Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/aba5abac-4660-3a9c-a43a-78c1329525af.roa
File:                     aba5abac-4660-3a9c-a43a-78c1329525af.roa (raw, json)
Hash identifier:          JDW17p+nJObWEcIKmyln2ofyrSCAIZOx1pKls/O0sjs=
Subject key identifier:   F0:7E:05:82:96:6E:7D:DF:84:9A:74:77:12:C7:20:38:1C:6C:E8:5F
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584B95A78A0FE673DA13EFFCA680
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/aba5abac-4660-3a9c-a43a-78c1329525af.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33072
IP address blocks:        199.6.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:8a:0f:e6:73:da:13:ef:fc:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=d2b25762-612a-4301-bbee-4b6c1c0500a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:9b:79:81:66:9f:4a:68:46:a2:f1:2c:ff:c4:
                    b2:3c:f6:bb:e6:b3:aa:0f:4e:a9:6a:3e:26:66:45:
                    70:05:f6:64:72:53:2c:de:85:75:4b:59:c1:11:58:
                    ff:25:99:53:b2:f3:e9:70:2a:a2:fe:29:c3:04:32:
                    e6:c2:1f:d7:92:83:8f:4e:53:f3:63:fa:e4:c9:d6:
                    82:36:a0:fc:9f:f5:b8:d6:6f:90:7e:29:f0:4d:94:
                    a3:41:ca:af:65:19:82:57:2f:54:c6:6d:14:c8:48:
                    51:03:6a:ea:af:b2:8f:e6:b6:64:78:40:82:c7:fe:
                    28:53:45:5b:0c:ea:bb:2a:a6:82:de:61:d7:6e:e9:
                    81:15:97:96:fe:a8:0c:30:8f:13:41:62:87:1d:c1:
                    5b:e1:3b:e7:4f:c3:ff:c3:47:75:b5:2b:00:89:63:
                    b9:c8:81:39:51:66:0b:d4:1f:8f:0b:b5:25:0f:31:
                    d3:e4:02:cd:7d:c0:ef:d6:db:19:4f:53:58:94:12:
                    79:18:4b:f9:d1:29:0b:bf:3c:12:de:df:d7:80:c5:
                    99:00:10:77:b0:6d:67:37:47:8f:de:cd:20:5d:e2:
                    ca:cd:26:03:1c:f1:36:a0:e4:c8:e8:20:a5:0d:23:
                    6b:72:3e:49:0c:d9:69:47:11:e4:f8:9d:76:be:66:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7E:05:82:96:6E:7D:DF:84:9A:74:77:12:C7:20:38:1C:6C:E8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/aba5abac-4660-3a9c-a43a-78c1329525af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3b:99:cf:1f:a9:15:47:50:0e:2e:7c:38:75:da:15:a1:b7:
         02:7a:9f:ec:5e:b9:90:57:07:33:e1:06:11:84:b2:58:02:da:
         81:d3:d9:5e:85:d5:91:5d:ec:52:81:50:1b:4c:e3:2e:78:8b:
         d9:e3:af:2a:dc:1a:2d:60:6d:02:48:ae:42:e3:4f:f9:28:57:
         e3:f1:bc:4b:1b:d6:f7:2a:7d:9c:e6:03:10:bd:e2:93:61:05:
         e2:4e:6b:57:8d:e7:3b:b6:98:51:bf:20:07:01:19:2d:33:8a:
         e4:6b:ef:14:b4:04:33:63:f8:1e:4d:3a:77:83:bd:16:dc:b0:
         80:a0:e6:db:c8:0e:bb:be:3e:dd:6e:fe:c5:b0:25:18:c9:17:
         b6:a7:e2:3a:fd:b4:77:ae:a8:cd:c4:f6:7d:92:c0:b3:c3:b8:
         8e:1c:04:bc:ab:62:e5:c9:66:1a:ea:71:0f:0c:6e:d9:97:af:
         bf:77:c6:bf:da:87:c2:d8:d3:e5:2b:9c:0e:15:5e:5b:7e:86:
         25:30:34:d5:2e:94:31:c8:b8:8b:53:42:a8:5a:67:8d:1d:2a:
         c6:a0:0f:51:02:f6:78:37:c2:e0:ca:7e:1f:af:f6:29:3c:05:
         b8:02:3e:3a:35:93:37:ee:ca:76:f9:ed:83:1c:e5:e3:e9:e1:
         7b:9a:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:08 2025 by rpki-client