Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/fe1fc47d-c146-3780-8e04-0be732468e1d.roa
File:                     fe1fc47d-c146-3780-8e04-0be732468e1d.roa (raw, json)
Hash identifier:          wESEQ2fpXU0JBLPNC9OCw0fqTAmWxgfxvuoJnAh300o=
Subject key identifier:   73:FA:A9:B4:D5:BA:CA:93:47:A5:A5:61:A3:8D:68:AE:A9:9B:62:AD
Certificate issuer:       /CN=0342da0b-b5cd-422c-807b-e1b95cb877e0
Certificate serial:       010D0C9F4328584AFC1C21DD5B96D2EC38ABC4C0
Authority key identifier: E2:36:8F:48:28:27:43:1C:4A:9A:85:75:69:47:CF:96:1D:11:F1:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/fe1fc47d-c146-3780-8e04-0be732468e1d.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     13365
IP address blocks:        192.206.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/0342da0b-b5cd-422c-807b-e1b95cb877e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/0342da0b-b5cd-422c-807b-e1b95cb877e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:21:dd:5b:96:d2:ec:38:ab:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0342da0b-b5cd-422c-807b-e1b95cb877e0
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=04be6909-b4b3-43a1-8f00-28748caf144f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:af:7c:45:d5:b6:36:9c:fe:fc:3e:62:39:
                    12:7b:89:ce:51:b0:b1:6c:d1:84:f4:9c:18:b8:f7:
                    2a:a1:be:6e:72:20:bb:b6:46:0d:0d:4b:1e:87:c0:
                    14:ad:63:26:43:a4:56:57:77:c6:78:18:b8:a4:de:
                    97:f1:b4:8e:89:cb:bc:b8:d4:ba:86:11:c0:8c:39:
                    90:0c:8e:4e:85:2a:e1:5b:28:43:4e:c5:83:11:90:
                    13:09:68:7b:b3:4f:04:0d:dd:c7:af:71:77:67:7f:
                    f5:07:e5:7e:d6:83:a2:2a:2d:b5:5f:14:65:93:56:
                    59:f7:ee:b0:e1:81:ca:d0:be:7b:ac:20:9a:cd:76:
                    d3:7f:8e:e2:55:f2:dd:11:32:4a:59:9d:fb:f5:55:
                    5d:a8:b8:82:9c:b4:72:bc:26:74:28:a0:c3:83:d2:
                    ca:07:0c:a6:a9:e7:91:3d:33:82:0f:68:64:df:b6:
                    42:85:a0:d9:82:64:f1:38:53:f8:50:d4:5b:39:c2:
                    88:18:bb:94:8a:35:3b:40:90:36:68:70:ab:d3:77:
                    3b:d2:60:06:4a:e3:2d:41:d4:37:b7:fa:d5:f3:fb:
                    bc:74:65:be:2b:7c:20:a5:f2:5e:a0:3d:83:2a:7c:
                    94:05:6a:03:b0:0a:57:a5:4b:3c:99:12:ba:d2:1d:
                    ed:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FA:A9:B4:D5:BA:CA:93:47:A5:A5:61:A3:8D:68:AE:A9:9B:62:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/fe1fc47d-c146-3780-8e04-0be732468e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/0342da0b-b5cd-422c-807b-e1b95cb877e0.crl

            X509v3 Authority Key Identifier:
                keyid:E2:36:8F:48:28:27:43:1C:4A:9A:85:75:69:47:CF:96:1D:11:F1:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:16:b7:34:af:67:6c:09:33:44:3e:e9:c2:07:11:c1:3c:ac:
         19:ee:82:39:c0:73:b9:f8:df:e7:d0:9f:7b:80:ef:29:c9:a6:
         af:22:00:5b:94:ea:d6:30:68:06:4e:38:85:8f:21:f5:c0:53:
         cd:71:4c:3d:19:cf:50:28:0a:82:8c:41:1b:bf:61:ef:a4:ef:
         d0:bf:65:c2:9f:23:f6:26:1f:b9:68:34:fa:92:0a:f4:e0:3c:
         1f:fe:b6:d3:5c:db:67:65:e7:8e:8c:ff:26:25:bb:b4:db:22:
         9a:0e:d3:aa:f6:dd:c3:17:78:c6:61:5f:d6:d6:fb:e4:1e:40:
         39:17:05:48:1e:85:1e:62:33:8a:c2:70:20:48:4d:91:57:65:
         47:aa:e7:48:77:89:47:a5:bb:79:3c:42:37:00:1a:14:b8:c1:
         d4:98:e7:01:2a:35:27:47:f9:25:6a:c2:b2:23:37:92:e8:70:
         fd:f0:cf:09:ba:20:56:1c:f4:cd:50:3e:17:30:6a:ab:4c:fa:
         4b:5e:fa:a6:5f:07:5b:ef:f1:e3:c0:a5:da:b0:bd:5f:da:68:
         e9:ec:0f:9e:18:bb:5a:56:a2:4a:7c:b5:62:3d:1f:ba:99:15:
         99:74:d7:c6:68:3f:b9:35:96:71:05:f8:bb:2a:66:7c:b3:9d:
         a0:a1:2a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:34:43 2025 by rpki-client