Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0adc925b-1a6c-3544-b151-de953b7c568d.roa
File:                     0adc925b-1a6c-3544-b151-de953b7c568d.roa (raw, json)
Hash identifier:          VzYjEPBfV1iNBDnJ9joYmKfnKc7wC0a2GxsA1XY+Ygs=
Subject key identifier:   3C:34:20:FC:65:26:33:95:36:E1:29:A5:17:21:98:86:EB:7B:CF:8C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B0018C2FFB40D31DF017A0A00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0adc925b-1a6c-3544-b151-de953b7c568d.roa
Signing time:             Wed 27 Aug 2025 23:17:35 +0000
ROA not before:           Wed 27 Aug 2025 23:17:35 +0000
ROA not after:            Wed 26 Nov 2025 00:17:35 +0000
asID:                     31898
IP address blocks:        192.9.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:18:c2:ff:b4:0d:31:df:01:7a:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 27 23:17:35 2025 GMT
            Not After : Nov 26 00:17:35 2025 GMT
        Subject: CN=417992f7-dc22-413c-b8a4-74bafd214185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:35:6d:d3:21:cd:3e:6b:be:3f:e3:83:eb:
                    4f:84:15:7a:09:ba:46:28:51:fe:31:67:b8:55:01:
                    1a:82:36:8e:85:8e:ce:ea:43:8b:ae:06:98:dd:2b:
                    27:6d:4e:8b:14:df:d2:f8:ef:ee:d1:98:44:b2:6c:
                    db:67:60:5d:8e:6e:78:32:da:e5:1b:9c:2c:9e:19:
                    61:92:5b:50:13:e8:cf:3f:f4:91:ff:80:be:d7:4d:
                    fa:20:da:f6:16:de:e8:82:07:9f:a5:bb:a2:07:77:
                    90:34:e6:91:ea:37:56:4d:51:62:2e:5f:53:1d:d5:
                    5f:fe:9e:48:aa:a8:56:b8:84:29:e2:e5:dd:52:87:
                    b9:ee:6c:e6:a1:4b:b5:63:a6:4c:fd:db:30:7c:f1:
                    26:ff:3c:7b:d4:30:56:76:ce:f4:0c:d2:f2:79:33:
                    7b:19:79:e5:28:39:fc:24:8d:4d:d0:43:ec:cd:d1:
                    4e:d3:c7:1d:31:0d:82:29:c6:0c:bd:a9:e4:e2:68:
                    c7:ef:b8:2f:e9:75:39:c3:16:c1:fc:e8:b9:93:5b:
                    f0:16:a9:e9:df:e9:5e:f1:04:8c:22:d3:71:7b:98:
                    09:49:ef:31:e2:de:cc:30:54:8c:2a:ea:fb:9d:4a:
                    4f:63:e8:3e:1f:77:75:58:09:38:a8:3a:c9:c0:41:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:34:20:FC:65:26:33:95:36:E1:29:A5:17:21:98:86:EB:7B:CF:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0adc925b-1a6c-3544-b151-de953b7c568d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.9.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:60:84:01:fa:c3:f7:93:86:5d:53:7d:1d:fe:93:fa:1e:26:
         cc:8f:1e:f4:6a:db:89:e2:4a:eb:16:2e:ed:d4:61:d0:42:48:
         3c:36:20:12:70:35:c3:7b:ec:6b:b9:72:fa:b1:38:20:1b:4b:
         b1:8f:65:70:47:17:6c:5c:36:c5:73:42:5b:a8:14:d6:b8:e7:
         7e:0f:15:52:4a:7b:32:37:1b:50:a3:76:73:f6:a9:55:8f:41:
         b7:aa:87:b7:e2:87:09:03:87:2e:03:ac:4d:ca:32:2e:c2:34:
         c2:84:d5:73:ef:e8:9c:b6:28:f0:28:65:cd:3a:1c:20:81:26:
         16:71:d8:88:19:9e:63:58:0a:a7:26:b8:f7:cd:c9:c6:67:3d:
         3c:7d:6a:f0:a9:52:79:98:b7:29:61:16:6d:c3:18:0a:00:7a:
         2e:ca:a4:2d:bb:7b:d1:ac:79:b2:71:90:27:2d:e0:83:c5:5a:
         bc:1c:ee:9d:14:f9:ce:c9:a0:75:1c:f6:a5:cd:eb:b4:fd:f1:
         58:9e:b7:4a:be:1e:d9:2b:13:02:29:06:64:e0:c9:36:d9:82:
         63:15:66:dc:76:cc:6d:e8:ae:24:44:61:91:10:e5:6e:b0:23:
         60:68:f1:42:cc:63:b0:b2:8a:70:b7:c2:a9:2d:5d:dd:2f:bf:
         bc:e3:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:59:15 2025 by rpki-client