Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/3d0945a8-c988-333e-aa31-0b225912658d.roa
File:                     3d0945a8-c988-333e-aa31-0b225912658d.roa (raw, json)
Hash identifier:          oWOX+WzEKOMnpz7kYidoG2iNKU9GYj6t5+Utmwwhe1Q=
Subject key identifier:   6F:4C:0D:95:D7:6F:2C:3F:45:49:37:F2:BE:4D:E1:37:66:5F:12:DE
Certificate issuer:       /CN=60200506-e0ba-4a7d-b096-a86957fd76ee
Certificate serial:       010D0C9F4328584B1806E1494A71A63D99778F00
Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/3d0945a8-c988-333e-aa31-0b225912658d.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     32157
IP address blocks:        199.212.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e1:49:4a:71:a6:3d:99:77:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=ec79453e-d2a4-4f31-aa6f-e7a83ef39822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b4:9e:17:2f:84:a9:c6:84:dc:ef:f3:91:0e:
                    82:a5:65:9e:7f:0f:0a:7d:31:9a:c9:4a:c0:f9:ec:
                    73:04:d8:9d:9f:e9:e4:1d:13:25:98:67:79:3f:8a:
                    e9:02:0e:a0:88:e5:88:c7:58:45:d3:90:db:df:38:
                    d7:31:d2:8a:46:10:6b:9a:b5:50:9f:86:11:8a:8f:
                    c1:84:3c:a1:87:ba:67:89:9c:37:e1:a2:5e:cf:ff:
                    40:de:9a:88:55:7b:64:da:fc:81:ff:9b:47:de:ef:
                    8d:93:91:f6:9c:eb:41:9c:16:fb:ac:45:98:9a:6a:
                    4a:82:d2:71:f2:30:70:52:83:da:11:ec:e0:84:a6:
                    3d:72:07:fa:c7:bb:46:84:74:54:ac:4a:7b:d9:ce:
                    c9:24:0d:84:5e:ee:f9:79:81:62:1c:3a:0c:89:60:
                    19:89:c7:29:70:b9:c7:fc:83:b7:20:90:c3:3a:b7:
                    c0:e2:6b:e1:b2:b4:ab:a9:0d:0a:29:cd:51:98:c0:
                    ad:f2:0a:0c:b0:5f:30:16:1a:ce:00:f2:b8:60:10:
                    34:6b:89:1e:b8:0f:b0:55:91:6f:b4:11:ab:46:51:
                    bd:6b:5e:cd:29:0a:01:dd:72:f7:87:f0:a3:62:1a:
                    4f:c6:4a:db:12:41:c7:d8:6c:f5:72:93:43:7b:86:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4C:0D:95:D7:6F:2C:3F:45:49:37:F2:BE:4D:E1:37:66:5F:12:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/3d0945a8-c988-333e-aa31-0b225912658d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl

            X509v3 Authority Key Identifier:
                keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:41:26:08:5b:f6:fb:1d:0e:da:fc:76:c8:53:6c:78:5b:9e:
         f1:bd:59:02:92:6e:12:ac:15:b7:41:f1:1f:8e:6e:03:67:54:
         53:9e:24:75:3e:42:73:1c:f8:7d:0b:d6:5a:fe:4d:14:63:0b:
         a8:7f:0d:e7:5a:02:97:09:bf:72:9f:f5:f4:61:95:34:d1:e1:
         80:87:47:8e:4a:12:32:c6:e2:89:c3:db:7f:ff:39:bb:fd:19:
         cf:b9:7b:90:56:52:6b:ef:29:50:fd:41:c9:1e:b6:3c:6f:16:
         13:2e:64:27:5c:76:99:0c:59:e2:e3:b7:90:31:14:b8:51:d8:
         0b:e5:c9:09:10:d9:a6:ce:1b:11:7a:b8:40:b3:6d:a2:5e:d6:
         d9:b3:fd:be:7b:84:42:37:9d:7e:1b:8f:ad:05:eb:52:74:bb:
         2d:ed:1e:2f:75:45:86:d4:6c:fc:7b:01:2e:61:ca:58:f6:a7:
         1c:55:1e:af:d0:a5:0c:12:f7:53:f3:ab:6b:83:46:1f:c3:9a:
         4b:20:12:b7:aa:52:ad:b0:1f:a1:46:d6:f5:c3:07:a5:f5:ef:
         73:43:de:46:f0:08:aa:ac:10:4f:16:ee:cd:c3:9a:ed:5e:86:
         fb:7d:54:28:e4:c7:60:07:1f:f4:45:31:ad:3a:90:65:d0:cb:
         6c:f1:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:23 2025 by rpki-client