Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa
File:                     b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa (raw, json)
Hash identifier:          BvEbL+AaoydMQPK4T+Fy6bsVABXS52J5tX1dHEAiiM4=
Subject key identifier:   8A:D6:E6:A0:27:AA:64:BD:23:9F:58:D8:A2:16:AA:CA:4E:CB:8A:B5
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584BABFD03981FC18B37142508C0
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     399629
IP address blocks:        193.149.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:03:98:1f:c1:8b:37:14:25:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=61416cf7-94fe-47a2-a1b7-127b88695d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:11:9e:c4:57:58:1d:09:8b:f2:e9:4e:cd:7a:
                    34:8c:7b:99:a9:4b:24:79:48:b1:eb:12:90:94:55:
                    b6:f7:5b:eb:ac:a1:4f:06:a4:37:80:33:b2:a3:2e:
                    fc:ee:ef:d2:7c:f5:d6:77:aa:16:79:f4:9d:ba:f6:
                    0e:fc:16:82:fa:83:f3:86:b8:d7:3a:64:3a:1b:e7:
                    35:d6:3b:82:30:62:40:36:a3:e0:7e:6f:47:b1:b1:
                    ea:ee:49:a2:f6:97:0f:ff:13:dc:a9:27:f3:f6:e8:
                    a0:0e:ab:cf:e8:27:35:c1:e0:d5:19:6e:21:2b:bb:
                    3a:ba:59:c3:46:dc:d4:d3:cb:61:9b:f3:ce:b1:c9:
                    38:a6:43:e3:94:11:b6:da:47:ed:0e:a4:61:cb:03:
                    05:1e:f7:ec:03:42:41:78:e1:e1:c7:5e:d8:ad:53:
                    ed:f9:71:0b:ef:e3:e8:dd:96:c8:bc:97:fc:15:15:
                    5e:32:cd:be:7a:57:4b:88:ff:35:aa:24:d1:79:c8:
                    64:5d:10:fb:5a:a5:07:2f:a3:78:7a:87:d1:8e:f3:
                    78:5a:02:af:49:d9:1f:d8:22:b1:1b:9e:8d:b0:67:
                    74:ad:33:42:fb:59:f4:ec:1d:27:d3:74:a6:e1:f4:
                    8d:04:95:f5:87:61:e4:8d:eb:89:58:3c:1c:c2:1a:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:E6:A0:27:AA:64:BD:23:9F:58:D8:A2:16:AA:CA:4E:CB:8A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f5:88:50:b5:3f:8d:59:2a:ac:6e:ac:9b:e5:7d:75:93:f2:
         da:6e:4a:be:09:67:4c:01:85:f4:47:46:60:be:68:f0:2e:c6:
         b2:85:53:9c:ce:33:7d:08:b8:fe:13:6d:9f:90:d7:f8:08:ff:
         4b:c0:0a:27:84:b8:96:3c:f6:db:80:4d:6c:27:2a:dc:db:f6:
         22:73:81:cf:43:6e:c6:25:a0:12:af:8f:b0:3b:98:5e:44:e3:
         6f:5d:f9:c0:8c:70:55:fd:57:ed:eb:8e:95:71:06:ee:6a:f7:
         e2:b8:72:1c:81:bc:27:30:4d:b3:1c:69:93:28:fc:1a:62:86:
         55:fc:ae:96:92:2c:e8:d2:8b:11:e4:36:7d:a3:5e:3d:52:b6:
         51:a2:af:a7:45:b6:ac:94:80:58:bb:f0:27:2b:7e:75:f1:92:
         b7:e0:e7:25:95:3e:17:d0:65:80:c7:30:9c:a0:f8:c5:81:68:
         f5:d3:d2:6d:3f:45:b6:32:ee:56:95:09:ed:de:ff:2b:31:71:
         88:99:8d:9b:d3:29:51:b9:08:04:1d:bd:91:fd:6a:32:04:9f:
         4e:84:d9:b7:11:0c:a7:7e:0a:78:34:24:66:24:bc:14:40:5a:
         cb:be:77:19:39:32:bb:06:f1:00:cb:43:ac:64:eb:36:ed:50:
         50:f9:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:28 2025 by rpki-client