Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/dc2bead9-3ffa-3458-a343-c25d589f040b.roa
File:                     dc2bead9-3ffa-3458-a343-c25d589f040b.roa (raw, json)
Hash identifier:          nqe6VksMNxMTQNB/aWCfso40Xwa7MI+OUMk0HyyTst8=
Subject key identifier:   EF:07:1E:B3:FA:41:F1:08:36:05:B8:7F:FA:B0:BF:2C:83:50:D9:6F
Certificate issuer:       /CN=ba46f857-c44f-430d-b73b-7a14eec4c813
Certificate serial:       010D0C9F4328584BA502416190A846658E8E0D00
Authority key identifier: BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/dc2bead9-3ffa-3458-a343-c25d589f040b.roa
Signing time:             Sun 26 Oct 2025 01:00:31 +0000
ROA not before:           Sun 26 Oct 2025 01:00:31 +0000
ROA not after:            Sat 24 Jan 2026 02:00:31 +0000
asID:                     197537
IP address blocks:        199.182.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a5:02:41:61:90:a8:46:65:8e:8e:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba46f857-c44f-430d-b73b-7a14eec4c813
        Validity
            Not Before: Oct 26 01:00:31 2025 GMT
            Not After : Jan 24 02:00:31 2026 GMT
        Subject: CN=c56d0b5b-fe24-4bf5-a18c-57c866197649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:20:e7:f9:1f:71:f0:cb:ac:0a:e3:b8:f1:39:
                    48:d7:82:d6:c1:27:97:98:93:46:46:c7:4c:10:81:
                    8d:c1:7f:43:f2:f6:4b:74:d4:8e:f7:1f:99:a1:bd:
                    53:2c:1c:ff:9d:55:eb:ac:6e:a5:cc:c9:88:ef:4c:
                    75:ce:c5:72:4b:68:a5:ab:99:67:1a:a0:a0:fe:82:
                    0f:5f:ae:96:9e:5f:40:ec:e5:f3:a7:39:c7:5f:70:
                    da:ae:ff:d9:b9:90:87:af:65:83:e5:60:ef:6d:5c:
                    0f:c5:5b:f7:2d:f0:04:53:55:f9:b0:96:49:51:da:
                    51:76:86:8d:8f:35:4e:c5:f4:4f:9b:1b:0d:f7:07:
                    5f:5d:8a:24:82:6e:a2:f2:9a:de:da:ee:df:64:4a:
                    82:89:62:b2:21:01:bb:f2:bc:b5:1e:48:19:9a:64:
                    3a:1c:2b:5b:8f:81:94:c5:05:44:1c:96:1c:60:05:
                    e3:0e:81:a7:6c:3d:a5:2b:98:75:64:ad:ef:13:82:
                    04:02:80:19:a9:d9:6d:92:2a:12:6b:6e:0f:e8:d9:
                    04:60:94:a3:c0:2f:20:c8:61:0e:d8:47:2b:6d:1d:
                    b4:8d:b5:a1:3c:e0:61:c0:5c:49:f1:72:78:95:45:
                    e2:25:17:4a:a1:68:68:2d:f2:f8:1f:57:1d:54:2f:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:07:1E:B3:FA:41:F1:08:36:05:B8:7F:FA:B0:BF:2C:83:50:D9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/dc2bead9-3ffa-3458-a343-c25d589f040b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:4a:d6:a6:1f:1f:da:3c:c2:18:e5:c0:fa:c8:68:ac:74:d7:
         13:33:f5:24:e8:5c:c9:13:32:4e:57:8f:5e:64:81:6f:0f:6c:
         5b:0f:e6:dc:e5:8f:7c:91:34:aa:9f:76:0d:aa:cc:d3:7d:a4:
         09:a5:a4:21:8e:51:d3:27:3c:04:63:78:49:ed:0e:b0:08:0a:
         e1:6e:9a:77:86:47:27:32:95:5a:41:f6:ae:91:1b:49:d9:06:
         ea:6f:e4:31:a5:06:b9:04:4b:41:6c:36:d0:9c:08:a3:40:48:
         e8:89:bc:f3:66:d6:db:8d:2d:ad:cc:0e:92:d2:bb:ea:ec:3e:
         31:47:b7:20:c5:db:41:06:e2:45:54:40:c7:7e:57:60:be:35:
         c1:a4:b1:f2:79:de:2f:79:f2:84:14:b5:1c:18:20:5c:2c:87:
         81:21:d4:ad:fb:f2:92:1a:3e:f9:a4:99:63:40:20:47:b9:a5:
         3d:dd:9a:8d:e0:94:ec:fb:9a:d4:86:13:be:e9:6b:8b:c6:0b:
         04:b6:aa:19:b3:d9:ae:2f:28:32:de:eb:c6:b4:3c:0d:5d:ca:
         f6:87:e5:18:ce:4b:db:a9:fb:31:bc:1d:80:a3:95:15:45:24:
         8c:53:75:9d:81:10:36:58:4d:88:98:18:4d:fb:21:0c:00:a3:
         06:a3:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:50:56 2025 by rpki-client