Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/7401c51c-fcf3-32cf-9ba0-c6029ebefed5.roa
File:                     7401c51c-fcf3-32cf-9ba0-c6029ebefed5.roa (raw, json)
Hash identifier:          Kgo87pyHJ9N5YVw3hwTifMtTQqNxYwvQ958BV6g8Qw4=
Subject key identifier:   FB:DA:E8:E7:0E:CD:5C:13:E7:95:6C:14:1A:8A:AF:30:AB:F3:7F:04
Certificate issuer:       /CN=b794e507-3ed1-4151-855d-6305696fcb0c
Certificate serial:       010D0C9F4328584B2496D0830523C6591F2B4180
Authority key identifier: D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/7401c51c-fcf3-32cf-9ba0-c6029ebefed5.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     26464
IP address blocks:        199.192.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d0:83:05:23:c6:59:1f:2b:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b794e507-3ed1-4151-855d-6305696fcb0c
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=992566c9-e6d4-4095-a39c-cbe5331c207f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:85:cc:6c:f9:23:cc:08:70:bb:c5:fc:05:
                    85:ca:86:4b:d0:ce:a2:99:14:63:15:4b:5e:5e:6e:
                    3c:c0:58:39:d9:c2:3d:0b:53:2f:5f:6c:74:00:0c:
                    1f:5f:07:7f:23:b4:eb:07:09:eb:6f:d1:52:b9:f1:
                    a5:c2:09:c3:59:b1:a2:00:83:28:b2:ad:ea:1f:6e:
                    88:75:fc:e4:08:ac:da:af:19:4f:10:a0:28:80:1f:
                    cc:87:6e:af:f4:2d:b0:3b:67:71:44:56:0c:68:e6:
                    d0:a2:7b:33:52:58:2b:78:6c:8e:4a:b5:6a:89:6b:
                    67:28:c6:6d:1b:aa:93:55:28:e6:e0:35:61:c5:76:
                    63:b4:b4:b3:d3:3f:b4:bd:ae:7c:19:33:7e:a0:91:
                    36:6f:f6:9e:01:06:fc:a3:ba:e9:39:07:d0:65:02:
                    a2:14:f9:97:6d:e1:93:a3:90:9a:22:04:13:ba:7b:
                    e1:46:fd:e1:25:55:35:b3:f8:7a:e6:69:99:5f:c4:
                    2e:ad:7a:b6:22:c6:72:11:1e:b4:2d:f1:5a:0a:f3:
                    5b:ea:11:bb:25:8f:3a:1c:59:99:6f:69:e3:84:ae:
                    2f:43:df:08:d0:f6:e9:8c:0a:d2:2a:ec:f4:91:74:
                    ed:15:37:3b:cf:50:fc:91:4f:e5:bd:6d:13:09:90:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DA:E8:E7:0E:CD:5C:13:E7:95:6C:14:1A:8A:AF:30:AB:F3:7F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/7401c51c-fcf3-32cf-9ba0-c6029ebefed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl

            X509v3 Authority Key Identifier:
                keyid:D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9c:1d:06:27:59:58:fe:3f:4c:c4:e0:04:74:47:24:88:88:
         d4:ac:ec:c9:d0:fd:53:8e:ed:73:4f:34:b4:1a:09:bc:96:bd:
         92:b3:b3:d1:ab:5e:7e:d8:fd:bc:68:3f:a5:fc:3d:d0:ca:22:
         be:e7:09:88:c4:bb:23:6c:f2:ad:0c:a2:62:eb:51:1b:e0:4e:
         20:53:5a:24:de:c7:a1:8f:12:41:41:0b:25:59:36:1c:6c:4d:
         2e:ae:ff:70:a9:e3:8a:79:ac:91:18:20:c2:27:75:9e:a8:a5:
         b7:e2:61:47:f1:d2:30:c4:65:e2:1f:83:25:a7:a5:61:4a:33:
         86:d2:46:67:f0:05:cc:90:1f:dc:47:17:5a:7b:c7:15:67:bd:
         7e:54:94:de:14:db:2d:aa:4e:6d:cd:df:2d:ed:db:52:7d:c7:
         64:08:e7:97:08:a9:09:ae:df:26:01:eb:ae:fe:23:96:9a:d8:
         fb:9f:16:bc:6c:b4:71:24:b6:47:cb:b0:d3:1d:58:82:c3:42:
         6d:d5:d4:29:3d:65:60:2e:0e:e1:ff:91:47:83:76:dd:47:02:
         50:82:5e:0b:be:70:d2:b1:a6:84:09:ae:db:c8:8b:74:eb:69:
         1f:55:82:52:78:96:6d:78:a9:59:8a:04:bb:30:32:4f:69:e8:
         d8:b9:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:35:26 2025 by rpki-client