Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa
File:                     ea93ae24-34e7-3c83-9477-44557229880c.roa (raw, json)
Hash identifier:          zUbTwd3RpK6clJRuvcrUlTifSHv0oeF9OAfXqs18s6c=
Subject key identifier:   38:C6:46:26:DC:2F:AA:75:BB:14:E9:4F:EF:7E:E9:15:A9:DD:9B:EB
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584AF7EBDBE8745FC65ADED3BD80
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     20237
IP address blocks:        192.103.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:db:e8:74:5f:c6:5a:de:d3:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=5fd5bdd1-02d4-4e0c-bb5b-fd7888e9f0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:c9:20:2c:b7:39:8f:eb:05:b1:e8:86:df:
                    4f:4e:8e:01:fe:85:e1:97:c4:8b:30:24:39:f7:5a:
                    7a:08:25:d5:d5:c0:b4:a3:56:6d:7f:b9:76:b6:9b:
                    4e:b1:16:66:5e:ea:bb:66:49:0f:38:73:74:40:6e:
                    92:05:45:38:ec:47:08:3b:cd:31:09:24:d8:52:a0:
                    81:0c:44:0e:4b:76:48:19:1c:42:ce:aa:7e:60:d1:
                    2b:97:a9:d5:91:0b:ca:aa:61:1b:2d:cc:be:85:03:
                    3e:22:c7:74:f0:c2:50:64:4e:11:df:9c:91:74:66:
                    af:df:e0:ce:24:de:c1:13:5e:71:9f:65:c3:b2:4d:
                    23:b5:5c:97:0f:8e:9f:97:75:ab:85:71:cd:2e:18:
                    99:fc:d5:31:b3:70:d7:7d:24:82:f2:d4:60:eb:a4:
                    bd:e7:35:3b:a0:99:13:a6:87:8d:63:88:32:c2:0e:
                    46:8c:62:72:da:42:b5:30:0c:57:55:fe:7e:74:5f:
                    78:0e:ae:c7:ee:38:8d:7a:14:f5:cd:7e:45:a0:83:
                    67:d4:2e:d1:c9:49:2e:55:61:67:14:40:33:cf:4c:
                    24:c8:ea:a5:72:52:70:a2:93:4a:8a:1d:66:88:57:
                    5a:67:71:11:a5:cd:6e:84:47:fa:20:65:38:c1:46:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C6:46:26:DC:2F:AA:75:BB:14:E9:4F:EF:7E:E9:15:A9:DD:9B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d4:28:4f:84:f2:9c:7f:eb:02:eb:a7:92:32:d4:e9:8a:24:
         60:be:80:ff:29:e6:61:01:ed:15:f0:1f:4b:d7:6f:20:cd:90:
         63:16:97:09:33:bc:cf:1e:89:f6:12:5d:3e:23:cd:a7:55:fc:
         46:c8:b0:fa:24:89:7f:11:91:6d:b0:27:d4:5d:d9:78:5e:09:
         00:e6:62:b2:9a:29:d0:55:5c:e5:24:15:4e:a7:bf:37:d0:12:
         97:d7:75:86:56:f5:9e:43:54:a2:c4:df:23:ab:a6:dd:b2:24:
         aa:e2:a4:a8:68:1c:f3:dd:58:1c:1d:b9:b6:d3:14:a5:fa:62:
         9b:cf:5e:0d:2d:d4:83:fc:d1:32:4f:87:89:63:35:d6:a0:c0:
         4a:59:ae:5e:df:27:f6:36:d2:0b:22:0c:20:fb:7b:7a:57:43:
         21:4b:83:4f:9a:6c:1b:df:3f:02:8d:36:4b:71:68:c5:f0:fd:
         7b:1c:60:fe:6e:ef:bc:f3:cb:77:09:4b:1d:b0:fa:51:31:53:
         af:7a:61:6c:34:27:ba:ff:43:fd:d6:e9:35:d3:7b:a8:ce:7c:
         74:c9:32:88:68:28:60:91:14:b1:1f:52:c4:ee:8b:5a:00:82:
         37:6b:3d:12:a3:73:9e:67:40:8c:4a:4d:d9:82:01:11:ec:bc:
         b6:2b:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:30:00 2025 by rpki-client