Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/23d026c0-fbf0-39b0-8c46-5834fb7a3ed2.roa
File:                     23d026c0-fbf0-39b0-8c46-5834fb7a3ed2.roa (raw, json)
Hash identifier:          c66jRvu7Y4VVkoXWLnzzz4q5rdwLthESxm1Qs/tIvKQ=
Subject key identifier:   D8:E0:17:47:29:43:22:DB:93:2F:9E:77:1F:FB:1A:5E:F4:CC:97:FE
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584BA39D1AA20551E49B3515DB68
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/23d026c0-fbf0-39b0-8c46-5834fb7a3ed2.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     577
IP address blocks:        192.219.32.0/19 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:1a:a2:05:51:e4:9b:35:15:db:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=7fb76e2d-c659-47df-a2ab-d0f1c125b708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:bf:02:9e:59:e4:98:7d:79:79:a4:68:2a:
                    1c:de:67:c0:50:52:95:45:86:b6:48:74:72:3e:51:
                    e9:27:3e:5a:12:6b:59:3e:b6:fb:1b:82:1c:af:bc:
                    ad:e1:63:24:40:6e:2d:c5:f1:f8:2e:c7:2c:9d:d9:
                    7d:c8:ca:97:3b:96:ff:64:68:6e:1c:29:04:f6:af:
                    5d:bd:ff:22:c8:c5:68:d1:62:d5:61:fd:20:9c:cb:
                    35:7e:69:e1:75:cc:16:10:88:f5:d6:f5:5b:79:94:
                    2a:d2:3d:ea:4f:33:bb:5f:a3:49:b4:8c:ac:d1:1e:
                    84:02:fb:42:a6:f3:28:c4:c2:4f:76:86:40:6a:6e:
                    2f:ef:02:03:08:3e:76:65:41:73:58:ee:14:eb:be:
                    79:85:75:6b:1e:95:42:6f:9e:62:9b:41:17:ed:53:
                    9e:12:6c:f2:c9:95:22:a2:eb:91:13:26:84:2b:d4:
                    53:01:dc:a1:c5:b7:0c:62:ba:56:6d:da:0e:83:a8:
                    66:02:0a:60:a6:8e:48:7d:15:c2:ca:1f:c1:83:f8:
                    a1:0b:e8:55:8e:51:b1:0c:69:56:d3:fd:c2:e0:c4:
                    2e:2e:c0:14:68:a8:e6:c3:9d:49:c5:b8:03:c4:38:
                    84:c3:e2:c3:d2:c3:9b:d3:f1:be:ee:fb:d3:79:a3:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E0:17:47:29:43:22:DB:93:2F:9E:77:1F:FB:1A:5E:F4:CC:97:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/23d026c0-fbf0-39b0-8c46-5834fb7a3ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:13:a8:5c:d0:2e:55:72:39:e6:fc:8e:ae:38:8f:c8:9d:
         75:bd:17:36:b0:d0:de:58:39:36:a1:2f:92:73:a6:5d:e9:3b:
         bc:36:96:c4:1b:6d:1e:07:a9:0d:ae:62:ac:31:67:f7:29:a1:
         4a:00:98:07:8f:14:5d:a2:5c:5c:f5:50:00:a0:1c:84:46:bb:
         13:51:a3:1d:03:13:76:ee:93:56:e6:59:b0:37:80:b7:91:ea:
         95:52:ac:92:5d:86:d2:d3:2d:a1:79:2e:60:cd:7a:b0:64:2c:
         da:de:d7:bf:e0:39:49:96:cb:ed:00:3f:82:1d:86:06:e4:0c:
         3e:14:85:e9:40:0f:75:bf:54:42:03:ea:86:c3:96:dc:a9:1a:
         33:83:00:15:21:91:57:dc:60:cf:c1:30:d6:1f:94:ef:df:86:
         29:a6:33:37:22:71:82:31:68:ca:4d:c8:4c:11:9b:92:24:11:
         ab:65:bb:42:42:fc:d3:b6:47:ef:03:12:1f:d0:b5:bf:58:76:
         4d:34:c4:b3:c1:d1:f3:8b:d2:28:37:c8:6a:bc:f4:10:2f:73:
         61:5d:f3:05:48:b6:10:1c:76:85:2b:1d:c3:07:71:85:90:cf:
         88:e7:43:50:00:22:a0:99:19:99:05:a5:64:cb:03:a0:57:84:
         55:1e:32:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:12 2025 by rpki-client