Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa
File:                     178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa (raw, json)
Hash identifier:          +TbKXFV+hKGDRs2TkeB7twOec+P/lI1GnHDXJiJXNFE=
Subject key identifier:   9E:B6:B8:E1:54:3D:41:69:0E:41:FE:3F:C6:7B:A1:ED:5C:35:5D:FF
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584BA39D1C95568BF9F25D52BC80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16696
IP address blocks:        199.192.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:1c:95:56:8b:f9:f2:5d:52:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=d1b7aeee-9cfa-418c-9b03-c6ddfbf08826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5d:e0:28:38:9f:2d:71:33:90:49:b4:31:bd:
                    cb:04:cf:20:a9:02:84:5c:40:1c:3c:00:93:8c:40:
                    b8:ce:cf:5c:0c:fb:12:dc:a2:89:52:70:4d:b1:3e:
                    12:6a:ce:80:7f:9a:86:e3:a1:ff:60:ca:c7:7b:d2:
                    9a:8f:cb:1c:b1:20:f3:61:8c:29:7a:fd:d7:1d:a1:
                    ed:8c:a1:68:f2:05:a1:b1:d2:69:47:89:72:cf:f4:
                    13:03:19:4a:5b:f3:d0:1e:f5:73:48:a5:c9:05:cd:
                    fc:90:5c:2c:4d:fe:36:83:36:de:ea:2c:c5:71:5c:
                    3f:54:d8:5d:d8:b0:2f:39:0b:2d:bc:c6:cb:d9:e0:
                    1b:b8:60:d2:35:32:16:a0:eb:f1:c5:fc:e6:71:b9:
                    53:3f:64:f0:4b:af:0a:f8:47:57:91:c3:08:f3:e9:
                    c9:b0:05:a9:78:07:ab:30:92:c9:5d:b0:d8:14:fa:
                    d9:c0:4a:18:b2:04:a9:32:12:38:e5:81:78:48:7c:
                    7f:de:95:1e:39:15:45:30:2a:4c:65:5c:e9:06:8f:
                    59:8b:8d:f6:eb:26:02:76:59:36:c9:ac:11:f8:31:
                    ac:89:b2:aa:70:44:f2:9e:ca:ed:00:bb:d2:d8:af:
                    63:d6:d3:44:58:c7:36:d4:87:d9:cb:d4:38:30:08:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B6:B8:E1:54:3D:41:69:0E:41:FE:3F:C6:7B:A1:ED:5C:35:5D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:da:2b:d7:48:84:e8:29:11:c8:6a:7d:4f:01:f4:e6:f5:d8:
         14:83:6a:b2:d6:65:72:e7:73:3a:fe:3a:1f:ad:84:3c:2f:5b:
         cc:b5:5e:05:e6:cb:dc:9b:c6:00:0b:04:06:6e:b0:06:87:5e:
         6b:c6:4e:27:cd:55:28:31:53:32:c4:3b:35:b1:b7:04:d6:97:
         e1:77:d1:36:3c:18:cb:bc:c6:ce:07:a8:95:15:b3:3d:a5:aa:
         55:1b:9b:fc:2f:81:9d:42:5f:8d:b4:c5:12:1f:3a:38:81:bf:
         8f:d3:76:16:3c:ff:eb:1a:5e:8d:45:e6:ee:29:20:0f:c7:dd:
         16:fc:d5:a2:19:53:cd:72:db:ab:f3:47:09:30:bb:3b:dc:7f:
         14:0b:cf:29:77:9c:50:ec:7e:f8:7e:01:94:8e:c4:c9:4a:ff:
         e0:36:d1:7b:b7:28:87:6c:6b:24:0e:84:02:10:58:19:35:b2:
         83:e1:b2:e5:0d:87:e9:ab:07:ed:1f:42:d0:68:e7:36:f3:9e:
         f7:8f:b2:50:de:18:b6:75:fa:74:ed:ea:77:6f:e1:58:41:b4:
         b8:c5:fd:63:73:df:7b:15:9f:36:d3:d7:24:65:41:92:fb:76:
         11:32:ba:c6:10:70:08:e9:b3:0d:c6:c5:34:7c:50:e5:e4:7c:
         0d:57:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:50:04 2025 by rpki-client