Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa
File:                     43425afd-e380-3275-b610-aa2206fe32e5.roa (raw, json)
Hash identifier:          5sE48h9J+J+EF+Nc8gHUV9w1q2NFlLWrNtxznbZeaeM=
Subject key identifier:   24:AD:64:D1:5F:62:82:58:F3:EC:F5:9D:AA:A9:EA:A4:43:60:C8:EC
Certificate issuer:       /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
Certificate serial:       010D0C9F4328584B4D11D8AF0B82CF6242D48F80
Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     10753
IP address blocks:        192.228.20.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d8:af:0b:82:cf:62:42:d4:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=021bbfde-4b37-435a-a200-a673b281a2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:50:15:d8:22:5c:c8:d8:2d:c2:98:6d:ad:
                    f0:c0:7b:fd:4a:21:34:59:19:27:d1:41:18:23:c6:
                    05:2e:19:a1:b4:db:ee:7a:2f:24:69:6a:eb:5e:1c:
                    db:c6:94:d3:e6:60:6b:5b:8a:14:bd:51:51:c1:30:
                    67:ce:a5:f2:b5:52:03:8b:49:d6:ce:2b:db:2d:e4:
                    1f:77:42:c0:97:a9:53:9a:82:ed:2c:02:93:11:97:
                    13:9e:2c:f7:2e:b0:0d:bc:0a:34:7c:9f:09:13:13:
                    07:e1:32:e2:43:83:50:71:26:6e:6b:9e:10:d6:93:
                    07:c6:85:af:41:4a:3c:2e:eb:e3:64:c4:6d:00:98:
                    12:25:10:93:3e:48:77:45:75:e5:dd:ef:ad:f9:b9:
                    f8:ec:59:80:93:19:c1:eb:53:89:52:34:01:6c:09:
                    50:ba:9b:a8:bf:d6:f2:d1:52:c2:2d:1e:c0:19:4d:
                    9e:31:72:28:b0:51:57:92:d9:47:20:ac:63:e1:36:
                    45:45:05:2c:b4:c1:3d:ad:c1:97:92:72:59:a8:97:
                    0b:7a:50:d5:0c:2d:9b:05:41:0b:36:5a:d7:5c:73:
                    57:8f:ce:28:31:da:fc:19:d1:bb:79:23:b2:b3:e7:
                    dc:39:76:65:19:a3:43:65:5a:30:c9:b5:79:43:bc:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AD:64:D1:5F:62:82:58:F3:EC:F5:9D:AA:A9:EA:A4:43:60:C8:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:00:c6:34:6c:fe:50:32:b7:43:e2:77:46:18:a5:af:10:
         30:fc:ee:0f:12:58:90:0b:a5:6b:4c:22:22:85:cd:70:2b:28:
         a7:ab:af:8b:a7:7c:9c:bd:93:fb:28:ca:00:be:cb:35:86:56:
         73:74:be:8e:ce:c1:e6:96:27:e3:fd:41:e8:2c:5d:41:90:7f:
         8e:00:5e:e3:6b:22:5b:45:f1:f6:6f:6e:37:df:f9:37:ea:20:
         31:88:9b:52:9a:8b:af:af:ff:84:31:4a:86:a5:3e:04:1a:9c:
         19:0d:ee:db:62:7f:28:fa:88:2d:46:8d:90:67:f9:23:c6:f4:
         3a:e5:a7:82:09:e7:e2:25:41:71:a1:7e:cc:4a:ee:82:3b:f0:
         47:37:84:7d:64:3a:c2:b3:78:14:26:e1:3f:42:50:06:e1:05:
         9b:99:c8:e0:20:e2:b1:46:92:3a:98:eb:04:89:d9:04:d2:82:
         00:08:b8:35:4b:28:79:23:9a:2d:47:27:4f:8f:fb:5c:f3:20:
         68:98:47:ec:21:42:c5:5b:7b:b6:8f:bf:d8:e5:db:55:e1:db:
         68:61:bd:80:9a:be:26:e6:4e:a4:61:95:3c:82:b2:d4:d1:14:
         f3:97:a1:8a:17:e6:aa:d6:90:16:ff:7f:ee:d0:ac:51:06:73:
         da:d6:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 21:19:41 2025 by rpki-client