Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa
File:                     294acec0-39de-3a01-a55d-87f7629591d1.roa (raw, json)
Hash identifier:          IujCeIAmzzSydWBtWq2KxLINKrTclvH1g1E1vvpMskM=
Subject key identifier:   AA:2C:D5:3B:61:73:09:7C:08:E9:5C:9D:96:DC:44:ED:96:A5:23:C4
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584BA39D084DA2B7B61427A1FC00
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     36445
IP address blocks:        149.248.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:08:4d:a2:b7:b6:14:27:a1:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=8fdd9056-b2d2-466b-82c2-239a813ec9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:fa:16:f2:fe:5b:74:48:62:1c:d8:b6:a5:
                    c7:43:a7:f0:1f:0d:58:31:72:95:a0:f4:3e:67:8d:
                    f8:76:ea:8a:7b:2b:56:fe:84:7b:eb:80:0b:8f:49:
                    c0:9e:0f:87:e3:0e:21:dd:a1:65:00:9c:b7:41:7f:
                    a1:55:59:84:b9:24:92:c6:f4:6b:62:4a:a7:08:b9:
                    d4:07:f5:9b:b0:20:b8:b8:ad:99:8b:41:dd:6e:cf:
                    fa:c2:f3:55:e9:da:ac:40:53:33:ba:31:07:01:1b:
                    d2:e6:03:42:6e:86:46:1c:7b:92:99:12:f8:61:aa:
                    e3:c3:3a:78:34:81:47:d4:e9:aa:be:6e:9a:16:e8:
                    d4:6b:52:8e:82:07:ba:5c:b3:1e:36:7b:f5:e5:46:
                    7c:2b:f6:60:50:61:9b:f7:a9:40:c9:51:7d:a1:b4:
                    b9:71:45:6c:c2:f7:07:78:71:17:26:cf:0f:8d:9a:
                    06:08:96:85:fd:7a:d9:21:3a:af:ea:db:f3:a7:55:
                    9d:42:31:b1:50:d4:dc:4a:55:c0:61:5a:7b:0a:93:
                    12:2d:31:3a:a8:ca:9a:40:a0:b2:89:99:58:dc:d4:
                    16:39:c0:c5:46:48:0d:1f:00:d0:37:65:c4:3d:e4:
                    21:cc:97:e4:51:b0:3d:4e:79:ca:2b:67:10:81:76:
                    63:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2C:D5:3B:61:73:09:7C:08:E9:5C:9D:96:DC:44:ED:96:A5:23:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:55:60:1a:d8:49:87:51:b1:cb:8a:e0:d1:59:40:71:a0:ac:
         d9:d7:61:bf:02:3d:0b:6f:3c:6f:89:30:82:c0:5e:70:3e:b6:
         1b:c4:9e:df:73:b6:48:a7:3f:14:26:48:29:ad:cb:98:a2:d7:
         a9:a8:95:28:70:11:e9:b6:4a:01:bc:8e:58:6d:24:fa:84:12:
         39:df:e2:d2:54:08:05:cb:d1:02:23:4a:9e:25:9a:3d:f8:6b:
         27:3a:7e:9e:00:64:be:88:db:6d:b8:8f:4b:db:70:6f:90:1e:
         26:a7:9b:39:bc:20:76:a1:ff:06:62:2c:95:b5:9c:ab:b6:ea:
         b2:c3:ff:d8:6b:de:76:bf:33:65:3a:69:54:b0:61:24:82:e5:
         0e:03:f9:7a:57:2f:d4:90:c4:51:2a:1a:cc:60:c9:b5:c7:e0:
         5a:36:63:33:9a:26:0b:2c:00:81:c2:bc:00:d6:2c:54:7e:d2:
         d7:af:5f:b7:44:35:30:9b:09:74:db:6b:66:a0:34:f5:90:27:
         0e:6f:8a:8e:f9:1e:11:c7:43:52:b5:b5:d0:77:8a:29:f8:d3:
         2f:e7:77:3f:c2:4c:33:bd:93:86:d5:60:11:28:c4:3c:e8:e1:
         3b:4e:18:fb:c1:da:6f:2f:fa:7f:11:bc:cc:84:47:d0:07:57:
         97:a3:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:42:22 2025 by rpki-client