7:a6:92:d9:60:
         2e:51:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 09:48:11 2025 by rpki-client