Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/d743ce3b-9aec-33b4-8e90-08ac0da2510f.roa
File:                     d743ce3b-9aec-33b4-8e90-08ac0da2510f.roa (raw, json)
Hash identifier:          WRqPcOLKEoaMsgAVaJleBvxgwSh2WqFlCnbyzmXB+T8=
Subject key identifier:   B5:48:50:3A:88:D1:F9:0A:44:45:09:6E:C5:4F:67:DD:FF:B8:E3:45
Certificate issuer:       /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial:       010D0C9F4328584BB2F7A44D0E3330F6D1FAD880
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/d743ce3b-9aec-33b4-8e90-08ac0da2510f.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     8047
IP address blocks:        205.148.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:a4:4d:0e:33:30:f6:d1:fa:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=b8833d17-7799-4f87-b05b-24be1214c27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9a:74:01:3e:24:bd:c4:43:6c:fd:25:67:70:
                    1a:ec:e0:92:bd:9a:d1:a8:14:f6:61:60:7c:da:f3:
                    e2:44:94:5f:cf:7a:ce:63:11:11:81:6c:3c:fe:c4:
                    20:c2:48:83:30:75:90:0c:d7:6d:11:bf:4a:49:59:
                    70:a8:54:5a:49:5a:c5:5c:85:ff:0e:0d:98:41:27:
                    c3:60:01:77:01:84:e6:6c:fc:02:09:56:75:45:8d:
                    9f:43:b7:17:0f:4f:f1:64:61:9e:1c:cc:e3:1d:8f:
                    9d:fb:a0:7b:6f:6b:7c:67:3f:57:da:20:41:74:b2:
                    7b:e4:e8:c7:40:94:f4:ae:e9:5b:46:67:04:9d:c6:
                    15:c4:bb:07:94:36:d7:2d:66:2f:21:c3:af:d5:ca:
                    00:fd:5c:c8:0f:bb:28:df:f3:74:79:0e:0c:d0:fe:
                    f1:15:e8:12:44:81:0b:89:c1:ed:da:5b:1a:18:a6:
                    c8:16:8d:33:94:cb:a5:fb:0f:ec:49:21:30:af:4d:
                    c1:47:59:30:f5:e5:70:d8:c3:ea:cb:1c:e1:bf:a9:
                    2d:80:01:15:7d:3d:4d:71:8f:47:b3:c9:f6:95:39:
                    50:2f:fd:43:06:7c:90:5f:7a:40:93:fc:bc:d0:6a:
                    46:67:dc:20:3b:39:79:cd:08:97:5c:a6:d1:f2:2a:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:48:50:3A:88:D1:F9:0A:44:45:09:6E:C5:4F:67:DD:FF:B8:E3:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/d743ce3b-9aec-33b4-8e90-08ac0da2510f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl

            X509v3 Authority Key Identifier:
                keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.148.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:68:a6:da:b0:a4:45:da:f1:b7:c5:82:e1:61:e2:ef:d1:eb:
         a6:c3:82:df:78:c5:46:d4:05:04:73:ea:7b:fe:5e:4b:5a:a7:
         ea:77:74:b0:23:31:06:c3:37:43:e0:6c:02:cf:8d:26:d7:7b:
         63:6a:73:7e:1f:18:34:05:db:85:cf:28:eb:bf:f7:d2:87:16:
         45:bf:70:16:c1:1c:d9:f7:18:d0:7c:c8:e5:72:1c:f8:f9:80:
         d2:55:6d:e4:14:17:9a:59:ac:1b:9a:2e:82:81:c0:87:2f:6f:
         42:9d:c5:cc:51:1b:fd:2e:cd:c2:90:aa:65:58:09:18:a0:73:
         7b:8e:64:f8:d3:c9:c3:10:76:dd:8c:99:23:fd:73:ef:c8:c5:
         4a:aa:c8:a0:1c:9f:9c:5d:34:03:04:d2:73:72:ff:99:9d:04:
         a5:29:56:00:3f:3a:20:d2:9a:cf:46:08:01:ca:c0:dc:74:ff:
         1e:a2:62:1e:69:3a:9f:93:87:27:ba:b5:cc:73:f8:87:b5:3e:
         da:4f:bc:63:da:8b:da:df:2a:4c:8b:6f:6b:12:d7:a3:8a:11:
         a7:45:d9:32:c1:27:f3:ba:1b:b3:24:11:2b:47:7a:2d:99:29:
         c2:24:29:b9:d8:4f:3b:14:78:54:c9:9e:97:76:a1:f9:a7:7b:
         35:79:38:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:15:51 2025 by rpki-client