Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa
File:                     cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa (raw, json)
Hash identifier:          dzKgxrmfLy1lJYvTaSBAbwhmiaAAMw2uFz61RaLQHLA=
Subject key identifier:   46:3E:F6:0D:8C:C6:24:27:81:7C:B9:F6:DF:35:D1:BC:2B:B2:50:3A
Certificate issuer:       /CN=994eeb97-12ef-4721-824f-9ba41ba67983
Certificate serial:       010D0C9F4328584B4E7714F58DCD91214BD07500
Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     23539
IP address blocks:        147.185.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:14:f5:8d:cd:91:21:4b:d0:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=0ee8d2eb-2587-4098-a0f9-5012d6a64e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:af:34:20:03:c6:f8:f6:23:9c:e2:da:b1:
                    44:43:21:dd:73:6c:5a:fb:3e:25:1e:8e:4e:88:aa:
                    7e:e1:c7:21:da:1b:f1:2e:e1:71:a8:be:a1:d8:ff:
                    38:d0:7b:d9:9b:9c:d8:21:b9:65:62:71:98:96:00:
                    3b:c3:9b:6e:9b:c1:4c:f0:63:09:36:7d:c6:e7:4a:
                    74:52:c5:dd:ea:7d:cf:e6:0d:27:f1:ee:fd:95:71:
                    9f:97:bc:22:29:bc:66:ac:88:bb:e1:28:f5:21:2f:
                    e7:91:7c:83:df:0d:a9:aa:08:42:57:6a:1a:46:44:
                    9f:0e:f2:52:2e:2c:7f:c1:53:1f:05:fa:dd:dd:f8:
                    19:9b:2b:c4:da:f8:a9:33:d5:67:38:55:d5:ee:b7:
                    3d:8a:80:da:58:37:0b:3e:97:81:15:92:15:0b:d8:
                    05:8b:52:91:f2:83:de:18:d8:bb:4f:5d:f2:38:f0:
                    fa:87:07:18:63:91:db:ef:32:b8:7d:a1:cf:39:1c:
                    f9:b7:8c:6f:c5:05:fd:b2:07:e3:15:8e:31:5c:e3:
                    92:0e:00:85:ba:9f:8b:b6:22:32:17:56:37:b9:e0:
                    ef:9b:94:9b:38:19:3e:48:fa:07:29:6b:e1:b3:5a:
                    c8:ab:44:a5:a1:04:c0:e1:2b:1c:c1:63:5b:f7:10:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3E:F6:0D:8C:C6:24:27:81:7C:B9:F6:DF:35:D1:BC:2B:B2:50:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl

            X509v3 Authority Key Identifier:
                keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0f:61:8a:a2:9b:62:19:14:53:f8:f7:f3:de:b6:69:4f:7c:
         4b:4b:2b:c1:0b:09:55:44:08:e7:46:0c:53:49:cd:01:8c:7e:
         53:6a:86:1e:84:4b:0e:bc:ee:09:84:57:e3:29:48:37:39:df:
         18:f3:55:86:8d:8f:61:9f:57:6b:c5:3b:34:94:3c:12:14:58:
         7b:1a:93:b0:4e:9c:23:3f:68:ef:5c:18:e4:f1:c7:2c:09:64:
         98:e2:86:de:10:2e:70:b6:b2:ca:cd:14:9c:f2:43:e3:13:86:
         e6:ea:e9:a3:22:55:d8:a3:1c:a7:a3:38:72:ae:a2:3f:6f:e2:
         fc:48:b2:8b:0f:90:60:7d:4b:64:f7:fc:15:be:11:a7:c9:9e:
         e3:cc:f3:2b:9c:aa:4e:07:06:9e:9f:a2:a0:62:ee:ee:c0:5c:
         0e:96:27:e3:94:e8:89:42:d2:53:ae:02:46:9f:84:6b:3a:03:
         51:20:14:19:22:b1:cc:1a:60:3b:80:a8:03:30:37:f3:5e:14:
         d6:74:f8:42:fd:50:ea:ea:bd:03:ad:07:e6:cf:46:19:57:e7:
         c1:ce:f4:9e:1d:04:54:87:2a:bf:ce:ea:d0:7c:34:8a:33:9d:
         4e:81:dc:72:c1:35:08:a4:f5:52:29:be:de:42:5d:a5:49:47:
         4a:7f:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:19 2025 by rpki-client