Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/c983cc60-905c-3da5-9db4-c626bb313add.roa
File:                     c983cc60-905c-3da5-9db4-c626bb313add.roa (raw, json)
Hash identifier:          5O+954I+r4SAODdjUJ3+97bMFOkNKL+wXUEQHMsD79A=
Subject key identifier:   C0:76:DD:1B:F4:B6:F9:B5:3C:DF:9E:74:20:71:E8:88:A8:61:E8:D1
Certificate issuer:       /CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Certificate serial:       010D0C9F4328584B047BFB5340A02558A2255A98
Authority key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/c983cc60-905c-3da5-9db4-c626bb313add.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     394298
IP address blocks:        192.234.88.0/24 maxlen: 24
                          203.89.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7b:fb:53:40:a0:25:58:a2:25:5a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=969c5e16-3743-46c0-84cd-8440d46a75a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:8b:e4:f6:7c:a2:21:f2:1e:e8:42:03:8d:
                    6f:8f:81:2b:61:dc:ac:31:42:15:31:e0:74:ff:a4:
                    0d:a7:25:be:83:53:06:a3:a5:09:72:03:d2:2c:88:
                    c9:3e:5a:7d:39:1f:05:d0:20:36:c8:b7:cd:a6:17:
                    b2:fd:d5:f7:b8:ef:2f:de:da:1f:5c:cd:00:72:4d:
                    27:26:11:3b:1a:f5:13:ee:25:06:b5:29:a9:ec:e3:
                    10:ec:0d:e1:f8:9c:9a:22:94:35:c6:bb:6e:a9:ed:
                    9a:69:40:3e:31:53:74:1d:a2:47:44:ce:68:33:72:
                    d7:23:86:6a:af:b7:be:77:f1:72:4b:ee:9d:a9:17:
                    ab:1c:ce:e4:63:63:e6:3a:f5:2e:ad:8e:30:9d:af:
                    5e:a7:82:50:33:89:3a:83:8e:2a:11:6e:9e:2d:5f:
                    d7:8e:71:b7:d9:d5:a1:17:ad:71:af:27:12:21:4a:
                    d6:6f:d5:7d:67:06:58:cc:b3:9c:f2:8f:52:1e:b8:
                    4a:19:36:ef:42:41:31:57:df:49:16:44:c4:ee:de:
                    0b:e8:df:61:3b:d4:b9:fd:4a:08:50:72:48:5c:37:
                    ad:c6:cf:95:37:7d:07:85:39:0d:1b:1f:17:00:cb:
                    31:a4:07:b8:90:a7:29:bc:37:f3:49:ce:4c:06:d1:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:76:DD:1B:F4:B6:F9:B5:3C:DF:9E:74:20:71:E8:88:A8:61:E8:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/c983cc60-905c-3da5-9db4-c626bb313add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl

            X509v3 Authority Key Identifier:
                keyid:1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.88.0/24
                  203.89.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:3c:ee:58:bc:a7:2f:8d:b9:03:65:cf:a1:45:cd:3a:ae:5b:
         50:3b:1e:d4:a2:2c:08:19:68:36:2e:20:ec:92:f2:11:df:cf:
         c8:b8:d5:f9:87:32:e0:87:47:b6:14:35:e9:fe:d1:53:8a:96:
         5e:b6:f1:6b:0e:b4:2f:fd:6f:62:70:92:75:45:8d:82:61:2c:
         20:8d:53:8f:88:c8:4c:4a:43:e6:38:2a:5c:b0:d8:61:20:72:
         ec:a4:62:a1:8c:52:45:79:4b:bb:35:c4:2b:27:53:5a:da:38:
         ff:74:6f:9e:37:e2:69:03:dc:29:ea:af:0c:c0:c6:d3:21:b9:
         83:76:c0:1c:de:34:13:3a:bd:8c:6f:dd:17:d5:1d:c5:d8:00:
         cc:8b:8c:c9:00:29:79:45:0e:44:0f:4d:59:c6:b4:db:ed:4b:
         53:75:bc:81:d9:2f:42:8b:db:b6:cd:37:43:1f:02:7c:e7:39:
         23:ec:3f:28:b1:60:d2:78:15:a4:af:cd:c7:24:5c:a8:c7:9d:
         d0:d4:16:46:1a:7d:3e:ac:f3:e1:83:68:82:c0:c1:fd:2e:98:
         19:20:b3:f9:34:b8:17:16:51:36:ab:75:24:fe:1b:2e:4d:6e:
         fd:01:74:73:c4:53:8d:60:8b:32:9b:3c:a8:d1:81:a2:b2:11:
         42:67:40:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:29:06 2025 by rpki-client