Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/6a800366-2866-3e35-8355-3328f80256e1.roa
File:                     6a800366-2866-3e35-8355-3328f80256e1.roa (raw, json)
Hash identifier:          wNvpllQQtJsT8TFU8xLeb5qqoI8aidYlZtg1YEIakbI=
Subject key identifier:   E7:C8:BE:B2:B5:D7:28:7E:BC:0E:F6:05:BC:99:32:D2:BE:E1:56:EB
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584B7DECB05F432707A2EA4F5280
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/6a800366-2866-3e35-8355-3328f80256e1.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     13807
IP address blocks:        192.91.139.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:b0:5f:43:27:07:a2:ea:4f:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=57214ed3-6a6e-4b72-a176-e140fdcc1145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:45:a1:e8:9e:2b:29:9e:6e:61:dc:56:f8:
                    b6:e3:ec:25:2e:a9:3d:ff:2a:d2:a6:a8:32:11:42:
                    81:5f:bd:34:8e:01:a7:89:eb:04:be:d3:22:d4:c0:
                    21:f9:95:a0:72:16:8d:2f:4e:3b:07:42:a9:2d:09:
                    f9:ae:0a:c2:5c:70:91:d0:6f:9f:9a:06:6d:27:5c:
                    56:ff:62:2b:85:51:d0:91:79:d8:af:e9:d6:c8:33:
                    bf:c4:5e:c9:d4:58:c9:35:8b:49:d4:5a:ba:89:78:
                    ee:78:78:79:3b:26:64:70:bf:79:ed:0e:7c:3d:af:
                    3a:2c:3d:c8:b0:0a:9f:bb:79:03:ca:ce:65:60:b8:
                    8f:8e:e5:f4:c2:1f:65:f4:9a:c6:7a:55:a2:e0:68:
                    dc:9b:20:4f:fb:99:49:4c:31:09:99:af:e8:af:ce:
                    31:65:cd:68:7a:25:f3:a5:2c:03:e7:bb:4e:51:b5:
                    66:73:60:18:3d:fd:57:d0:62:32:d6:f6:b8:96:ef:
                    8e:82:ea:f2:18:5f:0d:02:62:43:27:c8:63:94:86:
                    0c:6d:5f:9c:5c:50:d2:02:f3:22:97:ba:49:4a:59:
                    38:47:8c:d1:62:24:88:32:0b:d8:b7:bf:55:c4:a9:
                    1a:51:45:04:73:b7:4b:2b:29:89:3c:58:30:ad:0b:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C8:BE:B2:B5:D7:28:7E:BC:0E:F6:05:BC:99:32:D2:BE:E1:56:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/6a800366-2866-3e35-8355-3328f80256e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.91.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:a6:57:01:d2:90:d9:c5:49:14:91:6c:e8:9f:88:d9:66:
         b3:91:83:88:d6:66:80:e1:00:44:53:41:2d:dd:05:fe:50:cd:
         8d:88:ba:55:82:4d:94:de:d8:47:a5:54:39:41:9d:6b:ec:3b:
         c9:26:69:d7:db:e0:c4:1a:ba:6b:de:63:5a:73:d4:40:71:ee:
         51:0b:57:f5:90:1e:c0:75:bf:8d:81:db:b4:07:36:69:64:34:
         b8:b3:08:28:d4:d6:22:09:48:d6:2f:4c:e6:98:e4:01:bf:12:
         6e:e6:98:a6:b7:4f:f6:88:99:63:d3:33:14:f9:19:b4:3b:43:
         6c:2c:c7:6d:e4:09:92:7f:15:7a:ca:76:c5:32:1e:04:bb:01:
         c2:57:7e:75:2c:53:79:75:ee:43:c9:ee:58:80:18:8b:97:a2:
         a8:a4:3e:84:13:5d:32:16:02:4d:ef:7c:ba:23:3a:c8:30:0c:
         c7:ac:20:6f:b7:97:9c:19:00:da:5f:82:db:72:94:b5:51:fd:
         88:35:3d:bb:76:f1:e5:5d:96:3d:25:ee:27:b3:d3:52:b9:99:
         28:4a:51:07:18:79:39:3f:7d:64:14:8b:91:b0:21:1b:3a:11:
         bd:37:9c:ee:d5:70:ff:4b:13:a6:c4:c5:b2:f4:c1:02:44:bf:
         c8:12:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 13:56:20 2025 by rpki-client