Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa
File:                     9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa (raw, json)
Hash identifier:          53p3HGQTxlwhdEa+Q5bffN9e2mW0Lle6m/Qdp4G4ExQ=
Subject key identifier:   A5:6F:04:67:AD:87:07:12:A1:FA:DF:BA:9E:C6:8B:93:D0:AB:5D:E4
Certificate issuer:       /CN=7b407ffa-7fa7-4255-8a63-77381712e9e8
Certificate serial:       010D0C9F4328584B01B147FE174FA7EC8D8D0480
Authority key identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        192.35.85.0/24 maxlen: 24
                          192.52.228.0/24 maxlen: 24
                          199.71.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:47:fe:17:4f:a7:ec:8d:8d:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b407ffa-7fa7-4255-8a63-77381712e9e8
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=3c4b429a-9181-4dbb-8915-76cacdb1f0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:c2:c6:c7:60:e5:a6:a4:a0:dc:fe:98:0c:
                    2b:90:cb:b7:5e:d7:4f:4f:89:58:45:99:3a:1e:09:
                    43:a4:6e:d3:33:41:00:33:71:b6:ce:c3:0e:86:73:
                    e6:e1:1e:0e:05:b6:72:4f:c9:f4:5d:f7:4a:df:64:
                    8c:e7:b6:8b:76:f0:d5:de:0c:c6:ae:06:bd:70:72:
                    09:ad:ad:ca:7d:05:04:0c:52:50:47:94:5b:65:0f:
                    c0:3b:4b:79:1b:af:5e:c3:9b:5b:17:56:f6:a6:f8:
                    1f:45:0f:97:95:a3:2b:7d:1e:c5:3c:68:ec:e9:72:
                    51:3a:73:99:45:79:f9:2c:be:7e:7a:d7:50:04:40:
                    56:81:9e:66:d1:27:53:fa:35:55:c3:3f:61:6f:3d:
                    f1:bd:cb:eb:cb:a0:97:b0:f1:3d:0a:36:60:15:d6:
                    c5:5d:da:82:be:15:da:9d:96:2e:39:18:13:29:ed:
                    3f:08:22:cc:9d:f4:c1:16:3c:a1:c1:79:98:a6:c5:
                    66:2f:50:22:8a:5a:9c:13:42:ed:c6:58:39:79:4f:
                    1a:9f:92:c6:9b:da:2b:ef:42:41:7b:c6:e7:89:18:
                    8a:1a:84:d4:49:cd:09:0f:31:10:c5:e4:06:15:aa:
                    da:d1:83:13:6d:68:ea:3b:e5:b8:03:75:a9:7f:bb:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6F:04:67:AD:87:07:12:A1:FA:DF:BA:9E:C6:8B:93:D0:AB:5D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl

            X509v3 Authority Key Identifier:
                keyid:C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.85.0/24
                  192.52.228.0/24
                  199.71.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ba:d7:28:9d:12:43:c2:9f:30:18:35:b6:c0:2d:4f:18:dc:
         6b:d2:e6:55:35:db:de:1b:3a:66:43:50:a8:1d:58:34:bf:34:
         ff:8c:45:eb:84:18:9e:ea:8d:64:43:d0:53:62:f4:19:c6:20:
         47:c5:65:4e:6b:6b:45:14:b1:af:3b:60:a4:bb:c3:3d:f1:48:
         62:aa:4c:92:56:f3:62:84:a0:78:b3:09:8c:f5:03:a1:82:52:
         68:aa:90:00:57:0e:08:f8:a9:c8:51:21:37:09:3b:cb:11:bd:
         c0:41:a8:31:79:02:2c:f3:b6:9f:c8:34:ae:16:a5:d0:0f:4d:
         37:0c:ea:48:bf:ad:48:26:0c:d5:cd:77:09:63:90:c0:e3:a6:
         cd:a8:9e:83:62:cb:1c:1e:d1:8e:5b:32:90:2a:20:8b:29:5c:
         4e:a8:cc:33:a6:12:01:e3:0c:50:87:16:df:bd:81:f3:73:50:
         f3:03:fb:3a:0a:66:93:ad:61:67:ec:ad:6e:93:aa:d3:2d:8c:
         31:73:b1:eb:e1:14:ff:3b:2a:df:9f:c2:e7:30:4a:29:13:c6:
         f8:7b:56:fe:b2:ed:20:98:a5:e5:48:e2:1a:f6:6d:a1:59:d3:
         87:58:94:38:bf:b6:2d:c2:aa:ca:2e:d3:8c:7f:42:14:86:3a:
         d0:5e:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:46 2025 by rpki-client