Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa
File:                     e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa (raw, json)
Hash identifier:          oOACxzOBF0UqkHFW4LYQDkrkpijdQUoGWEIwpBVT+o8=
Subject key identifier:   5D:18:8B:65:87:62:30:E8:2A:2D:A3:73:99:59:4B:FD:31:53:0D:C7
Certificate issuer:       /CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7
Certificate serial:       010D0C9F4328584B33F1A51DE35F53DB0F85CC80
Authority key identifier: 99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     14426
IP address blocks:        192.75.140.0/24 maxlen: 24
                          192.139.26.0/24 maxlen: 24
                          192.139.29.0/24 maxlen: 24
                          198.161.32.0/19 maxlen: 19
                          204.209.21.0/24 maxlen: 24
                          204.209.22.0/24 maxlen: 24
                          204.209.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a5:1d:e3:5f:53:db:0f:85:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=6996a036-cc9e-4422-abc1-b685a1c02775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8a:42:57:c1:72:69:99:9e:da:4d:27:4e:fa:
                    20:95:21:ef:4d:d0:92:1f:a0:1d:f6:5c:ed:a8:77:
                    48:b7:07:3a:a5:c2:15:51:59:a6:2e:ea:85:c1:1f:
                    2d:7e:84:88:85:72:d1:b9:fd:73:d3:31:6d:fa:a9:
                    3f:b9:fa:61:0e:1d:2d:50:ce:10:87:03:b3:7c:2f:
                    b5:68:77:ec:51:20:74:56:8c:20:b3:46:ed:76:b2:
                    f6:b2:b4:a8:83:07:df:08:cb:b3:fe:fa:2e:2b:d9:
                    e3:7f:64:25:e1:1e:b5:21:69:f3:ba:39:88:80:73:
                    21:f3:10:80:c7:d8:4d:91:3f:2b:10:0c:e2:ed:e6:
                    d8:05:d7:7e:25:bf:9f:d7:57:2c:db:db:25:3c:2d:
                    0a:ff:5f:29:2a:6c:0e:04:ff:a4:b6:30:7a:fa:13:
                    74:99:3f:61:a7:12:d5:d7:b8:f1:d6:2c:33:0d:73:
                    0d:9e:8b:0a:e9:36:50:d8:2e:ee:09:61:15:3a:0d:
                    b2:f1:50:fa:67:a0:2d:45:f0:ce:3b:3b:f6:ba:8e:
                    6b:84:40:52:4f:5d:8b:e2:ca:90:9d:95:cc:68:1d:
                    13:a1:eb:75:96:da:9e:f6:ee:fc:3d:7b:19:61:23:
                    5f:ae:ec:11:1b:6c:ed:92:4b:24:d5:6d:b3:d3:fd:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:18:8B:65:87:62:30:E8:2A:2D:A3:73:99:59:4B:FD:31:53:0D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl

            X509v3 Authority Key Identifier:
                keyid:99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.140.0/24
                  192.139.26.0/24
                  192.139.29.0/24
                  198.161.32.0/19
                  204.209.21.0-204.209.23.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:19:1c:82:87:32:e5:43:b1:ec:78:c8:a2:44:ec:07:b8:
         78:a5:3f:87:ca:27:69:be:7f:da:7d:8f:fb:02:5b:a2:92:78:
         fc:ba:03:0a:4b:a0:97:f8:16:6d:f1:16:4d:9c:74:70:d0:8a:
         a9:73:1b:4b:1a:57:d8:ff:55:bf:3c:97:19:5b:5a:f0:37:8f:
         ce:07:09:a9:b1:8c:0f:e7:1c:04:7c:dd:34:43:c6:fa:c8:d4:
         07:66:6a:79:47:a1:b6:04:87:e9:c9:db:06:65:ec:f3:14:a3:
         da:86:7e:ad:97:e5:43:fd:0e:35:05:d3:37:4b:5d:bc:39:e6:
         bb:92:05:87:06:db:ad:2e:ef:44:4f:ed:6a:2c:17:c7:42:72:
         69:9b:68:82:49:d1:f3:ae:36:fa:bd:23:b5:82:67:74:7c:6e:
         da:81:b6:90:5d:0a:8b:f8:93:e1:19:44:1a:b4:aa:d0:85:4f:
         08:b5:19:12:c7:c7:35:66:b3:e9:b8:c4:a4:2b:52:71:68:bc:
         b2:4d:83:a6:2a:ff:89:ca:dc:ab:fa:ad:e7:7c:96:f8:06:35:
         85:8a:d4:e6:c5:7a:93:ef:6e:6c:50:e8:e3:c2:47:12:8e:2d:
         8c:e5:50:a5:b6:88:62:99:80:81:00:fb:8c:ac:11:e5:a7:93:
         24:85:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:36:48 2025 by rpki-client