Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa
File:                     c4cc816d-0378-3331-bfab-29af1c51cb4e.roa (raw, json)
Hash identifier:          Ts4VkUMpa5T0isCDIP6VODAbwehnMx5u3ksLkjO1pmA=
Subject key identifier:   F9:91:D3:51:C5:4B:2D:80:15:50:41:9E:88:CB:E4:6F:55:92:7D:0C
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584BC10ADAA740D3782B474B5BC0
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     202
IP address blocks:        199.249.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:da:a7:40:d3:78:2b:47:4b:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=34c603bd-04d1-41c0-a702-dd0cce7bcc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:af:96:5d:1c:b6:b2:4d:b3:97:cd:e6:5b:7d:
                    ea:ef:d9:5b:f6:62:22:7d:fb:2a:f6:01:66:e8:3e:
                    2a:48:ae:e5:73:90:e5:15:fe:3d:a7:1d:b7:41:7d:
                    d5:40:79:6b:8a:2f:89:3a:05:43:51:58:bd:f9:70:
                    0b:dd:32:c7:a3:c3:0e:c6:99:b0:46:09:a7:d2:40:
                    1b:a8:e2:0a:f6:85:59:58:ab:3c:59:d6:29:8e:f1:
                    47:c6:78:2b:b4:ad:51:aa:bb:9b:13:13:32:e9:95:
                    bd:35:1d:99:5f:09:46:50:6c:2b:35:2f:38:95:ac:
                    e9:ac:53:ec:5b:39:b6:60:9e:7a:55:37:d5:22:ab:
                    96:7e:6d:09:a3:e3:56:1a:3e:92:49:d1:bd:88:57:
                    34:d2:8a:5f:03:a4:43:b2:a5:d9:ba:6a:27:1e:84:
                    47:f9:bd:c6:3c:08:d0:27:63:51:bb:a8:76:f5:d2:
                    93:02:25:a4:41:cb:e0:98:09:83:9e:4e:ef:3e:71:
                    df:75:e3:34:5b:79:b4:61:3b:81:02:73:2a:86:2a:
                    1c:da:df:fa:2d:f1:cf:f1:ea:15:88:52:bb:59:7a:
                    37:81:66:77:2c:ae:f7:21:8b:ac:14:e9:55:c4:92:
                    68:38:e2:39:9c:25:b5:4b:1b:17:da:c0:6a:8e:80:
                    2e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:91:D3:51:C5:4B:2D:80:15:50:41:9E:88:CB:E4:6F:55:92:7D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:58:8c:b8:b7:d2:48:12:6a:42:a5:a4:3a:88:e4:79:b2:01:
         67:a8:53:3f:ed:e6:93:62:4e:af:0a:35:47:c1:5f:db:c6:d4:
         b1:2c:c8:a2:df:d2:cf:75:05:97:fd:01:ab:f1:81:b0:5b:83:
         9c:42:5e:6c:b1:e6:36:c5:66:f1:ec:5b:b2:41:32:57:b7:ff:
         34:c9:32:eb:d0:63:19:5c:87:de:74:46:34:e3:b0:65:6a:41:
         7b:8b:0b:b3:30:8a:e9:c7:ef:9a:82:e1:58:c5:95:d2:a0:b7:
         28:55:7f:3f:15:66:b0:82:79:50:3d:d3:67:bd:94:b6:f5:8e:
         18:54:01:9e:d4:24:d6:ad:d6:dd:a8:85:56:af:b1:35:24:6b:
         32:47:16:48:13:c9:72:8f:51:2b:c4:65:8a:de:02:77:cf:89:
         57:48:32:0c:e3:f3:53:cb:c0:e0:bc:12:96:6f:40:cf:de:71:
         7d:a4:8a:c2:da:97:ba:b7:4e:15:76:20:81:08:2f:18:cc:1e:
         3b:df:a5:99:1f:1f:b5:f0:f0:af:6b:d5:79:29:31:ff:1a:33:
         31:1c:f5:e3:24:68:73:1b:53:0f:f2:d6:35:23:d3:89:39:e8:
         23:8e:bc:1d:58:32:dd:39:6d:89:f0:4d:a6:79:e7:3a:6f:73:
         d5:84:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:24 2025 by rpki-client