Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa
File:                     c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa (raw, json)
Hash identifier:          +iyFn+0NTKxVOzwuAJYr+2EOrxfV7WXZLUIkv1h1RmI=
Subject key identifier:   E5:B5:3E:FA:D2:B7:BC:2D:CF:F3:15:00:BA:C8:F6:A6:47:8D:EE:02
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584B5141BD4B04F092B60108D320
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     3738
IP address blocks:        192.250.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:bd:4b:04:f0:92:b6:01:08:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=f710b56e-c509-40f3-8951-6bf80863649a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:88:90:2b:f4:4f:8c:b7:86:14:a3:bb:11:
                    da:ae:2a:d0:86:0d:35:ae:07:3e:c8:c8:60:db:55:
                    f6:ce:fb:3e:dc:66:4d:a5:33:a6:5e:93:f8:72:c0:
                    0c:f2:c2:90:a6:42:70:50:76:49:1a:03:52:95:79:
                    12:66:8b:b5:04:c8:10:e5:53:37:24:67:4c:f3:8b:
                    c4:77:44:eb:51:92:80:8b:13:76:7d:69:b0:fd:54:
                    cf:d1:77:bb:12:d0:f3:7b:df:b6:09:ea:f0:17:38:
                    7c:5b:8d:5c:78:9e:fb:56:86:9a:32:dc:63:31:69:
                    4c:f8:af:69:97:95:cc:89:ad:74:8c:f6:2b:05:67:
                    0f:1f:06:38:5b:9c:3c:33:a8:a4:4a:ae:07:78:41:
                    d3:9e:8d:81:eb:db:6c:89:92:53:0e:b5:e8:2f:47:
                    d3:28:a3:61:f1:42:06:0c:83:a8:b5:67:73:a2:2a:
                    38:fd:59:4c:67:80:7e:9e:8f:79:91:8e:6c:ab:2c:
                    da:b8:a1:f3:6b:ab:0b:7f:41:4e:f3:b6:90:e6:a3:
                    97:3d:58:a2:0b:59:3c:28:16:65:38:24:31:04:4a:
                    39:1a:b1:2d:7b:75:a3:ae:6c:2e:80:f6:30:9e:76:
                    13:7e:4d:24:26:cb:f2:b1:b0:15:57:8c:fc:f8:89:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B5:3E:FA:D2:B7:BC:2D:CF:F3:15:00:BA:C8:F6:A6:47:8D:EE:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:83:38:49:c5:3c:00:f4:6c:34:3d:3c:68:e7:ea:9c:89:3c:
         1a:64:cc:ce:31:0d:c9:68:58:b5:0d:a4:6f:e1:ff:2f:e3:45:
         f5:97:e3:0d:af:9a:a7:91:1b:9e:51:52:26:c8:06:2c:6c:69:
         0e:9d:aa:58:41:d6:8e:95:3c:52:15:48:ce:4f:c3:d4:d4:d4:
         32:2d:d4:d4:95:e8:f2:e3:e4:3e:78:d5:cd:59:af:31:2c:a9:
         08:2c:7b:6f:af:a1:e4:c5:53:49:ec:90:64:a7:75:f2:ae:64:
         04:93:4e:c6:27:48:51:f4:86:f2:6c:f9:e1:dc:a2:c1:26:ff:
         4f:20:9f:cd:3e:d8:7f:40:25:29:0f:29:3b:4f:d7:7c:b4:d5:
         a3:9f:25:9e:87:5b:40:c4:cc:b0:18:9b:3d:67:4b:bd:6c:64:
         09:f3:e7:d4:b1:7c:0b:c2:7c:5f:c7:e3:0c:76:6d:ef:f3:fc:
         14:f4:09:e1:1b:18:1c:5f:0e:7f:40:01:7c:c3:50:51:83:94:
         24:3d:22:23:d9:a1:3c:8c:ec:b7:08:1b:25:38:74:17:3e:46:
         71:ef:7c:ca:41:b8:1b:8b:15:2e:ea:ce:45:11:66:de:b2:48:
         35:03:0e:2f:ba:da:95:d9:11:a4:42:c1:0d:40:ab:e3:81:43:
         0d:04:a3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:46:13 2025 by rpki-client