Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/06acc10b-bae5-3cff-b7b6-ec7871adffb5.roa
File:                     06acc10b-bae5-3cff-b7b6-ec7871adffb5.roa (raw, json)
Hash identifier:          e/uNI5LXyk/ZQUvHsIOEIi+2SriizihYcMYpt/jdM2k=
Subject key identifier:   BD:C4:35:FB:21:50:1E:83:0C:4E:30:B3:48:16:87:D8:5A:3E:A7:7E
Certificate issuer:       /CN=2fa99450-94b8-4a0e-be53-8ce7f88d51db
Certificate serial:       010D0C9F4328584B6D2CB84AFC0DCC9877978C40
Authority key identifier: 0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/06acc10b-bae5-3cff-b7b6-ec7871adffb5.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     19423
IP address blocks:        199.185.123.0/24 maxlen: 24
                          199.185.124.0/24 maxlen: 24
                          199.185.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:b8:4a:fc:0d:cc:98:77:97:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa99450-94b8-4a0e-be53-8ce7f88d51db
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=802d9621-ca61-4b44-b0c5-b3f40cc5383e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:06:c6:5c:cd:47:c9:b0:1d:3a:78:76:84:
                    f5:30:66:6d:6a:7f:c2:e8:67:9a:f3:5d:79:57:46:
                    7b:b1:8b:8b:6c:33:1b:05:98:49:b0:4d:16:c8:53:
                    4d:b3:55:ea:36:fe:6b:74:e3:6d:11:5c:26:ff:cf:
                    f0:d2:40:e9:af:9e:64:f1:6c:40:e5:b5:b7:18:6e:
                    91:03:95:25:23:32:e0:e6:5e:99:dc:b5:39:ad:e0:
                    51:9d:43:1b:ac:68:d2:e0:b1:08:41:1d:55:f5:dd:
                    e7:ee:c3:d9:e8:28:49:44:0c:c1:71:59:24:1e:a7:
                    32:11:b5:0e:60:c2:4d:7a:ca:d5:63:c4:11:a4:b9:
                    6b:e0:69:af:21:c7:1a:f1:be:06:1a:52:6d:61:b8:
                    53:d6:8b:57:3b:c8:dc:91:ea:f0:b7:18:8f:fc:c3:
                    62:2d:38:6c:2c:ec:80:ff:bc:7e:20:fe:9f:8c:49:
                    37:08:ab:51:bd:8a:4e:44:c5:04:d5:7e:b3:a2:60:
                    66:e3:dc:80:d3:88:9f:0d:f5:03:b4:ec:83:8f:d0:
                    06:ee:12:f1:78:bb:31:44:97:ae:df:20:a8:87:7f:
                    13:10:99:2b:a0:21:1d:df:d3:bd:44:1d:a0:77:76:
                    29:4b:a8:ed:54:a0:a7:b4:a7:bc:b1:4e:9e:07:fe:
                    db:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C4:35:FB:21:50:1E:83:0C:4E:30:B3:48:16:87:D8:5A:3E:A7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/06acc10b-bae5-3cff-b7b6-ec7871adffb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.crl

            X509v3 Authority Key Identifier:
                keyid:0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.185.123.0-199.185.125.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:69:bb:59:71:5e:31:3b:2f:91:07:62:6e:35:be:78:0c:f2:
         1a:5e:d9:75:b7:ff:4b:26:3b:cd:c8:93:77:c9:2f:eb:0a:cd:
         29:6a:fc:4d:ee:ae:b8:bf:ea:b2:63:33:8e:d1:91:f4:69:5a:
         ff:31:75:cd:83:78:37:2d:4a:6c:c4:ee:7c:a7:94:cb:2d:6f:
         23:f6:1b:18:bd:b1:bf:c4:77:e7:a4:ee:b4:27:b4:4a:53:ed:
         ff:90:86:f3:6e:b6:9b:b0:19:60:d1:52:2e:47:64:37:c1:30:
         73:cf:ce:bb:01:bc:85:00:34:f8:84:a4:06:0b:a3:82:49:9d:
         8f:b5:ec:ca:b5:bc:67:fa:ea:08:08:ce:d9:6d:1a:0e:fd:74:
         37:ce:0e:f0:20:9f:67:98:27:ee:98:da:25:4b:6a:b3:b1:f1:
         2d:51:00:55:2f:17:c8:a1:37:e0:9a:15:97:94:7e:7b:94:8f:
         51:c4:6a:5d:b6:09:b4:74:17:62:31:18:38:04:dd:a2:dc:0e:
         ea:51:1b:7c:32:51:9f:98:ec:22:0d:21:75:18:01:9e:0b:5e:
         a6:0f:dd:62:f2:9b:15:15:62:67:01:e7:7c:7a:f0:6f:ec:9d:
         64:1f:67:52:fc:b3:5f:72:4d:7f:b3:f0:f0:63:bc:06:33:14:
         9c:26:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:37 2025 by rpki-client