Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
File:                     2d512d2b-840f-30cb-88f8-f79128126588.roa (raw, json)
Hash identifier:          zV4UFS2sKRaKsHxgB2a4c8boGh3ShhQIZt2ytL/+rMY=
Subject key identifier:   14:33:D1:FE:87:2C:22:36:34:BA:B9:CE:39:2F:7F:98:89:D4:60:35
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584BD8C5B8DF78D5743B1D547E00
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
Signing time:             Thu 13 Nov 2025 14:00:38 +0000
ROA not before:           Thu 13 Nov 2025 14:00:38 +0000
ROA not after:            Wed 11 Feb 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        192.103.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d8:c5:b8:df:78:d5:74:3b:1d:54:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Nov 13 14:00:38 2025 GMT
            Not After : Feb 11 14:00:38 2026 GMT
        Subject: CN=914957a8-f126-453b-8498-5c91eda13f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c9:d7:6e:5e:15:4e:d3:9a:71:ea:3d:3e:f4:
                    f5:11:c9:b4:74:12:df:d2:24:2f:a9:9e:b8:ea:43:
                    b0:2e:8e:a2:bd:11:81:62:d7:e5:5a:18:c2:6f:fe:
                    b2:24:f9:4f:0c:5c:0b:23:37:cd:68:6a:73:28:6e:
                    ed:09:2b:f7:e5:b4:1e:d4:b7:d4:bf:e8:d6:41:48:
                    9b:88:04:10:48:8e:5c:e0:8a:07:a4:ae:0d:bb:e3:
                    88:ca:c1:91:50:8b:dd:0d:26:6f:5c:ec:c5:2e:92:
                    f9:39:ae:30:86:f7:9d:f7:9c:66:ee:44:d7:70:da:
                    2d:97:db:3b:0d:6c:91:4a:b2:36:dd:b5:63:db:5f:
                    c5:1c:ff:ef:cf:9c:db:a5:7d:d8:7d:33:49:db:07:
                    b0:9a:4a:bf:23:ec:75:96:af:b1:a8:31:a8:6c:07:
                    2a:e4:74:b8:57:59:d2:83:2d:62:3f:d7:c8:a9:de:
                    02:15:84:55:c4:12:30:d4:36:97:15:ab:8a:11:84:
                    71:4b:2f:df:f7:a6:6f:30:d0:6a:26:de:3e:a6:cc:
                    48:8e:07:b8:a4:76:81:0d:10:21:2e:e2:e5:3b:45:
                    af:28:2a:b4:19:e5:52:07:40:4f:71:a7:23:5d:af:
                    30:16:d4:8f:2c:1b:20:88:37:ce:27:46:c1:72:7d:
                    cb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:33:D1:FE:87:2C:22:36:34:BA:B9:CE:39:2F:7F:98:89:D4:60:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:ab:7f:08:65:09:fa:d9:7d:ba:ae:5a:bd:51:94:22:fa:
         f3:75:ea:5c:81:b2:99:b9:3f:25:cb:56:d3:66:7d:5c:66:1f:
         0e:51:59:92:7d:e2:49:2c:15:a7:29:96:d0:98:7c:d4:8f:e6:
         d8:8c:8a:71:7a:c3:ee:b5:91:16:cf:68:eb:48:56:fe:a6:80:
         4f:99:1f:f2:d0:ab:64:62:a7:95:54:33:c4:fb:f4:48:62:de:
         e5:35:20:cb:f5:ee:f1:d4:bf:4b:c5:99:5b:89:06:02:77:3b:
         fb:2d:31:f1:8f:95:1f:a2:8d:38:2d:5c:ec:26:d3:82:83:ec:
         31:a2:d9:28:e5:73:f8:ff:c8:b7:17:46:1a:34:ba:84:06:f2:
         6a:72:de:1a:14:af:3a:93:0b:db:0e:12:4b:7d:70:8b:18:2f:
         d5:16:33:10:c2:51:dd:1d:6a:12:63:94:06:97:4a:b9:60:4a:
         57:d3:d6:ed:bd:e1:23:cf:7f:ab:c4:b7:6d:46:d2:de:e8:79:
         f4:36:32:6a:3c:81:fc:11:b2:42:0a:39:42:1d:28:04:6d:ef:
         39:b9:e4:3a:a7:41:53:0c:df:92:92:a1:bb:c1:e9:cc:5b:da:
         4a:33:75:43:cf:21:a3:ad:af:eb:99:2c:9d:47:0c:98:79:c3:
         d9:63:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:11:20 2025 by rpki-client