Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ed01e030-9725-3706-a152-4c292fbd1f32.roa
File:                     ed01e030-9725-3706-a152-4c292fbd1f32.roa (raw, json)
Hash identifier:          S0TyPASqcOZBbE9ARiEN9rplsqMP5VfSnAhVQNLJADw=
Subject key identifier:   44:86:3E:58:45:4C:0A:3D:C3:39:67:98:8F:E7:78:9F:1F:35:BC:91
Certificate issuer:       /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial:       010D0C9F4328584B92DCE409D37847CC30599560
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ed01e030-9725-3706-a152-4c292fbd1f32.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     64199
IP address blocks:        198.178.119.236/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e4:09:d3:78:47:cc:30:59:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=f78b50c2-78ea-4b95-a89c-10c7f4c9a782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:8e:e0:ff:92:5e:b4:45:65:2a:7c:b5:1b:
                    83:6f:73:42:65:08:e7:16:6f:ff:47:2f:27:74:75:
                    97:62:46:5b:7c:c5:ac:cd:96:c5:a8:89:dc:57:a3:
                    14:16:7a:2a:a1:94:73:df:34:fe:22:e0:ee:a1:9f:
                    ab:74:f7:75:96:36:43:7a:9c:e9:1f:2a:1c:b2:cb:
                    a1:10:71:b3:81:80:dc:43:fb:c9:fd:72:55:1e:dc:
                    34:cd:f3:a5:18:d2:13:23:de:56:f2:2d:62:ff:01:
                    be:96:f3:79:c4:a6:67:97:4a:7c:f5:0b:3e:f8:38:
                    4f:c9:f8:bc:f7:f2:46:9e:9f:1e:97:5e:dd:73:e4:
                    a0:43:ca:f4:c3:27:73:29:da:95:17:cb:36:97:eb:
                    6b:0c:b4:bd:f2:20:66:94:ae:4a:8d:29:06:e4:15:
                    ce:22:4b:4e:30:8f:0d:bf:9b:17:39:59:1f:41:ef:
                    f2:2d:c8:8d:c6:b3:66:d6:c6:37:7a:a2:f3:67:f1:
                    a6:ad:95:f2:da:69:b0:61:64:50:c1:51:0f:32:0f:
                    a6:d6:e2:9b:6d:35:25:68:8b:29:71:65:3e:12:e6:
                    63:5b:18:af:ff:67:ff:6a:63:0f:61:08:e5:05:11:
                    9c:e1:41:41:dc:d9:37:10:93:61:e1:eb:8d:f2:40:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:86:3E:58:45:4C:0A:3D:C3:39:67:98:8F:E7:78:9F:1F:35:BC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/ed01e030-9725-3706-a152-4c292fbd1f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl

            X509v3 Authority Key Identifier:
                keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.178.119.236/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:5e:a1:f7:7e:79:0e:01:ad:de:eb:55:f1:ad:19:17:18:
         4b:12:79:61:90:cc:0b:d0:55:6b:b5:2a:dd:e2:e8:52:a0:e0:
         44:64:d3:e1:dd:da:96:6a:87:05:9e:dd:eb:d7:51:d8:e3:e7:
         f3:88:59:20:72:e5:10:2b:34:9c:32:39:f4:87:0e:77:f5:a6:
         f0:68:49:83:e6:1b:3f:c5:1f:72:42:8d:8a:f6:5d:25:74:8e:
         71:95:08:c7:a8:18:f9:19:c7:8a:15:7f:93:29:be:f0:2a:40:
         4a:55:19:44:a6:02:9a:d3:23:9d:6f:ff:24:92:db:aa:10:af:
         7e:97:9e:cf:6d:8a:f8:33:8c:2e:e7:92:66:c9:83:ca:75:8a:
         5c:f4:95:6a:01:93:9d:84:6e:99:a4:59:0b:66:f4:61:2a:dd:
         71:d8:6f:cf:25:d5:23:42:e0:03:2a:cb:57:f6:f3:7f:eb:9e:
         36:1d:fc:8b:c5:29:46:cf:06:b4:11:78:07:0c:04:08:a9:01:
         f6:b1:c7:10:dd:1e:ad:77:66:cf:37:00:48:74:39:d8:40:41:
         51:52:e9:bb:ca:67:30:ed:72:e2:98:ab:29:67:07:51:83:f9:
         a9:80:31:88:36:41:9e:05:b8:8a:0c:05:d2:9f:0a:f1:a8:00:
         ec:c2:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:46:16 2025 by rpki-client