Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa
File:                     daab1a35-5ba6-3617-8f32-534a11d5dd38.roa (raw, json)
Hash identifier:          Tj+Nx+Ng+CAnH9aBg6lMT40naPr71gCzo4YNZXijt5Q=
Subject key identifier:   90:AD:2C:03:67:13:04:70:9A:77:F8:4A:A1:1D:B5:11:D0:10:B7:EC
Certificate issuer:       /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
Certificate serial:       010D0C9F4328584B477C71BEC24270A59F362E80
Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        192.84.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:71:be:c2:42:70:a5:9f:36:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=53ce174b-3620-42c3-8589-e2b508bdafd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:e1:a8:c8:75:54:03:c0:5b:d4:80:10:e0:
                    ba:32:1c:35:4d:ea:fa:91:74:e5:b8:92:f9:0c:61:
                    58:ff:48:e4:58:0b:5b:09:49:ee:0a:7a:24:c8:71:
                    9c:6d:ca:29:53:8c:65:b4:b4:c3:2e:60:f1:96:13:
                    a6:4c:79:fd:7c:21:91:8f:76:cc:35:72:2f:0b:0c:
                    a2:94:3c:58:12:2f:53:4c:6f:04:1d:88:e1:f3:33:
                    1d:c8:f2:db:c6:f5:86:e3:8c:b4:b9:b5:03:61:d4:
                    a1:c5:86:73:84:69:98:cd:e1:52:22:2b:3b:cc:26:
                    1b:ce:9f:0a:b5:42:b7:eb:67:96:17:1b:7d:2b:c4:
                    c0:cc:80:25:36:3a:e8:40:84:f5:48:8d:39:aa:89:
                    bc:3f:09:81:3e:57:63:ab:a2:4c:4f:26:4c:42:71:
                    ab:bd:e8:aa:12:92:f1:27:ea:71:a3:11:7e:eb:b2:
                    40:dc:8f:f4:9d:7c:5b:2b:3a:ac:30:00:aa:c9:5f:
                    50:87:86:27:f5:ce:c0:1f:e8:4b:ca:36:1e:92:c5:
                    b0:9f:39:5f:f4:b3:05:b1:00:37:60:1c:91:cc:63:
                    d7:e3:b5:ce:fd:e0:a2:16:c4:aa:02:34:1c:e3:e7:
                    6d:af:b5:a7:98:3b:92:0f:e1:49:5b:67:0a:23:17:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AD:2C:03:67:13:04:70:9A:77:F8:4A:A1:1D:B5:11:D0:10:B7:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl

            X509v3 Authority Key Identifier:
                keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b4:07:eb:45:94:da:0e:9e:cd:63:31:3d:a1:94:5e:ba:9b:
         95:3b:0b:42:29:b9:cb:5f:ee:a0:f3:fb:cd:0e:d0:08:a3:10:
         34:27:19:f6:89:48:61:33:7e:a5:af:dd:a7:c2:5d:62:04:49:
         a9:ad:ca:73:f6:f0:76:25:6e:9e:dd:5a:6e:ed:97:3d:fa:91:
         c2:1a:c1:83:c6:51:1d:ef:e0:cc:e7:8c:a6:cb:fe:75:69:9b:
         cd:ca:c5:c2:e0:5b:e3:05:2e:f9:64:6f:ca:c6:0f:5f:ab:46:
         05:25:bf:c9:7d:08:6d:be:4b:e1:07:6b:f1:68:e1:ad:41:02:
         26:5d:18:34:f1:7c:f1:28:ef:a6:00:17:a5:65:85:75:84:8a:
         e9:50:94:25:d4:5d:69:de:b2:dd:29:e0:48:26:fb:97:b8:82:
         14:f3:ea:8e:e9:af:1a:66:fb:c1:7e:08:23:69:b2:b2:f0:09:
         b8:1b:5e:19:83:1d:51:93:0c:1a:b6:bb:fd:93:4a:d8:45:04:
         22:96:40:44:6c:aa:0e:93:2f:ed:46:77:90:4d:97:fe:68:dd:
         66:f0:dd:d7:a4:1b:34:e9:43:86:46:6a:c7:e3:3a:2f:9b:d0:
         8b:c0:57:ba:43:aa:b9:9b:a9:c5:3f:ee:6b:a9:cd:8c:90:4b:
         87:9d:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:33:52 2025 by rpki-client