Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/92fbf9b6-570b-3f53-a558-aa56f6093b8d.roa
File:                     92fbf9b6-570b-3f53-a558-aa56f6093b8d.roa (raw, json)
Hash identifier:          BEhhIMhMYViX02tgbV+4YZPQFtwhsnEkwhL8PYWL6M8=
Subject key identifier:   E3:24:1B:7C:BD:FE:46:0C:87:72:FB:1A:DD:15:D1:02:93:B9:CE:13
Certificate issuer:       /CN=03cb17c9-7597-4c95-a127-009654391416
Certificate serial:       010D0C9F4328584BA32995BA17CB5564F5A4FB30
Authority key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/92fbf9b6-570b-3f53-a558-aa56f6093b8d.roa
Signing time:             Wed 08 Oct 2025 15:43:56 +0000
ROA not before:           Wed 08 Oct 2025 15:43:56 +0000
ROA not after:            Tue 06 Jan 2026 16:43:56 +0000
asID:                     40776
IP address blocks:        131.143.20.0/24 maxlen: 24
                          2602:f8ab:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:29:95:ba:17:cb:55:64:f5:a4:fb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cb17c9-7597-4c95-a127-009654391416
        Validity
            Not Before: Oct  8 15:43:56 2025 GMT
            Not After : Jan  6 16:43:56 2026 GMT
        Subject: CN=fa8283f9-5903-484e-a28a-cbbcb40a6852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:d9:f9:38:d5:85:6c:88:52:34:43:36:b2:
                    99:53:8f:63:70:9e:75:2a:cb:b5:1a:ee:10:6d:fd:
                    4f:6e:81:0e:12:3f:da:2d:15:4e:b1:8a:53:07:59:
                    1d:80:80:0d:6c:03:a7:77:9f:d1:43:3b:a7:6a:a3:
                    3e:8c:db:d3:bf:0d:01:ab:90:b3:6d:3a:55:de:dc:
                    55:8a:7d:89:42:ec:e3:1d:d0:bd:2f:41:24:11:18:
                    2c:ed:7d:14:5a:b1:6b:74:f3:ad:b2:f4:d8:a9:b6:
                    b2:81:de:2d:19:1e:76:47:d5:e0:f0:d5:e5:1b:f4:
                    3a:b5:62:1a:49:31:cb:99:fd:5b:1b:40:88:41:20:
                    ce:f9:32:40:63:60:ee:c7:5a:93:de:c2:46:33:2a:
                    e7:fd:d8:51:70:f5:88:b0:5d:2b:b3:51:ef:c6:ab:
                    7d:a7:f5:3c:4d:c2:a9:97:8c:81:ca:68:5c:72:6a:
                    04:29:7c:39:a2:7c:2b:c0:90:96:dc:a2:e2:e4:58:
                    0d:8c:60:2d:0b:ea:e8:d4:8e:68:1d:f8:87:ab:62:
                    cf:70:9c:d5:07:fb:8b:33:2f:1a:c2:01:eb:fd:d2:
                    9d:3b:c1:c9:48:0a:81:5f:76:2c:14:5d:37:39:37:
                    69:9c:18:aa:a8:eb:6b:98:07:81:36:16:f0:0e:99:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:1B:7C:BD:FE:46:0C:87:72:FB:1A:DD:15:D1:02:93:B9:CE:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/92fbf9b6-570b-3f53-a558-aa56f6093b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl

            X509v3 Authority Key Identifier:
                keyid:2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.20.0/24
                IPv6:
                  2602:f8ab:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:69:1c:6a:df:70:bb:ce:73:28:b8:59:ce:9a:3d:6a:a4:
         74:a8:6f:7c:2f:33:ed:5e:88:e1:13:f2:03:2f:cf:78:b1:a4:
         a9:ec:29:73:c1:15:f2:aa:aa:e8:93:35:a4:10:8d:da:34:78:
         fc:df:06:3a:86:17:e2:2a:92:a1:a2:3d:bc:cc:2f:45:ca:d6:
         97:bf:f4:dd:3e:b7:4b:1c:13:2c:41:e8:79:40:1e:dc:9b:79:
         9a:6c:db:ff:0b:73:24:4c:64:02:20:cf:6d:5a:62:33:e8:c5:
         a8:f3:d6:76:9e:ae:c4:47:5b:65:ee:8e:5f:ca:f8:2d:83:19:
         62:4b:fc:ee:19:46:e2:19:55:8c:0b:59:fb:5f:26:cb:f0:00:
         60:b4:01:ca:17:8b:9e:6b:13:60:2f:47:ed:d9:86:49:d9:17:
         ec:f6:6d:69:f7:3e:8b:fb:48:61:bc:04:2d:8f:67:e4:09:61:
         42:22:ce:42:9d:f3:ac:2c:9a:33:d6:92:73:db:bf:e9:ff:de:
         9b:71:12:1d:c4:b0:c2:92:c4:c4:4d:da:93:4c:7d:cb:4d:81:
         3b:e1:94:05:a0:55:56:55:eb:6b:73:4b:4c:ee:4d:e1:5e:e6:
         c7:53:81:b5:f0:60:06:58:d5:d5:c6:81:27:5e:31:d0:ea:12:
         2f:03:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:31:04 2025 by rpki-client