Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/49a42911-5927-3412-a1bb-7e9ec7443aa8.roa
File:                     49a42911-5927-3412-a1bb-7e9ec7443aa8.roa (raw, json)
Hash identifier:          531itxyhEA9AqgP/QI8h/Kn17oPcjcffy1/rurs/110=
Subject key identifier:   C1:B1:BC:23:B4:ED:A7:E9:E3:B6:8F:E1:6A:C1:F0:E3:A6:40:3F:67
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584BA39D25BDEE4D8C737B4CFB80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/49a42911-5927-3412-a1bb-7e9ec7443aa8.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     19905
IP address blocks:        106.0.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:25:bd:ee:4d:8c:73:7b:4c:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=9adf04f4-a48d-46a3-9891-246831b8ffc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:40:5a:38:a2:14:f8:ee:2c:e0:10:fe:09:
                    d3:56:5e:75:08:56:70:9a:45:b8:91:4b:1a:e3:74:
                    dc:12:14:2b:30:dd:ad:4c:6c:78:09:d3:5d:a6:ec:
                    ff:d6:4d:ca:41:b1:9d:a2:6f:46:e6:e1:55:b9:c6:
                    e8:15:3d:18:8e:91:22:bf:19:0f:37:a4:c2:49:83:
                    7c:13:9f:d9:6c:da:32:0c:5e:b4:e1:e8:e6:72:64:
                    58:32:39:c4:05:87:52:f0:b4:40:e2:09:63:4d:e0:
                    12:4a:eb:3b:07:bb:61:85:02:56:c7:2e:26:4e:f3:
                    53:ee:be:3a:26:61:e0:8b:ea:74:f8:b3:bb:a8:d4:
                    da:a6:fb:0f:44:01:3f:1f:00:78:d9:98:e8:b2:7c:
                    e3:8c:30:20:90:23:a5:4f:15:af:b6:79:20:19:88:
                    74:89:7f:5d:58:fe:53:0b:58:08:92:48:d9:9e:9f:
                    ec:09:6c:c9:26:ab:98:f4:ad:b5:14:ba:71:90:04:
                    b0:e4:66:04:57:73:20:35:77:04:71:12:97:29:10:
                    aa:a1:ba:18:4a:93:b5:61:f4:42:66:42:f9:a1:ad:
                    e1:8e:87:e0:56:11:70:2a:6f:ef:92:52:55:a3:51:
                    75:61:23:63:98:ef:ed:73:8c:51:92:81:b8:c8:58:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B1:BC:23:B4:ED:A7:E9:E3:B6:8F:E1:6A:C1:F0:E3:A6:40:3F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/49a42911-5927-3412-a1bb-7e9ec7443aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.0.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:55:d9:0d:fb:9d:a0:b0:83:db:00:d3:59:53:c7:64:c4:28:
         ba:25:0a:bd:4b:fb:59:4a:4c:10:1f:52:2a:72:38:a5:ef:2b:
         67:12:28:7b:18:17:ce:be:8f:4f:9f:99:7b:f2:9f:c2:79:db:
         9f:a3:e6:a4:02:76:1a:df:32:f0:0f:2e:88:23:8d:4a:97:52:
         7e:0a:87:e5:09:55:58:eb:0b:57:5e:d2:df:d6:c8:53:e3:d2:
         c0:f0:f5:ad:88:e1:4a:89:8b:3c:8d:2c:db:e5:30:63:e5:e2:
         7e:5e:ea:65:ac:97:56:ed:82:31:3f:2d:5c:f7:b5:3c:d2:b9:
         86:8b:08:f9:2b:5e:f3:8d:a0:2c:c0:dc:5e:26:2c:a8:5e:ba:
         3d:96:16:54:1e:bc:1b:8f:d0:09:9b:18:5e:c2:7c:86:49:d1:
         b8:ed:17:10:88:56:de:27:99:20:d1:0b:ed:6d:1c:cf:d6:a5:
         48:1e:1e:91:b9:08:b3:eb:80:75:21:b8:99:fd:f4:5b:af:a4:
         4b:12:0f:ca:19:6e:84:f0:15:95:42:23:0b:a2:aa:13:c6:1f:
         f6:ef:00:df:e3:43:c4:f6:4e:c7:d1:a6:1c:f0:92:6e:ef:49:
         d8:88:8c:48:b3:89:8d:c9:4f:71:ea:89:56:09:f1:a4:e3:a8:
         2c:07:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:05:42 2025 by rpki-client