Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fb4f6f76-d507-3903-a09e-42e34d928734.roa
File:                     fb4f6f76-d507-3903-a09e-42e34d928734.roa (raw, json)
Hash identifier:          cwRTN0I1Xb2JQuBr3CzNrqJj+U6qLGBs7bjghDVwPkE=
Subject key identifier:   A4:C3:36:35:23:89:E9:6F:85:79:66:5B:22:C8:57:8B:7F:4D:7A:00
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584BAA97B8B6C0434CB7B23F0020
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fb4f6f76-d507-3903-a09e-42e34d928734.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     31898
IP address blocks:        192.9.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:b8:b6:c0:43:4c:b7:b2:3f:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=0dfd8421-dca3-4bca-b079-cc816ebee0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:b9:c0:aa:ee:2e:76:8b:12:7f:65:7d:74:
                    de:2b:92:1b:e4:bf:dc:25:b9:76:ff:fb:1b:48:8c:
                    ae:c1:71:2a:98:06:d1:eb:d1:c4:7f:1d:83:6d:37:
                    a5:a9:b1:be:31:25:52:20:8c:03:9f:0b:61:92:52:
                    f4:3e:58:b0:d5:ff:22:3e:c2:4a:38:6f:83:fd:37:
                    5e:46:ed:08:10:32:ba:14:e6:61:03:df:c8:c0:50:
                    3f:5e:bd:f4:23:cd:b2:7f:0b:4e:61:d7:09:a2:36:
                    ac:6c:b0:75:71:05:d6:51:2a:e6:82:7e:34:6b:73:
                    04:64:3e:f4:b8:5a:0d:0f:d3:fa:22:61:19:ce:67:
                    cf:79:f7:04:32:56:c0:09:b7:1f:9a:c7:f2:37:5c:
                    3a:30:78:7c:71:f7:d3:49:55:f7:7f:de:2b:33:e5:
                    91:8d:8c:7f:05:63:a7:2b:f7:0c:8b:0d:c2:7c:2c:
                    15:cc:85:35:23:02:cc:25:aa:ef:a9:f3:b4:cb:36:
                    cc:c1:57:bd:e7:28:30:47:ec:65:f1:c6:47:dc:9a:
                    42:7e:13:67:4f:26:84:ad:7a:bf:4a:f3:a8:69:af:
                    f0:7a:5c:99:78:19:cd:15:96:80:05:a8:65:cb:c3:
                    7c:fa:51:bc:3c:14:6a:95:0f:2e:a6:d5:01:66:7b:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C3:36:35:23:89:E9:6F:85:79:66:5B:22:C8:57:8B:7F:4D:7A:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fb4f6f76-d507-3903-a09e-42e34d928734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.9.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:99:5d:dc:a5:00:32:ac:72:57:23:78:f3:8c:78:c0:e4:7c:
         ab:3f:20:10:5e:55:d4:51:b4:da:5d:53:5e:b9:82:8a:ce:a1:
         05:dc:93:7f:bf:dc:e6:93:ad:ac:9e:ab:d9:16:8f:f1:d9:d2:
         11:11:63:df:39:15:93:27:2b:cf:4f:2b:4f:d5:c2:41:d5:70:
         ab:6b:49:b6:33:6e:46:6e:6f:b6:06:08:bd:e2:14:ac:c9:a0:
         7e:09:73:3e:7b:8c:c6:e4:4f:20:c6:8f:12:e3:f9:98:16:a1:
         be:bb:b6:9d:da:33:c4:03:de:18:69:36:0a:e2:e6:d3:21:39:
         92:61:9b:7a:a4:d6:58:8f:e3:a2:d2:81:6c:f3:23:3a:c9:c8:
         36:3c:61:06:fd:d3:32:98:63:0a:42:d2:83:25:8b:8c:c0:e5:
         d3:5b:fa:72:74:0c:28:e6:54:00:40:3b:a9:e5:04:50:22:31:
         fe:40:1d:0e:3f:a8:d4:03:9d:0b:de:f2:aa:13:36:85:2a:93:
         43:43:2c:06:89:8f:c1:c5:0e:05:e2:b6:ae:2a:48:64:41:ee:
         86:ab:94:43:79:02:c5:c2:99:2a:04:d6:9b:27:79:24:af:9d:
         d7:b5:24:3e:ed:8a:41:36:41:b4:48:ae:cc:99:b1:fe:d1:1c:
         48:6e:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:59:07 2025 by rpki-client