Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/d126959e-590f-321e-910f-acd785a46f3f.roa
File:                     d126959e-590f-321e-910f-acd785a46f3f.roa (raw, json)
Hash identifier:          XXffzBWoS0+4uRXdH55sD9DBHJWLubaRK+0wKTPEA34=
Subject key identifier:   7C:44:CC:22:E3:C8:08:0C:4E:6D:D8:19:A6:90:67:08:6B:92:4B:E3
Certificate issuer:       /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
Certificate serial:       010D0C9F4328584B9B4C45D82D64B798E4051C80
Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/d126959e-590f-321e-910f-acd785a46f3f.roa
Signing time:             Wed 22 Oct 2025 13:31:40 +0000
ROA not before:           Wed 22 Oct 2025 13:31:40 +0000
ROA not after:            Tue 20 Jan 2026 14:31:40 +0000
asID:                     10753
IP address blocks:        192.228.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:4c:45:d8:2d:64:b7:98:e4:05:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
        Validity
            Not Before: Oct 22 13:31:40 2025 GMT
            Not After : Jan 20 14:31:40 2026 GMT
        Subject: CN=4710b374-958c-4739-92e2-1fd6ec0ca33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:40:5f:11:7c:9c:24:61:2d:c8:89:1e:29:7b:
                    8e:00:40:39:11:88:63:b4:fa:ea:34:bb:53:7d:18:
                    39:6a:9d:d9:92:bc:59:b1:4d:fa:60:de:d7:d0:fa:
                    42:5e:fc:d6:7a:87:95:cf:8f:40:b7:29:e0:cc:a8:
                    da:e1:c3:d3:a7:a7:6c:d5:35:98:32:f3:fb:57:21:
                    9a:15:37:29:79:ca:51:6f:1d:18:2e:f1:5f:da:e9:
                    63:7d:91:1a:b9:c8:a5:11:3b:67:62:d8:ff:64:81:
                    1b:66:6b:da:50:6e:b4:43:06:ae:d3:32:69:36:62:
                    de:eb:76:7c:95:fc:f2:48:41:f2:b9:56:3a:f7:3f:
                    d6:03:42:d5:94:4c:62:63:99:fa:39:e5:3b:1c:eb:
                    3e:2f:ec:38:c7:23:46:90:c8:a7:53:e5:ab:2a:d9:
                    54:1c:52:ae:7e:6f:fd:70:aa:b5:b9:50:f1:25:25:
                    0b:b3:e2:18:3f:03:dd:a1:19:2c:52:7e:3c:52:e0:
                    6d:bf:84:b6:70:c6:f6:6f:49:f0:1b:b8:dd:df:54:
                    bc:e6:4f:fb:36:1c:7f:79:f3:19:7f:6f:c6:d8:e6:
                    35:4b:7c:f6:03:70:21:db:29:e0:8e:ee:2f:0e:79:
                    8f:6d:21:5e:0e:d2:94:f5:59:68:f5:1c:eb:6b:a0:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:44:CC:22:E3:C8:08:0C:4E:6D:D8:19:A6:90:67:08:6B:92:4B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/d126959e-590f-321e-910f-acd785a46f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8c:1f:ae:f6:c6:4a:66:04:8a:9e:f5:e9:d2:0a:68:87:42:
         89:02:e1:b5:d7:9b:e6:e3:ef:d2:15:63:4c:56:a2:f6:28:4a:
         a5:9f:94:4b:54:3e:19:32:34:eb:6b:b3:2d:3d:cf:34:de:78:
         fc:33:fa:c0:68:da:b3:ce:56:a0:9a:a9:8b:a0:c1:d6:8a:eb:
         fb:d1:76:fe:9c:52:56:a9:47:1e:26:4a:65:3f:30:fc:81:25:
         bf:e7:68:d5:b1:dd:7d:e8:03:38:66:34:e7:60:ee:8b:3a:b1:
         be:40:b6:b5:1c:c1:ce:8d:07:92:4f:6e:3f:ab:16:42:08:da:
         bd:80:1b:85:65:46:6c:2f:db:dc:aa:28:11:b5:7f:08:35:d3:
         ee:82:37:cd:a4:6a:fc:a1:b1:37:d9:ad:8d:eb:bb:f9:24:82:
         3f:63:76:b7:4f:c3:44:e0:af:bf:e3:7a:fb:91:84:38:b6:91:
         78:1b:85:f9:04:42:af:0f:9a:9e:ef:d6:56:7c:e5:b7:47:18:
         9d:10:2e:33:4a:ea:df:26:ba:f7:73:9e:be:f3:6e:c3:4d:78:
         55:7a:69:87:a5:e8:2b:d1:60:cf:4e:1d:2e:d0:83:c9:e7:c6:
         6f:95:85:85:08:8b:ec:01:be:50:39:5d:1c:25:49:0d:17:72:
         a4:ff:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:46:31 2025 by rpki-client