Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa
File:                     48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa (raw, json)
Hash identifier:          Th4h+z10D3L/TruYe9bccWSviijNYswp8LUxcZKKwmg=
Subject key identifier:   5D:CD:19:CA:14:69:5E:B4:AB:8C:D6:DA:62:F2:35:F8:1F:A1:76:91
Certificate issuer:       /CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4
Certificate serial:       010D0C9F4328584BC2704647264DC61C5BA62AC0
Authority key identifier: 2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     36228
IP address blocks:        192.43.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:46:47:26:4d:c6:1c:5b:a6:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a32deb-314f-4a1f-98ec-1b63b8d31ad4
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=b20d7ae6-4ee2-429c-b897-503886025a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:03:f3:d3:2b:09:46:a5:c7:c1:fa:e3:3c:90:
                    9a:70:2b:f7:fc:57:88:ad:a6:21:6d:09:9d:ae:9e:
                    41:69:c6:d9:f7:cb:63:5f:24:e8:8c:d7:d4:56:90:
                    be:b1:f0:9d:1f:11:e4:dd:80:00:e2:43:af:ca:38:
                    cb:eb:e1:a2:00:4c:31:ab:84:27:b2:52:ba:31:ca:
                    94:4b:12:15:b8:c9:65:41:16:38:42:a6:58:2e:f1:
                    3f:54:52:36:eb:e4:b3:c6:7b:3c:0a:88:78:dc:a3:
                    d5:37:c6:30:46:a1:eb:d1:26:b6:12:bf:6f:1f:95:
                    83:5e:ca:98:d7:4a:85:42:ef:2f:e6:38:40:ca:b9:
                    ea:0d:d4:fa:f9:4a:a7:84:b2:ae:64:eb:96:da:1b:
                    55:e1:77:64:6b:b5:ff:64:ff:ca:b7:8e:8a:55:b5:
                    a3:2a:2c:31:2c:28:45:95:59:28:4b:1c:77:1e:7e:
                    af:31:d8:44:1b:0a:79:1f:39:d1:2b:81:64:a3:69:
                    f6:5c:0b:23:3a:6b:9b:dd:37:a0:14:ed:23:20:3b:
                    93:e3:0b:78:d2:84:8a:c4:fc:97:cd:70:8d:6b:f7:
                    f8:3b:04:b2:b7:e8:33:e5:d6:a2:db:34:f8:87:82:
                    a3:6e:ad:33:14:c1:50:0c:96:bf:81:02:f9:14:a1:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CD:19:CA:14:69:5E:B4:AB:8C:D6:DA:62:F2:35:F8:1F:A1:76:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/48993bc6-8e4b-30f9-a713-92e5e7a73fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.crl

            X509v3 Authority Key Identifier:
                keyid:2E:5E:1D:EC:15:B5:F2:A8:92:06:96:04:A8:0E:83:CE:3D:7F:5A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a9a32deb-314f-4a1f-98ec-1b63b8d31ad4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:71:fe:95:1e:41:bc:2d:98:72:3a:ff:b3:44:5c:f5:3d:b3:
         b0:e0:10:ba:7f:a4:61:28:a8:93:4b:32:b1:07:ed:71:78:e2:
         06:89:4e:26:60:76:88:c9:92:2e:d1:5f:ed:e4:d2:19:7d:a5:
         35:9a:85:2b:33:ff:48:09:34:31:61:66:a4:03:41:06:09:0f:
         56:b0:b8:d3:42:6c:9c:54:0b:a6:44:59:ff:ae:74:22:87:db:
         46:35:97:01:5d:20:dd:90:b2:fd:83:f5:7c:70:0d:df:70:c5:
         33:47:a9:d9:ac:fe:59:50:e2:78:9e:35:0e:7b:4b:c2:75:78:
         0b:df:b0:4d:f3:39:24:33:ae:94:e2:ff:ba:1b:45:c6:58:65:
         f8:28:1c:58:84:98:22:01:30:75:ba:b9:24:da:fe:63:8e:e5:
         e7:84:6c:3a:b4:79:37:e5:64:dc:06:d2:a3:06:d7:39:55:93:
         10:e2:b6:ef:69:9f:8d:ec:d6:65:82:76:33:54:c9:d7:63:44:
         f0:49:5e:e7:38:92:9d:2f:52:6d:43:77:2c:22:b8:c4:a4:da:
         0a:85:e7:0b:5c:6f:2b:36:ce:a8:42:dd:01:d6:c5:84:ef:71:
         14:f2:3c:ca:5c:e3:05:9e:f0:1f:63:33:67:24:bc:75:ae:4c:
         29:93:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:44:31 2025 by rpki-client