Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ad246eec-8506-36cc-b720-0d1258844666.roa
File:                     ad246eec-8506-36cc-b720-0d1258844666.roa (raw, json)
Hash identifier:          +AR40pwzuOqN3VHQ3WJvKIhYNzaOKrJUyZJ4RPHCjq4=
Subject key identifier:   9A:74:CB:1D:45:E2:E7:B9:D3:71:89:E3:3D:20:92:51:E0:A2:AA:C9
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584B970CD8F0C58A797E2B29E280
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ad246eec-8506-36cc-b720-0d1258844666.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     30133
IP address blocks:        199.6.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d8:f0:c5:8a:79:7e:2b:29:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=9b0cb7ba-696a-48e2-8c04-5f67aa82ce13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:57:bf:e4:39:86:b5:e4:c0:67:0a:4a:9c:53:
                    2d:94:85:2d:8c:f9:de:b3:b6:a4:89:db:3f:2f:cb:
                    5f:8c:35:d6:c2:6e:02:96:0d:2e:3b:ca:e8:66:06:
                    76:d2:16:ad:7f:15:2b:b7:0e:b3:ab:9a:fe:70:59:
                    a4:d6:ec:92:53:74:80:b9:f6:72:4e:28:28:02:66:
                    e5:af:59:97:53:d7:a0:c7:5a:e8:cb:28:0e:e7:03:
                    fc:22:ef:80:52:44:1b:f4:5b:e0:2d:a9:3c:b7:e3:
                    64:39:66:6e:82:69:bb:1e:8d:61:08:f4:6d:30:21:
                    64:fb:36:c9:69:1c:63:8e:7d:53:89:a0:3d:07:cf:
                    24:8b:7e:4a:42:c7:74:c0:d5:a2:db:9c:a9:5d:23:
                    44:2f:44:99:78:a4:de:8a:0d:f0:19:cf:7d:48:4b:
                    c5:7c:45:fe:9d:3a:6f:26:17:04:c5:17:fc:e1:46:
                    e2:99:82:06:c7:6f:ce:74:f2:76:b7:9d:30:4e:b5:
                    c7:b9:10:ee:e1:c1:14:4b:25:25:60:78:3f:24:27:
                    ad:df:7a:99:0b:e1:7b:0c:06:28:15:de:36:69:88:
                    fd:92:41:63:2c:7c:ae:f4:8a:cc:e4:0c:b3:a7:15:
                    12:28:8d:3d:f7:89:d1:e7:9e:a9:d3:33:65:ce:14:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:74:CB:1D:45:E2:E7:B9:D3:71:89:E3:3D:20:92:51:E0:A2:AA:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ad246eec-8506-36cc-b720-0d1258844666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ac:33:98:08:dd:9a:69:cd:f1:77:b0:a2:63:f2:f7:70:35:
         7a:e7:8a:0f:8b:d3:d1:3a:c3:e9:48:fc:35:a9:d4:8c:55:9d:
         ef:ec:19:fa:c5:38:68:a4:ab:24:b8:8d:aa:4d:79:c3:a2:5d:
         4a:7f:77:56:96:3f:25:16:82:b7:d3:40:81:3f:5f:22:5e:e6:
         80:7b:3a:ff:9d:28:b0:da:f7:84:bf:b1:dc:32:8f:1d:ae:b7:
         60:65:ad:e5:96:67:33:5e:dc:02:0f:1a:9a:56:70:ac:00:73:
         c9:83:83:ea:62:c6:97:b3:d3:b3:8d:b3:e5:10:79:7d:ac:4b:
         f7:5a:9f:ab:9b:01:67:ba:95:54:02:93:48:c8:be:1a:cd:8a:
         81:13:30:d7:a7:ee:91:a0:e5:9d:ae:66:38:6a:ef:e8:6f:d7:
         ab:d1:6f:a3:d0:44:c4:37:e9:3c:c7:89:d2:68:66:d1:b8:b5:
         91:f5:d9:c6:d7:43:48:cf:c0:6f:1a:13:aa:66:b5:7e:0d:f0:
         79:24:ef:a3:4e:01:ff:2e:b7:c0:c7:62:eb:dd:b2:12:56:19:
         d9:ad:3e:44:12:76:7a:02:37:f7:0b:38:5c:68:79:16:7d:20:
         54:f3:7f:9e:66:ff:1e:f6:ed:9f:20:13:ba:d1:ea:8b:ee:a4:
         2c:a9:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:30 2025 by rpki-client