Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d92df1bc-9773-35dd-bdd7-aadba8945c62.roa
File:                     d92df1bc-9773-35dd-bdd7-aadba8945c62.roa (raw, json)
Hash identifier:          yjZhdlWujCewI5fFdAxg5GycWwz0tEj34B/M4xSHh4E=
Subject key identifier:   45:39:18:06:EC:F9:E1:1F:87:CE:16:10:80:E4:C2:A6:10:E6:2E:5D
Certificate issuer:       /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial:       010D0C9F4328584BAA97A70DA8F9BD0CD6AC4980
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d92df1bc-9773-35dd-bdd7-aadba8945c62.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        67.199.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:a7:0d:a8:f9:bd:0c:d6:ac:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=366ff195-f02b-44f6-8890-4d705986228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c5:25:ff:d3:f8:ea:ee:67:31:09:77:83:b6:
                    d3:50:d5:06:34:62:d2:ae:78:c2:47:43:f0:5e:dd:
                    c1:f1:23:33:a4:2d:81:77:12:22:d3:11:f7:72:cf:
                    24:b5:39:5e:d0:c8:ac:dc:ec:41:86:ac:f1:f7:e2:
                    c8:5e:78:2c:43:84:21:21:89:4d:04:b4:21:7f:8e:
                    ff:99:50:c5:1c:e7:8b:20:2e:ba:4a:f0:e4:91:11:
                    be:bd:d9:1a:3b:15:8c:35:75:bb:86:75:5c:49:46:
                    f9:3e:8e:49:0c:c8:47:32:97:99:89:f6:4c:5f:a3:
                    87:4b:72:83:ca:17:7c:c1:cc:af:ae:e5:8e:a8:32:
                    5c:0a:61:64:61:68:dd:5e:96:f2:c2:a8:48:b1:70:
                    ff:c7:41:46:2d:96:be:16:d7:f7:ad:c0:7c:61:51:
                    c3:59:b2:fb:48:a0:ea:88:56:a9:ae:63:f9:1e:a4:
                    b7:74:fb:38:c3:90:da:83:df:24:bf:c2:84:fb:ba:
                    60:f0:af:d8:b8:2f:b6:c7:ef:4c:ab:d2:b5:d1:a3:
                    40:3c:b4:cb:6c:36:0f:d0:2f:66:df:b5:c8:79:ce:
                    3f:a8:21:ee:ed:79:d3:3e:c4:d4:6b:a6:05:8d:11:
                    cd:4b:99:7a:a4:15:e6:d7:86:f5:f4:be:2f:d6:d0:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:39:18:06:EC:F9:E1:1F:87:CE:16:10:80:E4:C2:A6:10:E6:2E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d92df1bc-9773-35dd-bdd7-aadba8945c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl

            X509v3 Authority Key Identifier:
                keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:ec:72:c5:69:90:31:c9:42:ca:a6:8a:2e:8f:69:02:fb:
         f7:7f:71:9a:a7:13:3f:e6:47:f3:b5:d1:05:aa:cc:58:99:f4:
         11:1d:08:1a:16:9d:3d:3e:3e:50:c2:e5:f2:6d:2e:85:1b:41:
         d8:fa:ac:15:ea:05:a9:48:21:d5:85:00:26:bb:93:48:f6:40:
         f6:7d:7c:4b:fd:14:27:2e:3f:a5:ec:0c:5f:a1:57:3e:6a:37:
         05:0d:7a:ad:f4:17:60:56:63:e8:51:27:33:bc:ba:31:fd:2a:
         63:b6:ff:34:f8:ab:a0:64:73:da:1c:e7:aa:53:25:76:f8:c6:
         ea:c6:b3:43:34:75:d8:8d:cc:ed:90:29:fb:b9:f6:f1:3b:f5:
         44:68:21:37:78:07:df:63:dc:d5:53:40:13:d9:6d:12:58:fb:
         36:1a:c1:f1:84:d5:c1:d7:f6:ff:97:9c:35:cd:2b:55:69:32:
         a3:c6:51:93:b1:41:b5:ef:3f:72:62:4b:17:04:41:24:42:fe:
         64:17:5d:07:1a:83:70:a8:98:2e:12:0b:1a:e0:b6:a8:bc:6e:
         ba:fb:46:5e:42:ad:65:8c:cc:bb:c3:9b:b8:58:41:df:54:ae:
         2c:05:d4:07:72:d1:12:62:52:c1:d2:67:66:4e:cd:a3:87:dc:
         7e:27:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:32 2025 by rpki-client