Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/99e13c26-f077-3c28-bac7-63bbf2c159ac.roa
File:                     99e13c26-f077-3c28-bac7-63bbf2c159ac.roa (raw, json)
Hash identifier:          vwkfrowYvlN0YN8xQKuUGXZWVCF+M1CPqBOZwe8ev6s=
Subject key identifier:   7C:89:74:CA:A2:4C:13:72:F0:47:44:BB:C8:74:83:51:79:56:C8:04
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584B970CD133E723C512603BDD50
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/99e13c26-f077-3c28-bac7-63bbf2c159ac.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     30133
IP address blocks:        192.228.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d1:33:e7:23:c5:12:60:3b:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=d2074c16-2009-4921-92ef-736f4b15f935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:97:80:a0:6b:b4:95:86:92:14:77:4d:af:36:
                    b7:bc:09:33:67:25:2f:7a:38:df:08:14:d4:05:b6:
                    9d:aa:de:4e:7e:7b:ea:4e:f5:59:fb:9a:fa:e2:4e:
                    49:6e:db:65:91:b0:ac:8f:5e:3c:ca:11:4c:3a:48:
                    12:5b:7b:c1:b9:a1:89:af:39:20:a9:22:12:e8:c1:
                    e5:e6:e7:c1:f5:e7:73:a3:e2:9d:5b:b7:ee:5e:b1:
                    de:24:66:46:e0:15:c7:e9:db:d7:aa:83:d3:be:10:
                    07:a8:4d:e1:23:0b:9e:73:4e:a7:73:6d:33:3d:56:
                    5e:49:e6:16:b8:7e:29:6c:6b:6b:0a:51:d1:7a:17:
                    50:b7:ea:0a:ef:90:da:0e:d5:3f:e7:93:dd:bb:3d:
                    8d:f0:2c:51:f1:cd:76:c5:22:9d:65:74:c6:37:4e:
                    29:8e:d0:2d:d3:c2:f1:60:af:4c:7a:ed:db:cb:e5:
                    d7:db:7f:45:83:08:4f:16:92:68:15:fb:d0:a9:82:
                    ec:11:1c:2f:2d:90:de:91:14:ec:f4:52:ea:4e:15:
                    99:00:5f:1f:03:88:9c:f6:d1:ba:5e:1a:ec:25:a6:
                    90:26:3c:f3:5e:be:08:e8:24:3a:36:c3:c0:60:cd:
                    25:85:1e:db:f1:f3:71:b3:a8:42:ff:2b:8e:42:1e:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:89:74:CA:A2:4C:13:72:F0:47:44:BB:C8:74:83:51:79:56:C8:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/99e13c26-f077-3c28-bac7-63bbf2c159ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:dc:46:c7:38:2e:ab:da:05:6a:24:21:6a:9e:ee:53:3b:
         ef:87:54:cb:c1:ba:b8:34:b2:a0:09:42:0d:13:ba:3f:af:f9:
         0c:7c:ed:20:56:f2:07:e1:28:c1:14:e3:ae:66:b6:22:3f:4d:
         7c:c2:e1:ff:87:3e:7d:0b:e3:59:b7:75:08:32:87:3b:cc:44:
         02:07:c5:16:dc:bf:fd:43:b0:96:88:f1:2a:10:16:3b:aa:33:
         df:44:10:70:77:cb:93:37:fa:36:e4:7d:19:4f:42:45:07:21:
         a2:9d:ff:1e:28:b5:52:08:d6:60:2b:b1:37:04:b2:90:7a:4b:
         bd:ca:2c:21:3e:b3:04:6a:c6:1b:b9:5a:9b:fd:3e:b5:e9:48:
         14:ee:4f:fc:b9:41:84:41:94:88:04:3a:ae:42:6c:59:f1:47:
         28:b2:d7:a2:ac:46:92:5d:4c:fb:82:70:a2:99:9d:f5:a8:36:
         d5:db:e7:49:df:4b:b8:6a:56:b9:d0:f3:b6:8b:8b:cc:d3:eb:
         02:d6:14:f3:2d:f7:08:60:61:98:16:04:84:0f:50:70:14:82:
         fc:ae:3d:9d:19:f5:39:72:7f:71:c5:1f:4d:d0:d4:05:c1:71:
         64:ad:bf:b8:47:5f:c1:5c:cb:2f:60:7f:f9:30:b6:15:a4:b2:
         ab:cf:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:22:39 2025 by rpki-client