Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6e621e97-30c0-3c4e-b360-16b7278d5818.roa
File:                     6e621e97-30c0-3c4e-b360-16b7278d5818.roa (raw, json)
Hash identifier:          8RVNLmW6Kh1w6kJB3uK5gP98mGFmboD9xlcpBlMSURg=
Subject key identifier:   98:CA:96:45:F0:0C:A0:A2:25:86:D5:FC:D7:94:CC:04:BA:71:9B:A3
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B970D03D24AC78E5B9207D260
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6e621e97-30c0-3c4e-b360-16b7278d5818.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     3477
IP address blocks:        192.35.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0d:03:d2:4a:c7:8e:5b:92:07:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=1f4a921a-20e2-4d05-b53e-0522b44d443e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b0:5c:89:3c:6b:86:17:03:7b:7e:85:d5:b1:
                    47:0f:e3:e7:47:1b:05:68:5f:a1:ea:00:9b:aa:07:
                    66:e4:2c:d8:a6:44:f5:0f:0d:44:c9:c3:44:1b:a5:
                    cd:fd:db:18:70:06:b7:ca:8d:ff:4b:d1:26:40:65:
                    cd:c2:51:99:49:04:99:9f:23:27:71:07:71:b0:8b:
                    65:b4:fe:d1:3f:52:98:fd:a6:be:9b:5e:95:e1:42:
                    a4:ee:d1:05:d4:73:f5:14:6c:2f:c9:f3:70:bd:fc:
                    50:05:3a:68:3c:5c:fb:4b:4d:11:25:c7:ed:23:b5:
                    20:ec:d4:e9:2f:aa:b2:5e:85:89:27:e2:8b:3a:d4:
                    8c:fa:e2:db:ea:15:c7:01:a7:d3:dc:f8:8f:9e:81:
                    5a:4e:2b:65:28:f1:07:7b:65:38:f6:b1:95:83:47:
                    c5:1e:34:6f:ad:f5:a4:76:83:18:e8:bd:fb:e8:a1:
                    2d:b5:5d:ee:1b:ee:68:83:39:fd:6c:05:b2:d8:a7:
                    05:16:a3:4b:96:19:e7:13:ee:17:36:e7:9e:bc:f0:
                    cf:0d:6a:1c:48:93:6b:91:0d:05:a7:2e:f7:e0:1d:
                    af:94:60:df:a9:42:b3:c9:8e:eb:43:71:64:02:a3:
                    fb:0c:53:8b:b5:e4:4c:44:be:89:0e:bb:df:a0:54:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CA:96:45:F0:0C:A0:A2:25:86:D5:FC:D7:94:CC:04:BA:71:9B:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6e621e97-30c0-3c4e-b360-16b7278d5818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ed:9b:6c:0d:e6:22:31:66:f8:9e:10:fb:27:fc:83:c3:54:
         86:00:69:57:24:94:bd:3c:de:cd:9b:21:47:07:dd:ad:b4:9b:
         c8:66:fc:75:65:b0:af:e7:5b:da:44:43:81:ed:4a:08:d2:4c:
         bd:fb:f2:c6:d8:c7:06:f0:4f:40:a6:2c:ac:d6:49:9e:01:ce:
         a5:e0:49:ec:0e:bc:36:28:25:70:e8:be:9a:9e:a7:57:e0:12:
         ca:ff:9c:d4:7b:81:41:3c:9f:13:4b:7b:7a:f0:45:bd:5c:d5:
         ad:c5:6b:e8:49:23:69:f8:70:b3:ea:db:17:52:0e:39:f4:23:
         7f:4d:2f:13:72:30:6c:38:e0:31:9a:34:f5:91:79:ad:66:c4:
         78:cd:33:dd:06:61:4b:b8:94:e5:7a:11:7f:93:20:a7:f6:2e:
         dc:07:6e:fc:eb:ed:a3:69:d3:34:48:79:17:82:60:9e:ff:2d:
         8f:bd:c2:cf:8a:ce:81:7d:f5:de:d6:33:a4:bd:e3:e2:3c:dc:
         c1:69:12:12:d7:e9:be:22:5f:82:2b:fb:e6:05:1a:d6:d8:da:
         14:0e:f7:3c:b2:0d:f8:6c:99:92:90:cc:d9:93:e9:1b:7f:f3:
         fa:20:d4:8a:30:0b:9f:21:dd:0b:b6:96:62:8f:41:fb:5b:d2:
         f6:ea:10:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 00:39:27 2025 by rpki-client