Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/c31161f3-68a9-3f68-809c-11399141a3a1.roa
File:                     c31161f3-68a9-3f68-809c-11399141a3a1.roa (raw, json)
Hash identifier:          XCPS8dwOKusBJKdFQgQYktweMEbdEjzwqLvv2vpaGOY=
Subject key identifier:   DD:24:C6:E3:A7:AA:F1:9D:8E:80:31:7C:41:DE:FB:97:AB:0A:A1:D4
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F4328584B6B6DAF4EE9CE0696E82ED8C0
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/c31161f3-68a9-3f68-809c-11399141a3a1.roa
Signing time:             Sun 05 Oct 2025 10:00:12 +0000
ROA not before:           Sun 05 Oct 2025 10:00:12 +0000
ROA not after:            Sat 03 Jan 2026 11:00:12 +0000
asID:                     62553
IP address blocks:        199.119.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:6d:af:4e:e9:ce:06:96:e8:2e:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Oct  5 10:00:12 2025 GMT
            Not After : Jan  3 11:00:12 2026 GMT
        Subject: CN=bdce2fda-1919-4791-b0a7-709a96907f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:a3:9b:9f:6d:46:9d:1d:ab:8d:dd:cb:5f:
                    5d:7a:1a:62:65:38:ba:62:a8:46:4d:fb:17:e7:ce:
                    8d:28:bf:19:92:e4:af:e6:61:0d:af:bb:c7:85:03:
                    24:b8:80:46:24:45:bf:e2:9c:b5:b2:38:ce:9d:69:
                    a0:84:ed:ea:49:9e:39:a8:15:98:f9:19:6b:d3:fd:
                    f9:8d:0f:ed:c7:3b:3f:0c:af:c9:d8:ae:6b:fc:88:
                    e4:20:74:87:e4:94:7e:da:b2:fc:0d:ce:6a:d9:c8:
                    0f:db:cc:e1:9e:35:9f:09:3f:98:af:ba:2f:f3:84:
                    8d:d5:1b:61:8d:a7:b6:93:dd:b9:53:ae:ba:0e:14:
                    ab:fb:f3:a3:d3:f1:6f:1f:74:d7:dd:93:02:8f:9f:
                    e2:de:09:f0:64:b7:23:7b:59:e0:da:68:41:27:e2:
                    ea:d3:99:06:8e:47:ff:07:30:0d:b9:3b:00:30:a8:
                    43:c0:35:f0:ed:9e:1b:60:21:4a:6d:47:5c:72:cb:
                    1b:d2:5a:da:d5:30:75:6c:f5:11:f2:30:84:17:d0:
                    db:8d:64:44:dd:23:7c:5f:fd:f4:8f:83:b2:16:0d:
                    b6:65:eb:01:f5:00:2e:7c:9c:4e:b8:d5:bf:db:d4:
                    0f:a4:66:33:83:53:d9:45:7c:a8:ec:9f:d2:92:b6:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:24:C6:E3:A7:AA:F1:9D:8E:80:31:7C:41:DE:FB:97:AB:0A:A1:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/c31161f3-68a9-3f68-809c-11399141a3a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:2f:66:c3:91:25:d0:c5:f2:54:5a:d7:9f:70:5e:15:a4:
         c3:7d:94:cc:d7:2c:87:b6:35:b4:eb:19:8d:36:ad:ea:e6:a6:
         58:d5:88:8c:89:29:a0:1b:38:17:9e:bf:f8:77:12:0e:41:6b:
         82:19:78:02:9c:96:c2:a6:f0:d1:fc:18:ad:9f:4d:e7:c7:61:
         8d:bb:1d:65:a9:89:57:e4:53:d2:1f:2c:04:e7:9b:cb:ac:55:
         7d:e0:d2:3e:5d:e8:a3:93:56:8d:82:48:d5:d7:6a:ca:19:e9:
         24:d5:81:20:50:b2:87:29:f3:1c:19:c2:8a:bc:38:63:49:3a:
         a7:01:8b:ef:c1:2a:fa:71:89:4f:32:4a:dd:f7:de:89:b2:40:
         74:1d:9a:48:2a:0c:e6:51:55:19:e7:24:df:96:26:fa:9c:d1:
         b8:d0:a6:5d:8e:4f:b1:6f:39:08:b2:98:71:21:6e:36:7a:da:
         b1:dd:2b:9e:57:d8:3d:13:e6:ec:55:1e:32:45:99:3a:49:92:
         3c:62:0e:16:5f:c7:40:3a:52:c1:7b:82:4c:33:3d:6c:ee:95:
         2e:76:73:20:7f:fe:c9:63:70:7d:86:69:f6:64:cc:0a:76:01:
         f2:5d:69:e9:72:e9:45:bf:92:6a:62:69:df:de:4c:ee:e8:36:
         11:6c:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:29:56 2025 by rpki-client