Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/19336862-cce9-326e-ab5a-0d0be2e8892e.roa
File:                     19336862-cce9-326e-ab5a-0d0be2e8892e.roa (raw, json)
Hash identifier:          MTWGpUH0+GM3t5pT+/dEmn0mzRDnUOIXrvRfORzeF8I=
Subject key identifier:   7E:0B:6A:50:5C:60:BC:EB:83:E6:1A:66:CB:06:F1:C2:3A:AF:02:C1
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584BB45D3597D3DB44BF7FA62C80
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/19336862-cce9-326e-ab5a-0d0be2e8892e.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     33182
IP address blocks:        199.168.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:35:97:d3:db:44:bf:7f:a6:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=43b76fc4-c0ef-46a0-b6b5-131b3d2994a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:41:fd:21:e4:6a:59:f3:b8:52:7b:d1:68:
                    f2:82:3a:5a:16:4e:14:88:f4:da:3e:79:66:ae:8f:
                    64:38:d6:2d:92:1a:13:28:d7:f2:b8:b4:15:a9:77:
                    dc:d1:cb:66:9c:f1:7b:39:e3:61:0c:7a:2e:e9:b5:
                    64:37:65:6f:8a:b0:d7:fe:fc:e4:55:dc:9b:21:db:
                    49:08:47:88:83:ec:6c:48:de:28:2b:66:56:9c:4f:
                    69:86:c2:6c:fa:92:23:13:27:35:ef:3d:03:eb:f8:
                    31:c4:38:c3:42:1d:26:f7:91:1b:48:cf:8a:ec:d2:
                    0b:f1:dd:a8:6a:fa:8d:52:27:a7:94:49:37:c4:fe:
                    cf:65:16:f5:af:09:ce:42:fd:55:7b:45:74:84:56:
                    88:e0:a7:36:79:72:67:a0:63:43:73:7d:bc:7e:2c:
                    95:15:67:f8:26:01:49:01:ba:75:01:30:84:f7:27:
                    94:9e:cf:d8:54:57:f6:00:b1:f9:77:09:ae:9f:2f:
                    87:0a:da:ff:64:30:36:1a:6f:87:80:57:43:49:66:
                    9e:dd:c4:d9:88:a8:33:40:12:3c:46:d5:a5:e1:09:
                    d7:47:be:36:b2:a9:8a:63:10:09:ae:0d:41:7d:9d:
                    5a:f1:1b:a5:40:45:41:a1:f6:bc:67:e3:01:78:92:
                    c2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0B:6A:50:5C:60:BC:EB:83:E6:1A:66:CB:06:F1:C2:3A:AF:02:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/19336862-cce9-326e-ab5a-0d0be2e8892e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.168.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:09:f7:00:d2:64:f6:26:46:11:97:cd:d5:35:4e:c3:31:
         11:21:01:af:0c:14:be:7d:fa:1d:8d:58:8f:70:3b:63:ea:6c:
         c2:2f:83:d3:fb:56:d0:82:f5:89:61:5b:84:a7:4e:c5:e2:b8:
         88:cd:ed:25:42:85:9f:82:07:a2:dc:d8:fa:65:e9:cb:15:fb:
         26:01:10:db:71:44:ec:42:77:ec:28:ee:86:03:c3:d6:35:86:
         62:6d:66:55:9d:63:24:2b:db:07:e4:8b:22:72:44:fe:be:c0:
         9e:1a:d4:8b:40:07:bf:60:94:e9:74:6f:f0:81:b2:ef:7e:60:
         67:09:b5:8e:37:69:63:d8:b5:a2:c9:b7:79:c3:f3:b7:6c:68:
         81:60:76:0c:23:ee:1f:9c:b7:2b:80:5b:bc:c5:28:25:71:43:
         6b:eb:32:b6:7f:04:91:b7:76:bb:38:c8:3b:93:bb:3d:66:b6:
         60:96:25:81:e2:f6:4f:3d:0a:74:f9:85:6e:71:2a:72:55:ff:
         1a:15:5e:2a:ee:b4:81:77:e2:1c:7d:6a:8b:39:50:d3:8c:14:
         3c:e7:d0:6d:af:b4:4c:1b:84:18:99:2e:13:27:72:4d:3c:f9:
         53:18:be:12:35:a0:31:29:18:a7:4d:f1:4f:af:5d:ab:7e:f5:
         78:65:60:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:57:49 2025 by rpki-client