Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d28faf09-4fd1-3fda-ac12-cd817516eb65.roa
File:                     d28faf09-4fd1-3fda-ac12-cd817516eb65.roa (raw, json)
Hash identifier:          CjVJc5YN59QCdvlcSe+XEKaesxg7QwbkCy2y7LGOEwI=
Subject key identifier:   A3:31:BB:E7:96:8A:00:EF:4C:E7:43:01:D7:E6:2F:95:0C:FF:EE:AE
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584BCD9B2B2A348E859B24D1F680
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d28faf09-4fd1-3fda-ac12-cd817516eb65.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     393740
IP address blocks:        206.180.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:2b:2a:34:8e:85:9b:24:d1:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=0b20ef97-d8ff-46c4-99f3-d9e65af47478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:f7:52:bc:ab:22:fd:ed:29:9b:36:7e:48:
                    97:10:c2:d7:26:76:f0:03:4b:91:7c:de:80:83:38:
                    3c:f2:ba:44:99:97:3d:df:66:f4:10:53:8d:9f:ae:
                    ed:a1:a3:65:b5:3b:9a:77:1d:ce:18:ed:47:26:ff:
                    ed:1e:d3:9e:9a:68:e2:b3:f0:2d:24:b3:07:04:83:
                    ce:b9:f9:82:8d:bc:e8:0f:97:7f:4b:16:18:ab:8c:
                    6c:6b:7c:dd:7a:f2:8b:c8:be:85:29:92:d3:44:63:
                    a3:9f:35:ff:91:d8:9c:d5:92:69:bc:77:19:f0:5e:
                    e5:b4:4e:ad:a5:35:08:7b:52:27:e4:74:38:e6:51:
                    71:e8:e3:40:55:e7:0e:48:44:dd:f6:b0:28:29:dd:
                    09:a5:ea:0c:40:8b:70:33:d6:17:41:86:23:bb:e5:
                    21:c0:0a:16:39:f0:4b:d1:5e:8d:a7:23:d5:d9:83:
                    e5:9c:2d:52:ed:6e:e5:cf:96:8c:fb:5b:4b:65:71:
                    bc:7d:a6:d9:5b:71:ea:2d:3f:d5:68:8d:a1:73:dc:
                    55:d5:f6:4e:e8:cd:0e:64:65:9c:46:37:57:ef:4c:
                    92:03:8a:e6:37:1e:27:4b:80:85:22:11:d9:5c:3c:
                    90:0f:06:c5:1e:31:1d:e2:5c:ce:d7:6d:63:76:58:
                    73:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:31:BB:E7:96:8A:00:EF:4C:E7:43:01:D7:E6:2F:95:0C:FF:EE:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d28faf09-4fd1-3fda-ac12-cd817516eb65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:00:b5:b5:7f:90:8d:76:83:5f:eb:13:b3:30:37:aa:f2:
         9a:95:b5:af:3c:00:96:3f:37:ca:2f:04:21:be:ab:a3:73:91:
         64:0c:c1:3e:51:ed:6e:36:72:48:56:9a:7b:2f:bb:32:3a:c0:
         10:d9:93:bb:b9:69:fb:a2:d7:14:ad:61:78:76:66:07:3b:40:
         06:f5:3d:63:f6:5b:bd:bf:a9:74:41:a0:68:8e:73:42:3e:6d:
         fc:44:15:ba:e6:da:50:9e:3d:70:5c:d3:92:52:5a:98:74:43:
         11:30:fd:a7:cf:71:07:62:51:6f:a6:0f:1a:94:32:31:9b:a0:
         b6:79:da:3d:01:42:94:79:c6:d8:42:a8:44:83:8d:99:ea:54:
         68:04:96:2f:ac:93:28:a9:f3:93:18:9f:92:c9:8d:fb:55:48:
         b5:fa:a9:b3:f9:14:e9:f8:3b:9c:65:0a:28:d4:c4:82:a9:c6:
         4a:4e:ef:10:23:04:96:1c:fc:d0:24:50:7b:94:3c:bb:a6:d3:
         9a:d1:22:fd:be:ba:89:39:f3:2c:63:77:25:93:2e:ec:0d:4f:
         b1:71:9f:60:9b:2e:6d:22:c9:b4:a0:c1:b2:3f:5f:7e:15:00:
         c7:94:89:3a:19:ca:88:b6:db:cd:af:db:77:97:32:76:c6:db:
         e9:ee:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:06:55 2025 by rpki-client