Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/183d89fc-295e-32a1-a289-209268aa32be.roa
File:                     183d89fc-295e-32a1-a289-209268aa32be.roa (raw, json)
Hash identifier:          m9X2kNgm87bdbiDCft/nq7URYE+d7B71TYE8WxKXmAU=
Subject key identifier:   96:91:F6:5B:60:4F:86:B3:22:40:DE:88:19:5B:75:0E:9C:A7:B9:CD
Certificate issuer:       /CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
Certificate serial:       010D0C9F4328584BA7CCEE7FA8CCBF6570522300
Authority key identifier: 1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/183d89fc-295e-32a1-a289-209268aa32be.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        198.202.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:ee:7f:a8:cc:bf:65:70:52:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=4c833f21-7596-4fc9-a5a6-dd0e519fc4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:c3:e1:b0:8f:c0:4e:c9:01:81:74:ca:47:
                    7c:e5:64:5b:29:a8:44:10:bc:d5:ec:c8:7b:65:25:
                    0a:94:74:4f:25:c7:b8:77:0a:4f:17:ae:70:16:e3:
                    9a:19:09:8c:ed:0e:d8:71:c1:e6:1b:ee:e8:8a:78:
                    83:0f:49:51:d3:e4:36:35:96:d8:9e:0b:6c:a3:f2:
                    37:74:bb:ab:67:d8:ef:d4:f9:52:58:c7:ff:e7:c6:
                    b0:60:78:68:99:cb:40:de:73:ee:b8:6b:31:13:08:
                    6d:5f:e0:12:fc:a3:c2:d3:d5:b2:d2:3f:eb:27:b6:
                    f9:46:b3:63:42:be:43:c3:dc:c4:28:e1:e8:2e:3f:
                    11:8e:a6:41:22:32:36:9f:ef:f2:4a:61:89:6e:e4:
                    46:b9:42:48:e5:c7:73:26:65:77:0d:9b:cd:65:49:
                    8e:e3:36:36:0d:b8:73:ad:12:7d:42:d3:f0:52:18:
                    87:d1:3c:4c:93:37:99:d5:98:e5:23:9f:7c:4a:bf:
                    3e:b2:53:31:f7:e8:a6:49:49:00:83:33:75:1a:f7:
                    80:e7:d1:ed:c1:14:8b:15:41:8a:06:8a:29:f0:1f:
                    2b:30:17:d5:ae:6f:d5:fb:ad:f6:27:6c:db:f3:1f:
                    36:0d:a4:c3:d6:51:66:7a:ea:88:40:3e:93:18:23:
                    56:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:91:F6:5B:60:4F:86:B3:22:40:DE:88:19:5B:75:0E:9C:A7:B9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/183d89fc-295e-32a1-a289-209268aa32be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:12:14:36:60:82:77:38:47:a5:52:1b:2c:b8:14:e8:48:
         12:fe:2f:7f:f0:2a:d5:70:ee:70:94:6d:21:16:cb:c4:56:0b:
         e0:e5:1a:dd:ca:4d:92:e8:40:e5:41:75:d3:3e:b4:19:4b:b7:
         06:1f:c4:44:c9:6c:c0:80:6e:fe:58:2d:af:bc:7b:12:8b:1b:
         29:b7:b3:4d:a9:c0:7e:a0:8d:4e:cd:0e:5c:6b:ce:0c:90:ac:
         bf:9c:7f:6d:49:ae:a4:99:e8:e1:b5:8b:d0:68:25:9a:e3:11:
         4e:53:23:93:d0:c0:c7:29:c1:4b:31:73:98:64:93:da:1a:87:
         30:17:03:2c:47:32:0b:8e:0a:b7:af:3a:77:43:22:44:1f:0b:
         6b:1b:db:c0:59:d2:12:43:8a:96:b5:e3:b9:7f:03:c0:2b:8f:
         83:c3:85:8f:a9:cb:e0:00:75:3d:81:ce:7f:0d:87:69:18:ac:
         13:8e:d9:77:62:6e:ec:ab:3e:3c:97:4f:a2:26:91:e9:f1:d8:
         db:0a:b6:0e:0e:7d:df:7e:3a:41:0b:49:51:b7:25:80:f0:f9:
         39:80:a2:2a:0a:e4:a0:db:93:43:a3:66:02:ce:59:df:b4:8a:
         43:66:e2:cc:6c:d4:41:a0:70:fd:eb:f2:67:e5:94:f5:3f:8a:
         46:7d:c4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:26 2025 by rpki-client