Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/5a3d4d4d-216e-36b5-82cc-fd3b28ac870e.roa
File:                     5a3d4d4d-216e-36b5-82cc-fd3b28ac870e.roa (raw, json)
Hash identifier:          ZXgC4v4DkwJ9v73fQ8NCd9FEZY+0IDvaZtWZIZ/QdTU=
Subject key identifier:   7A:BA:25:19:00:D8:CF:2D:C2:92:75:06:7F:9A:28:FC:CC:6D:D1:BE
Certificate issuer:       /CN=6fb44189-bc91-4730-aaf1-75900750d200
Certificate serial:       010D0C9F4328584B771BE0D3E96D2316500AB000
Authority key identifier: 13:3E:68:B5:87:18:33:CC:E1:4D:61:6D:32:EC:7A:0E:40:D6:51:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/5a3d4d4d-216e-36b5-82cc-fd3b28ac870e.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     397423
IP address blocks:        142.249.223.0/24 maxlen: 24
                          2602:f80f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/6fb44189-bc91-4730-aaf1-75900750d200.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/6fb44189-bc91-4730-aaf1-75900750d200.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:1b:e0:d3:e9:6d:23:16:50:0a:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb44189-bc91-4730-aaf1-75900750d200
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=6ee88fe3-782c-452c-80a1-4349411d14ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:0b:92:30:45:03:04:33:40:0e:3b:8c:b3:
                    8b:d2:aa:df:f9:3a:60:a8:41:f0:0c:44:02:dd:b7:
                    6c:15:b7:28:5f:ca:0d:0a:9c:e6:0a:4c:68:fe:dd:
                    5f:f2:13:ec:a5:a6:06:e5:7c:2b:28:50:58:6e:fa:
                    31:ab:81:52:56:b9:b5:e7:80:3b:55:2a:94:bb:71:
                    96:90:35:ae:d2:72:6e:bf:a8:a0:19:2f:c7:1d:97:
                    f8:38:b1:a3:f1:56:17:66:79:79:74:28:c4:9c:a8:
                    2a:41:8e:8f:e4:02:2a:86:f8:9c:91:da:bc:9c:0a:
                    e6:bf:da:35:91:9f:52:9e:d0:e5:5a:c5:4d:20:3f:
                    73:a9:e3:2d:4b:56:d2:fc:bb:cb:64:77:7c:bd:dd:
                    e3:c8:f3:80:aa:e8:94:c2:91:e1:28:e8:fe:42:c5:
                    0a:8c:d9:34:0c:95:16:32:72:85:82:93:74:78:55:
                    78:a3:be:cd:ec:92:8e:49:37:a9:3b:d7:45:dc:ed:
                    80:a7:e8:8c:b6:a1:9e:df:f2:04:e8:a0:18:a0:ed:
                    d9:99:e2:c5:00:c6:d2:0c:b3:a2:82:04:f8:b2:75:
                    f1:f1:ec:2f:81:66:2a:1b:64:4b:9e:f4:35:22:0c:
                    ed:e2:ad:d4:73:ea:83:0e:2b:ae:e0:5c:97:0d:31:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BA:25:19:00:D8:CF:2D:C2:92:75:06:7F:9A:28:FC:CC:6D:D1:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/5a3d4d4d-216e-36b5-82cc-fd3b28ac870e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200/6fb44189-bc91-4730-aaf1-75900750d200.crl

            X509v3 Authority Key Identifier:
                keyid:13:3E:68:B5:87:18:33:CC:E1:4D:61:6D:32:EC:7A:0E:40:D6:51:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fb44189-bc91-4730-aaf1-75900750d200.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.223.0/24
                IPv6:
                  2602:f80f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:bb:ca:d0:0a:34:91:87:2d:d6:ec:2a:f8:a5:a4:2c:75:20:
         0e:7d:52:fe:39:9b:d1:f6:08:21:28:ef:ca:6d:a9:4d:37:92:
         32:6d:58:9c:1b:d7:59:21:a4:a2:25:ea:58:cf:e5:3b:28:66:
         a2:a0:a3:63:8e:37:e1:21:44:ce:ee:7b:1e:a9:fd:1e:34:ed:
         03:99:2a:8d:ea:9a:c5:3a:1b:88:69:75:81:b5:bd:b7:3a:32:
         e1:ef:75:b7:cf:26:b1:60:70:81:57:07:d3:7a:5d:87:65:4e:
         b5:4c:ae:ec:57:6d:13:ad:6c:d4:81:03:75:8f:bf:2d:33:3b:
         71:b6:b5:b6:b2:8d:04:48:e9:33:19:01:f4:74:a5:89:54:04:
         0d:1e:36:05:ca:8a:20:67:0f:8d:6d:17:28:f5:b3:dd:78:a6:
         9b:e5:04:91:63:fb:2b:1a:5c:1d:aa:6a:9b:27:76:79:37:92:
         79:b8:72:1c:93:d0:9b:fa:94:f9:7e:79:c4:b5:28:c3:27:8c:
         cc:b5:2e:79:2f:c6:37:7c:d2:2d:91:63:26:33:32:c7:3c:b7:
         5a:3f:6e:c8:eb:2f:30:46:a6:e4:ac:69:b9:47:fb:59:70:e3:
         de:0c:1d:03:eb:4f:fc:5a:61:e6:c8:e9:77:bf:e5:e5:bd:11:
         a4:76:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:24 2025 by rpki-client