Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/5a960dc4-ff7f-3b11-bedf-c63fed36addf.roa
File:                     5a960dc4-ff7f-3b11-bedf-c63fed36addf.roa (raw, json)
Hash identifier:          dkhuqcFjc2BTvNixmMJ64bDfmp2nLHCsXE0dumyWQ7Q=
Subject key identifier:   5E:C1:CA:BE:39:9D:C3:87:16:F5:83:90:EF:2F:0A:88:CF:83:50:21
Certificate issuer:       /CN=4007d5dc-09bf-4465-b6ab-84a07635a5a1
Certificate serial:       010D0C9F4328584B7427515B7EF17A5EA35F1400
Authority key identifier: AF:A9:A2:EA:B1:C7:9E:19:3A:5F:09:05:4E:1C:11:6C:E5:24:50:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/5a960dc4-ff7f-3b11-bedf-c63fed36addf.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     549
IP address blocks:        192.197.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:51:5b:7e:f1:7a:5e:a3:5f:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4007d5dc-09bf-4465-b6ab-84a07635a5a1
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=cfe3c06a-a6a7-4447-a592-82110a917d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:75:d6:8d:43:2f:6f:b2:ed:c8:7c:f5:bf:
                    22:60:56:2a:ff:ac:76:14:0c:f3:73:ec:68:01:9a:
                    6d:1a:2a:70:93:70:98:18:4d:f1:f1:6f:cf:9d:78:
                    02:76:a9:fd:9d:17:c7:b1:40:a1:c8:f2:b9:56:9b:
                    7c:62:16:fc:0c:3e:d2:ef:7b:f3:9f:2b:e0:53:47:
                    91:64:ab:c4:8b:ce:64:4c:0a:f2:ef:c9:9f:5d:00:
                    ac:55:b1:59:32:0d:65:23:5d:0b:31:de:40:82:0b:
                    72:db:1f:d3:ef:73:46:86:07:2d:97:a9:27:15:f5:
                    19:61:0a:0b:b9:49:6c:c4:1b:a8:8c:69:25:6f:ca:
                    48:40:57:bd:93:0f:1e:d6:d1:43:8d:47:e9:fb:04:
                    4c:e1:d9:62:e1:79:d2:61:15:6f:b9:94:c2:62:d6:
                    0c:f1:eb:c9:9f:c8:14:a0:20:6b:b9:c3:ff:82:8e:
                    cb:2e:8e:2b:3a:08:67:0e:1e:39:26:77:cc:37:ed:
                    a4:6f:6d:cc:91:74:eb:60:6e:16:4d:f1:cd:60:29:
                    1c:71:66:ca:14:48:6f:16:01:19:5d:35:b0:4a:85:
                    1a:f1:3d:0d:6a:83:3f:83:42:d4:dd:86:6f:62:42:
                    b5:36:97:73:fb:f5:93:e4:d1:d5:43:c0:05:fd:17:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C1:CA:BE:39:9D:C3:87:16:F5:83:90:EF:2F:0A:88:CF:83:50:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/5a960dc4-ff7f-3b11-bedf-c63fed36addf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1/4007d5dc-09bf-4465-b6ab-84a07635a5a1.crl

            X509v3 Authority Key Identifier:
                keyid:AF:A9:A2:EA:B1:C7:9E:19:3A:5F:09:05:4E:1C:11:6C:E5:24:50:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4007d5dc-09bf-4465-b6ab-84a07635a5a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:31:d1:1c:a7:bd:71:ef:0d:87:73:d0:e4:4e:f5:52:b2:
         f6:68:74:60:dd:f2:69:c7:23:a5:99:11:4f:96:58:96:fb:cd:
         4f:03:53:bf:93:8b:61:94:b1:15:19:da:55:27:0c:6b:6d:9e:
         3f:ea:c5:cb:e3:df:08:52:5d:8c:60:95:0e:1a:08:73:d3:09:
         a4:f4:2a:24:ea:1f:d8:17:52:ab:f2:7b:1f:52:17:69:f7:41:
         2c:bf:18:36:be:6a:3e:8a:c3:1d:3c:4e:93:b4:4f:6a:36:50:
         11:55:63:44:e6:9f:87:0b:a5:29:1b:c3:8e:b2:d0:72:d4:c4:
         89:af:05:57:6c:ff:78:fa:a6:0f:8d:34:ca:b9:0c:c8:a7:f4:
         70:5e:14:a3:bb:f5:74:28:9a:2f:ba:94:35:59:29:5e:cb:87:
         55:16:46:50:63:4f:cd:2f:e1:5e:5e:4f:7e:bf:04:66:9b:2e:
         39:2f:07:66:7d:95:c3:51:27:2c:9c:a5:66:c5:09:ab:fd:5f:
         6f:c0:1a:68:8e:20:55:ba:5d:f5:85:ca:f7:9b:f5:b2:e9:a5:
         24:e2:c6:d3:38:e7:95:f7:aa:22:e2:8a:c8:c0:ee:21:5d:35:
         a2:fd:cf:e1:c0:6e:68:b6:42:20:6d:db:0f:c7:70:a0:50:60:
         ee:10:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:07:11 2025 by rpki-client