Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa
File:                     249ec9c1-aae0-3b16-a897-6f80b435a876.roa (raw, json)
Hash identifier:          I+zBAmBvqqvzFND55QbxIIIDX8ZTxxif4DSn35l09j0=
Subject key identifier:   A8:3E:5B:EC:66:D9:D1:CC:BB:BB:E9:B0:F3:D2:E7:16:83:B6:1A:E3
Certificate issuer:       /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial:       010D0C9F4328584B41E70A550A970C690E2AD3C0
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        192.0.55.0/24 maxlen: 24
                          192.0.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:0a:55:0a:97:0c:69:0e:2a:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=80803ad9-3612-4648-aee4-73ee91b86b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:4a:3e:bb:89:8e:08:28:e4:ca:03:59:3b:
                    15:6a:5d:17:dd:f0:76:f6:d4:3f:a2:e7:83:4d:ed:
                    54:bb:1d:77:38:db:54:f0:00:2a:1c:12:a0:16:7f:
                    29:ac:b9:4a:a5:41:c8:fb:ce:98:a7:39:a3:2d:9c:
                    d0:62:3f:50:7b:69:05:fc:de:e5:b1:2a:73:8f:a0:
                    00:b3:33:ba:b8:c3:15:4f:ca:03:08:da:b4:91:3b:
                    d7:1d:d4:f9:a5:5a:c5:be:69:26:3b:f5:d0:c5:29:
                    28:cf:47:8d:83:e7:e3:36:af:e3:34:11:99:39:4d:
                    00:e1:a9:70:49:a2:dc:4f:4f:67:1a:63:4e:04:39:
                    ef:fb:09:2b:87:7c:1c:67:49:9d:3c:e4:d4:b6:24:
                    de:17:25:53:82:95:ad:8e:d4:88:22:30:02:81:d5:
                    10:5d:cb:bc:29:88:c5:de:00:10:d7:fb:44:f3:d3:
                    62:e2:e7:11:4d:da:7f:df:23:eb:22:28:1f:0c:5e:
                    81:14:46:af:f8:aa:09:3e:8d:ea:ee:b1:45:ab:47:
                    ec:2b:a1:1a:ab:37:72:a6:54:c4:34:9e:49:a2:56:
                    d7:56:ac:8f:1d:0a:1f:97:0c:a6:c0:01:39:c1:59:
                    6f:d2:26:72:d7:83:f6:fc:55:b7:7f:c2:07:8a:74:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3E:5B:EC:66:D9:D1:CC:BB:BB:E9:B0:F3:D2:E7:16:83:B6:1A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl

            X509v3 Authority Key Identifier:
                keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.55.0/24
                  192.0.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e1:ae:dd:6e:90:e0:07:4c:26:96:f3:f6:a4:a2:f7:89:01:
         63:8a:9d:20:a6:41:d5:3d:43:c5:0b:41:34:f6:8b:f5:d0:bc:
         05:fc:0d:ec:b9:55:68:1b:67:dc:24:76:e8:af:fd:3b:f8:3a:
         32:02:42:40:c7:6a:98:ea:33:19:ca:0d:4c:5b:f8:85:79:68:
         e9:05:c6:92:57:a3:09:66:9a:bb:f6:39:53:bd:60:c8:06:8f:
         36:a3:32:42:a7:f2:e6:ab:44:6e:30:e1:3c:69:1e:6d:77:76:
         83:51:fb:7c:7b:dc:71:01:15:72:d4:17:2e:5d:0d:d2:71:af:
         64:6f:23:53:dc:28:a6:a6:e3:9b:0d:9b:c1:29:1c:93:d3:a3:
         03:9f:86:51:51:1d:a2:97:98:78:f9:8c:3c:8b:71:09:4e:b6:
         e8:97:ec:25:7f:80:23:d3:55:7d:c3:0f:d2:29:78:e4:3c:38:
         ca:5d:bc:4c:e5:d4:20:c4:c2:8e:21:47:1c:43:7f:5c:9b:56:
         9d:8f:42:2a:aa:a2:13:e1:62:35:20:ba:09:6a:0a:9e:cc:da:
         94:5d:66:92:d3:da:4c:df:17:b4:c0:7e:0e:8e:a0:7f:c6:7e:
         8a:cc:e7:ac:9d:28:f5:ff:48:3f:23:2c:75:0b:ed:fc:b0:25:
         db:96:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:33:50 2025 by rpki-client