Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa
File:                     ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa (raw, json)
Hash identifier:          1oBJU8Nv3aQ18jVxwbB+6rFVwnpIgol82iWuzHLTIbw=
Subject key identifier:   80:1F:70:96:45:6D:B8:BB:D9:B8:E4:F8:26:FD:43:0B:FC:F9:6E:72
Certificate issuer:       /CN=209791d7-ad3b-4334-ba56-5771f29ad3af
Certificate serial:       010D0C9F4328584B1D9C24923BC0BD421E86D500
Authority key identifier: 26:DC:9B:90:CC:D5:D2:B1:CD:1D:D8:2B:8F:E7:69:1F:A5:01:26:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     6143
IP address blocks:        192.225.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/209791d7-ad3b-4334-ba56-5771f29ad3af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/209791d7-ad3b-4334-ba56-5771f29ad3af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:24:92:3b:c0:bd:42:1e:86:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209791d7-ad3b-4334-ba56-5771f29ad3af
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=fa6de431-a321-459c-a0bc-a547244da221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:bf:b6:53:97:4b:80:ba:92:3e:6c:53:6a:
                    ea:8f:30:0e:cd:f3:a6:af:88:fc:e2:33:2f:b1:e1:
                    3c:f3:91:b4:e4:92:4c:38:e1:67:19:17:23:26:28:
                    72:cc:04:09:d3:2e:fb:66:d0:bf:50:d8:44:a3:59:
                    98:c4:14:c5:59:a6:bd:44:99:d5:cd:4f:2b:6a:83:
                    6a:cf:4a:64:b8:fb:98:27:5b:8d:d4:13:d8:79:e1:
                    7f:30:8c:4c:53:c6:79:e5:2e:3c:7a:30:61:63:31:
                    f0:7c:c8:c2:b0:02:3c:94:e5:da:a1:e0:e4:6f:31:
                    7b:0e:16:9b:0e:69:cd:d7:73:c3:d6:39:89:89:05:
                    e7:ed:53:bf:08:a6:85:3b:2a:e3:5c:03:0f:90:97:
                    d5:6a:a4:f6:1c:e7:36:23:41:a9:18:82:97:54:ef:
                    3f:e6:d8:19:2d:2d:90:c5:de:b9:08:1a:ac:81:3d:
                    b2:00:3f:28:6a:06:d7:c2:37:65:16:c5:d7:f5:b8:
                    58:a8:75:24:4d:fa:97:60:6d:8d:37:f8:ce:3c:72:
                    26:36:e2:8b:5d:e8:c9:9b:3f:c8:a1:6a:78:06:36:
                    39:b7:b2:79:94:b5:d4:6a:16:7e:26:18:ac:75:47:
                    7f:bd:b4:5f:44:ce:ab:63:ec:14:c0:d8:63:bb:09:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1F:70:96:45:6D:B8:BB:D9:B8:E4:F8:26:FD:43:0B:FC:F9:6E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/209791d7-ad3b-4334-ba56-5771f29ad3af.crl

            X509v3 Authority Key Identifier:
                keyid:26:DC:9B:90:CC:D5:D2:B1:CD:1D:D8:2B:8F:E7:69:1F:A5:01:26:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:79:6d:12:35:6c:5e:75:83:6f:87:05:1a:e2:ec:bd:15:6a:
         1d:87:d1:2a:f2:bc:24:6d:30:79:7a:43:13:92:29:18:3f:6d:
         15:d7:c0:a1:c3:9f:24:cc:6a:46:46:f1:86:bf:9a:a9:b7:4e:
         51:b8:aa:3e:9b:1c:01:49:87:36:50:b8:9e:ee:eb:b8:c5:b4:
         37:8a:8b:93:ef:8b:79:d6:c3:a9:35:bd:5f:b2:93:5c:4d:20:
         ee:2f:be:e5:27:15:b3:2d:04:8c:0c:a5:91:45:f3:bf:6e:93:
         7a:54:eb:27:7f:a7:db:22:f2:0c:17:0a:b1:03:a8:bf:93:a7:
         8a:1f:91:84:b3:6a:c4:e6:97:0e:81:75:12:9b:41:82:95:b0:
         1e:80:2f:a9:60:de:fc:64:4e:74:3d:f4:22:8c:1a:45:ac:6b:
         f8:2d:9e:c9:0e:1d:0c:bf:cb:a6:c2:a1:32:fc:d8:da:c8:fa:
         11:fd:f3:ab:cb:d7:1e:55:7c:93:2b:56:7c:69:51:dc:23:2e:
         3d:70:15:20:8b:6f:8c:ca:12:15:84:af:62:25:42:4f:45:6a:
         0f:4b:ad:2d:36:6f:cb:a7:83:8f:41:10:a4:54:eb:c7:80:e8:
         60:b9:5a:b4:9f:b6:33:2f:4c:c4:71:10:64:d7:e7:a4:b5:46:
         6f:67:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:19 2025 by rpki-client