Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/1a810687-bca1-3557-ac75-f6c9cc815e25.roa
File:                     1a810687-bca1-3557-ac75-f6c9cc815e25.roa (raw, json)
Hash identifier:          YDTor3QELFDMPVVUadNeGZTvhaBgTceFo5WA1f1tnzk=
Subject key identifier:   55:1A:72:23:38:B8:94:18:9E:F5:24:E6:77:82:14:B5:AD:DA:D7:15
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584B970CF74181209BFA7122B700
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/1a810687-bca1-3557-ac75-f6c9cc815e25.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     293
IP address blocks:        192.188.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f7:41:81:20:9b:fa:71:22:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=decdf94a-54b6-405c-bc9a-5fdb7c284d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:07:c1:98:86:2c:d8:6a:72:f4:c5:c9:9e:6b:
                    c0:51:ed:32:06:98:96:f7:2e:6d:9b:5d:e2:ac:ef:
                    44:7c:22:f9:5c:13:bb:61:78:50:cc:cf:e9:76:45:
                    d8:a3:9a:d6:02:fe:a5:cb:88:68:ea:39:f6:cf:ee:
                    d7:dd:6f:a1:b2:05:c7:0a:c2:dd:71:c8:21:05:ae:
                    59:0a:7a:76:7f:6e:1c:8b:d7:95:27:8e:a3:9d:b0:
                    ed:cc:5e:67:73:cd:0a:3f:6a:40:c9:68:7d:0a:47:
                    5a:84:e3:47:b0:82:5e:31:2d:8a:21:1e:d7:a4:9a:
                    9b:19:a1:e3:1c:63:7a:ce:a3:a3:2a:fc:23:56:49:
                    31:97:0b:d9:bd:a0:b8:00:6e:84:ab:2a:40:a0:ad:
                    f4:6c:6f:c0:df:cb:05:f8:39:f2:8f:c4:fb:ba:53:
                    ef:10:0d:9c:30:31:3e:56:91:0c:02:b8:40:39:80:
                    c8:2a:d3:14:1b:35:a2:b8:dd:10:49:c9:36:a5:c8:
                    d5:f6:ec:ad:b5:10:51:85:bd:cb:71:2a:33:ee:c2:
                    38:ac:d9:58:ca:68:66:08:ba:2a:6c:6c:d8:f7:a8:
                    35:60:95:eb:cc:45:0f:cc:00:c2:99:94:24:f5:32:
                    8e:68:21:0c:88:fb:83:9a:84:bf:a4:73:7a:b9:29:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1A:72:23:38:B8:94:18:9E:F5:24:E6:77:82:14:B5:AD:DA:D7:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/1a810687-bca1-3557-ac75-f6c9cc815e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:6c:fa:7b:08:9e:26:5d:39:1b:d8:51:00:08:4c:79:7c:
         15:92:68:7c:fc:2a:0b:2b:28:6f:d9:cf:0f:33:9f:6f:d6:52:
         4f:ef:91:bc:b8:80:f2:2c:c9:38:62:eb:40:a2:10:e7:88:93:
         87:bf:1e:82:bb:1e:c3:52:7d:1e:3b:4e:d6:01:b3:22:0e:00:
         b7:16:71:c9:b6:71:2c:3b:d8:85:e9:9e:5b:7f:e1:8a:af:9a:
         92:b2:63:bd:70:d2:61:ac:4e:96:df:fc:1d:18:0c:b5:ba:4c:
         49:84:36:f5:c0:e1:d0:34:d7:14:69:ef:19:0d:e1:79:67:79:
         05:db:0f:83:e0:9a:00:0a:35:dc:eb:6b:bd:df:5b:9b:03:6f:
         b5:35:e3:52:2f:96:44:a6:85:46:85:1b:0a:9f:ea:ba:0c:33:
         ba:3d:09:2e:fa:13:b1:ad:be:b4:d1:47:da:d1:6c:0b:82:ec:
         ee:41:d5:d3:71:b1:17:9d:ee:1b:2a:6a:67:85:e1:4c:f3:f7:
         11:ad:26:82:62:7b:ca:fc:b1:72:be:b6:d3:56:53:e0:3c:35:
         60:fb:48:ba:d4:96:46:20:d2:77:4c:fd:70:80:cb:10:55:6c:
         57:c6:1d:c4:d8:7a:54:0d:f5:54:34:24:40:4c:23:22:c2:e4:
         64:b1:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:30:39 2025 by rpki-client