Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab60957e-425d-31b6-a8d5-119901be3c90.roa
File:                     ab60957e-425d-31b6-a8d5-119901be3c90.roa (raw, json)
Hash identifier:          VreAWefmKqLz18RzcMoeg6W8CFf8Yi7ENN/L3GA+m+s=
Subject key identifier:   B3:41:65:AA:98:19:49:AB:83:9D:B7:94:20:65:57:56:67:8C:6D:2A
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584BBA103EF4648371F2925824D0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab60957e-425d-31b6-a8d5-119901be3c90.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     271
IP address blocks:        206.12.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:3e:f4:64:83:71:f2:92:58:24:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=b36e999e-4a48-41d7-957d-d8a02d2e7f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:4b:ed:a4:7e:ff:6a:47:54:f4:01:19:89:
                    9f:c9:c4:b1:a5:57:1e:b6:53:06:d5:92:e8:c9:08:
                    fa:7b:19:f1:18:1d:fb:ae:e5:18:47:67:7f:9e:7c:
                    ad:df:a0:e3:5b:bb:23:b2:de:bb:d9:08:1b:67:ab:
                    14:47:32:f9:b8:a9:53:a3:1e:bf:8e:26:a2:f2:c0:
                    cc:1d:1e:21:fb:83:ac:2d:4a:f7:bf:1a:0e:00:47:
                    9d:37:1d:f6:b0:b7:4a:b7:75:e7:01:c5:f3:d2:ae:
                    d5:ab:8b:08:2c:7f:14:46:c1:fa:94:6f:1f:62:21:
                    8f:be:f1:cb:ff:a4:ed:66:09:9b:f5:81:8f:94:f5:
                    e9:ce:46:89:af:74:36:08:91:32:2f:3b:e9:bf:ad:
                    42:a0:5c:56:9b:d0:12:1a:da:a3:91:24:29:5a:1d:
                    e0:55:d7:37:53:9f:1c:9e:99:35:0a:8e:e2:8e:84:
                    c8:f5:84:1d:bd:6f:d4:ea:b8:2b:4e:37:de:e0:27:
                    5d:6e:ce:a8:5c:05:8f:6a:48:13:87:1b:c8:d4:f5:
                    b0:dd:2c:e2:ca:29:46:5e:6c:ba:85:b2:02:06:01:
                    5e:85:5c:fc:3c:2a:67:21:5a:e0:51:84:80:6c:5e:
                    89:63:0d:c8:e9:ce:38:37:8b:a6:b2:b8:df:f2:11:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:65:AA:98:19:49:AB:83:9D:B7:94:20:65:57:56:67:8C:6D:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab60957e-425d-31b6-a8d5-119901be3c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:3d:5d:5b:db:6c:04:24:c6:5f:14:ae:14:5e:5b:d0:29:
         f4:8f:ad:3f:94:ad:3b:e3:69:b5:df:13:8b:13:2e:be:a1:58:
         92:ab:48:cb:91:4f:d5:7c:92:9f:fe:76:96:3d:53:08:a5:96:
         1f:7a:ef:f4:ae:e8:8e:ba:e0:6b:1d:cb:6f:63:dd:d3:25:33:
         69:a5:59:94:66:d7:d5:68:ce:77:0f:78:42:62:a0:d9:da:60:
         6e:ec:20:60:c0:5a:dc:17:c1:88:d8:fe:4e:56:52:0e:97:54:
         f9:a2:5f:2f:84:8d:ee:a9:fa:ed:48:c4:be:b3:e4:8d:96:f5:
         6d:03:02:6e:30:d1:bf:a6:75:55:ca:d6:73:ac:c6:77:0f:d6:
         18:26:76:31:2a:09:d0:15:15:8f:d8:6b:03:0a:59:1b:08:8b:
         25:7c:b1:1e:66:a8:33:71:4d:0a:6c:aa:1a:5d:2d:67:0c:db:
         81:29:0d:c8:6c:4d:ba:35:83:28:5e:91:e1:5b:44:4a:ac:4c:
         98:a1:c5:bc:75:1f:0b:0a:b2:50:26:58:82:16:d3:e7:66:d1:
         32:c4:2b:6f:a9:1c:24:68:9b:de:c4:f0:21:17:f2:eb:94:79:
         33:56:da:0e:f1:63:ef:b4:84:92:49:65:0d:c3:79:5f:ac:d9:
         7d:0b:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:56:16 2025 by rpki-client