Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b6927e7e-4b9e-32d7-92a6-2cdfbb009931.roa
File:                     b6927e7e-4b9e-32d7-92a6-2cdfbb009931.roa (raw, json)
Hash identifier:          GVcbmPwfe7DyKeHK1vbhYtrL1ouhgs090tR5YrthHgs=
Subject key identifier:   15:91:1D:48:0A:C7:30:4B:33:ED:81:5B:86:C3:EF:FD:E3:3B:BC:5A
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584BABFCFF5EA79CCE6501C7E200
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b6927e7e-4b9e-32d7-92a6-2cdfbb009931.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     7862
IP address blocks:        192.94.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fc:ff:5e:a7:9c:ce:65:01:c7:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=77bd5543-5740-41b0-8fb3-269db2b1254d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:14:94:b5:0c:a7:39:54:e5:fb:17:83:80:
                    06:7a:10:42:fb:61:64:a0:19:c4:c6:73:f5:89:a3:
                    df:78:21:ef:30:a4:81:90:51:e3:bd:93:e9:92:f0:
                    fa:20:ab:71:e8:13:5f:39:18:e1:fd:ee:77:f9:00:
                    58:53:c6:77:22:79:94:bb:11:35:a6:02:9e:92:84:
                    83:e8:40:07:b4:67:e3:02:12:40:fc:3c:2d:35:fd:
                    3d:98:c1:d9:fe:15:27:78:37:7e:2a:ba:47:65:28:
                    33:2e:ad:5a:45:55:4e:42:69:02:24:68:f3:ce:d7:
                    b1:19:be:11:d6:31:7c:81:70:80:51:a3:77:bd:77:
                    2e:ef:5c:0c:ea:35:8a:24:0a:d4:64:d5:0b:90:0c:
                    7e:b8:cb:e9:75:87:c8:c2:a7:d7:62:75:29:50:8c:
                    97:fa:65:15:58:61:e5:72:44:1f:aa:bf:72:e8:7e:
                    f8:37:01:41:62:6a:75:7a:54:ed:3f:cd:31:9c:65:
                    10:e9:d2:34:b6:d1:a3:94:b3:2e:0f:0f:4f:84:95:
                    93:91:dd:a4:3c:6f:be:19:df:51:d3:15:c0:8f:ff:
                    21:a2:44:64:7d:f9:f8:97:d0:53:c2:10:07:cd:42:
                    0d:d4:1f:23:9f:de:c1:b3:d7:08:54:0f:42:b3:b7:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:91:1D:48:0A:C7:30:4B:33:ED:81:5B:86:C3:EF:FD:E3:3B:BC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b6927e7e-4b9e-32d7-92a6-2cdfbb009931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:19:9f:f3:4b:0c:75:6d:a0:27:67:5f:58:e9:bb:ef:50:e7:
         7b:3e:1c:ef:06:47:51:30:e3:cf:0b:b2:f8:d6:37:f5:75:44:
         f3:20:a5:c4:e3:68:60:79:94:a8:50:54:d9:4a:92:b9:4d:a2:
         46:88:63:4f:54:9e:f3:54:99:ee:e7:04:da:14:e7:db:92:b4:
         65:e6:89:9e:ca:32:03:95:f6:14:2c:09:87:43:2c:c8:7c:4a:
         13:5d:84:93:7d:0f:d4:05:09:73:ec:6c:9c:16:ca:0b:57:d9:
         ec:a9:72:ea:ae:b6:64:0d:64:8c:e3:89:bd:f0:da:ea:cd:d1:
         29:81:15:12:c9:71:4e:54:bb:24:5e:77:8e:cf:b1:f7:36:fa:
         5a:60:14:56:ff:12:a4:ff:65:9a:23:72:2f:87:2f:12:3e:3a:
         a2:96:9b:db:4a:9a:da:20:3c:eb:41:6c:41:73:56:ab:27:0a:
         d8:df:cc:5b:2e:f5:dd:92:6f:78:fb:6d:bd:7f:29:11:26:99:
         26:a2:b7:40:a6:f7:03:cd:fb:f2:1d:22:22:97:ed:13:80:d9:
         53:83:f9:6d:50:69:d5:e5:6a:e5:ee:ed:56:a1:b2:a9:d9:06:
         e8:64:b4:ae:5e:79:a8:e3:6b:8f:9a:4b:35:44:a0:cc:a4:1e:
         58:e9:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:08 2025 by rpki-client