Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa
File:                     4065f43f-ee36-3824-890b-4696c8253f7f.roa (raw, json)
Hash identifier:          e2iUr2+ONCFpmyoKlrC9OFj3QqILzY4b5gOyAPTUyqI=
Subject key identifier:   33:D7:5D:C5:68:32:78:56:A7:20:4F:20:47:BC:F2:F5:DF:07:69:A4
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F4328584B328C3BD0AF9893017A994700
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     91
IP address blocks:        192.12.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:3b:d0:af:98:93:01:7a:99:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=cf5e9013-79b8-4256-a5ab-e06e62eb35a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:55:45:0e:8d:2e:8e:9a:c3:05:3d:ce:8d:e4:
                    11:a0:19:33:77:6c:57:97:de:d5:93:8c:00:a1:84:
                    f1:b4:6f:9a:f1:c0:cc:4f:e0:2a:d9:e3:4d:85:2f:
                    43:86:4e:6e:ae:43:f0:8d:6a:b0:f1:b6:fb:8c:e4:
                    e0:3d:5a:13:42:dd:ce:a0:7c:0b:77:7f:09:d4:e2:
                    38:5e:5b:d5:54:e6:63:a8:5e:9b:51:f1:2c:7b:54:
                    19:c6:b1:0a:32:2c:13:58:48:96:f3:ef:4d:2c:62:
                    25:d6:7e:2c:06:73:b8:66:94:17:b3:5f:c5:0e:08:
                    1f:8e:b6:2a:46:ee:87:74:29:90:c6:5f:db:64:9d:
                    fb:1f:ae:28:c2:7e:a4:69:07:3d:87:11:3e:a4:0e:
                    1a:1b:42:df:ac:7d:c0:e0:e7:41:5d:5c:86:ce:6e:
                    99:4c:3b:ef:cc:2c:cd:c1:59:8b:f9:78:c1:75:57:
                    a9:22:78:72:1f:8e:ba:6e:58:fb:e8:d1:5e:d5:7a:
                    db:f2:b8:7f:91:61:34:3a:2a:09:b2:fa:d4:38:03:
                    35:0b:8c:64:77:27:40:10:f9:53:db:20:89:16:4a:
                    10:10:02:b1:3e:80:ba:60:bc:20:49:a1:40:47:97:
                    40:88:83:4d:40:91:a5:7e:57:83:d8:76:07:fd:5b:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D7:5D:C5:68:32:78:56:A7:20:4F:20:47:BC:F2:F5:DF:07:69:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:30:03:17:ba:d7:fa:a0:77:7c:16:f0:03:d2:3c:04:3a:
         24:0c:93:bf:0d:b0:8c:58:30:fa:e4:83:a5:cb:fe:0e:c5:c2:
         73:19:4c:3d:03:4e:6a:dd:49:40:f8:c7:33:b3:49:ce:8f:8e:
         96:f8:a9:59:e5:08:f9:1d:99:27:ba:54:78:ae:e3:c5:4a:4f:
         f3:cf:3a:e1:72:a9:70:7f:22:54:a6:e3:46:c5:d2:40:fd:48:
         f2:18:ef:72:d1:85:1d:e9:92:e4:96:08:4e:3a:9f:6a:6e:f1:
         2c:ca:ff:fe:da:c2:9a:6b:ef:e4:2d:ae:4b:57:f2:07:e0:11:
         9c:0c:ee:04:9c:41:ad:26:2e:fc:eb:88:46:bd:7a:e6:a5:b7:
         58:82:e7:24:2c:42:ce:51:ce:c6:ef:8c:09:2c:11:90:3a:79:
         f7:e3:5e:71:2d:1c:93:be:b1:16:dc:64:e5:ae:07:25:cb:94:
         82:6b:45:6d:b2:19:b2:41:9e:97:5a:4a:38:5e:cf:07:13:4a:
         59:cf:62:a3:a9:66:7a:b8:eb:0c:c0:94:2d:f2:d6:ad:22:43:
         eb:e7:0e:16:d1:d1:93:9b:fa:47:01:73:95:27:fb:d2:71:c3:
         f6:43:94:30:a5:d2:56:84:ad:43:85:d6:e8:8f:c6:37:fa:bd:
         ef:48:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:06:55 2025 by rpki-client