Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa
File:                     2436cc83-a62c-3742-950a-c8c1fdc678de.roa (raw, json)
Hash identifier:          u9JE4o5PwmczEwmX3tD6ahTVqoYQ6i19juiuiHSSw/o=
Subject key identifier:   9E:0C:34:56:CF:D1:7D:18:23:3B:61:9A:75:56:D6:8F:D3:E1:E3:EB
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F4328584B9962F1E45A1A96709494AD00
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa
Signing time:             Tue 21 Oct 2025 21:05:44 +0000
ROA not before:           Tue 21 Oct 2025 21:05:44 +0000
ROA not after:            Mon 19 Jan 2026 22:05:44 +0000
asID:                     19830
IP address blocks:        144.249.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:62:f1:e4:5a:1a:96:70:94:94:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Oct 21 21:05:44 2025 GMT
            Not After : Jan 19 22:05:44 2026 GMT
        Subject: CN=e3bc1e83-1124-4770-9a4b-8703dd756b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:3c:33:c6:50:c1:e5:c6:b7:32:69:db:c4:
                    75:71:c5:ae:9a:7a:f2:fb:85:f5:79:60:af:66:95:
                    27:97:5f:aa:1a:4a:94:a4:df:31:6b:e5:6f:01:23:
                    83:59:f4:e1:26:e8:37:7e:5e:de:95:47:ee:99:bd:
                    f8:86:80:84:8b:3e:d0:35:12:ca:61:d5:9d:59:f0:
                    64:6f:f6:d6:7b:82:41:bd:b5:ee:59:cb:04:98:00:
                    2f:f4:00:79:2a:16:81:35:cb:51:c9:0f:f7:87:3a:
                    33:a2:da:47:95:e4:b8:e8:fd:a6:97:8e:2b:c6:38:
                    52:d4:f6:7f:3d:c1:b2:11:ea:82:73:11:41:65:a9:
                    68:df:3f:99:d2:03:41:02:fb:0f:71:85:68:32:f2:
                    d1:75:c6:04:75:22:6a:4d:93:19:d1:2b:6b:4a:9e:
                    a2:56:e0:b6:1b:3d:2c:83:8d:57:26:24:74:48:f8:
                    c9:99:19:8b:26:8b:8b:56:3d:7d:29:b8:84:e0:69:
                    f5:73:d2:45:59:29:77:86:32:ab:92:6d:88:b1:b6:
                    9b:75:10:0a:e7:38:72:20:ba:b4:3e:a8:86:99:80:
                    f2:45:98:b2:d4:44:1a:90:e6:f6:b3:32:ce:b6:48:
                    bb:b2:b0:7e:b4:63:50:bb:c6:4d:fa:fd:70:5f:29:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0C:34:56:CF:D1:7D:18:23:3B:61:9A:75:56:D6:8F:D3:E1:E3:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.249.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:dc:76:5a:12:c2:32:44:1e:15:53:6e:3c:90:35:82:cb:85:
         a0:8e:fc:3a:c5:41:69:46:25:21:6b:9b:ed:c4:bf:fe:e9:e2:
         b0:17:ab:00:3e:6e:16:5c:fe:bc:03:73:d5:8f:74:61:0d:5d:
         da:d5:2c:b5:bc:11:34:1e:e8:a2:4f:57:b0:0d:4b:5d:d0:4e:
         85:23:aa:0a:38:8a:37:b7:3f:c5:28:4d:b2:12:f8:70:19:b3:
         81:c2:57:66:14:05:78:0c:db:36:54:23:13:39:52:8d:96:fc:
         ed:cf:07:63:d7:61:71:bd:e6:06:cf:68:e0:ce:8e:80:d3:ab:
         33:c9:4a:95:10:24:52:25:0f:f1:c1:24:37:bd:82:87:d8:42:
         fb:59:d8:85:86:27:10:8d:f5:68:61:a1:3f:7e:63:16:63:6b:
         a0:c1:3b:0c:e8:ba:ec:39:ca:ae:ae:f3:40:8d:f3:64:05:91:
         ae:f7:93:88:ed:f2:00:5c:22:cb:db:10:5d:02:54:43:d0:f1:
         3a:66:a3:9e:56:7f:b5:f8:95:46:03:54:c6:50:30:5f:1b:5d:
         56:fd:5b:d1:8c:6d:d7:e1:7b:72:c6:05:17:18:4c:08:ae:0b:
         a3:df:3a:19:b3:cb:3b:98:4f:8e:e2:43:c4:a0:07:ff:1b:b2:
         cf:91:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:53:39 2025 by rpki-client