Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
File:                     e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa (raw, json)
Hash identifier:          iRZs6V0CEKEy4+XLTVCUukPNKNtyoKEMAYX+jhBxt1k=
Subject key identifier:   B6:F7:E1:2D:D1:EB:BA:B9:A5:79:AE:B7:A4:B8:8D:5B:9A:57:44:F5
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584BAA97A3A44BD60902D1526150
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     394437
IP address blocks:        198.35.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:a3:a4:4b:d6:09:02:d1:52:61:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=6b105d6e-628e-4933-9f87-27db1dee3ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:66:ed:5a:15:29:f4:10:fa:e7:f8:96:02:
                    a7:cf:67:71:ac:d3:ec:d9:ec:3d:f9:42:33:cb:a6:
                    cd:a2:48:d2:d7:4c:b3:85:56:5d:5d:5b:0d:c7:a8:
                    23:ac:5e:a8:25:31:92:aa:f2:2b:26:db:71:e7:65:
                    ce:00:07:63:b8:0a:1e:51:ba:92:9e:fc:78:33:74:
                    74:0c:c6:30:62:51:87:e6:19:57:33:88:09:a2:67:
                    99:14:51:82:d2:ba:36:00:eb:3f:e4:73:38:dc:90:
                    21:d0:00:72:62:79:4a:f8:23:06:96:5c:d1:74:ae:
                    80:79:27:18:1b:d5:d6:21:be:71:19:b6:09:57:7a:
                    ea:d2:79:12:6d:89:04:c5:5f:01:16:7f:c8:f9:bb:
                    85:35:88:c1:a4:ab:e1:7e:11:e0:70:91:52:d3:65:
                    ef:98:0d:f9:21:1e:72:4c:51:36:ea:f5:b5:a4:af:
                    67:41:77:2d:62:4c:db:1d:0c:a6:b9:bd:d9:a8:66:
                    dd:aa:a8:3e:79:f2:fe:a8:96:40:c9:a3:06:78:cc:
                    e5:85:e9:b9:a7:c0:60:10:1e:f2:cc:88:e3:de:37:
                    49:f8:82:f5:bc:c9:ef:d4:ea:f0:e4:13:11:d5:32:
                    45:8f:ca:bc:c9:8a:be:b1:6b:af:70:7a:c0:e0:b5:
                    85:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F7:E1:2D:D1:EB:BA:B9:A5:79:AE:B7:A4:B8:8D:5B:9A:57:44:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:49:64:2f:8c:f2:d7:1e:68:96:76:e2:3c:02:5a:1b:6c:b0:
         6b:54:83:7c:f7:3a:8e:b6:69:b7:28:95:c4:6b:7c:6c:de:33:
         69:53:45:9f:3c:70:d8:f3:c4:7c:1d:5f:7e:c6:36:29:c2:d9:
         97:b4:ec:be:4c:78:0f:21:85:28:e9:c0:f8:b6:41:18:c0:f8:
         26:08:a6:ff:ff:e9:37:da:66:b3:6c:5d:6d:78:aa:72:7a:94:
         41:66:f5:66:7e:fb:62:1f:e7:11:1b:3f:42:f5:2b:78:c7:6f:
         6b:7a:39:44:b8:5b:8d:6b:9f:ba:70:e0:f5:53:84:b0:cb:26:
         27:e9:16:4b:69:85:db:22:f0:c3:dc:7e:3c:a2:eb:1b:26:c3:
         a7:0a:53:5e:c0:0a:31:1c:0d:c3:5f:b5:a8:e0:ec:b9:87:66:
         66:68:1e:f2:41:03:0d:22:6b:5b:40:d9:0e:c6:b7:d5:9f:61:
         f3:ca:80:be:b8:67:c7:ca:f1:f6:61:0a:79:62:d6:7d:4b:71:
         b1:5a:5d:eb:e0:bf:0d:21:0c:2c:e9:8e:a7:37:ae:0f:39:67:
         ed:97:e8:b0:eb:0e:13:04:41:dc:0f:11:27:ad:08:af:ed:1c:
         1d:cf:c5:c9:96:8b:0f:46:f1:53:58:14:70:74:17:f5:8d:f5:
         53:04:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:01 2025 by rpki-client