Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/4e455485-38b5-3a78-b3f4-05ccd8e6e568.roa
File:                     4e455485-38b5-3a78-b3f4-05ccd8e6e568.roa (raw, json)
Hash identifier:          wcP0UycVTqqN7xkSpB49cRpxf2WDd+o31dPCnCh4IDg=
Subject key identifier:   E5:D2:66:9E:0F:CF:19:C5:CC:D8:22:3D:FF:C5:90:09:8D:6F:FB:D7
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584B328C34534B6C64068B1D9700
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/4e455485-38b5-3a78-b3f4-05ccd8e6e568.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     15267
IP address blocks:        206.188.160.0/19 maxlen: 19
                          206.188.160.0/20 maxlen: 20
                          206.188.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:34:53:4b:6c:64:06:8b:1d:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=fa31fa44-d11e-4620-a0e8-7e15f978a391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:30:90:bc:8f:b4:53:a1:d1:b0:9f:1a:30:ae:
                    29:6f:50:f9:2d:d9:ba:f8:03:a4:ac:04:c2:25:0d:
                    ec:b2:16:44:20:49:2a:1f:27:35:98:b0:d0:7f:29:
                    48:00:b1:43:f8:7a:12:05:43:8d:ab:62:b1:1c:22:
                    ce:04:38:5d:ad:ec:98:14:7e:e9:3d:42:bc:25:11:
                    e7:19:50:5e:55:99:f3:0e:1c:cd:ea:2b:fc:41:b4:
                    88:83:54:93:aa:1c:6d:8f:48:0d:cd:ea:7e:c4:4b:
                    5c:2d:7a:c7:4b:aa:79:54:2b:34:8d:ff:25:ff:03:
                    00:26:17:88:e9:5d:d0:2e:2f:dc:53:f4:39:5a:26:
                    3a:90:66:d1:26:fc:b5:ad:07:1a:be:11:70:42:a9:
                    10:40:d6:57:0f:fe:c1:1f:f9:a3:1a:ca:dc:1a:1e:
                    93:eb:00:52:ec:78:d3:1b:32:56:3c:de:99:11:c9:
                    fb:6b:88:3e:35:3a:11:95:3c:52:c8:69:fa:69:7e:
                    2a:69:68:b5:d5:a9:8f:45:c6:79:05:cc:63:82:15:
                    ad:6a:91:7f:7f:72:09:30:e3:05:2f:ea:3a:42:e1:
                    63:0e:8b:cd:63:f7:4f:41:14:60:17:b9:e3:14:ae:
                    8e:57:43:b1:11:77:d7:27:5c:94:f5:fb:2c:e9:8d:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D2:66:9E:0F:CF:19:C5:CC:D8:22:3D:FF:C5:90:09:8D:6F:FB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/4e455485-38b5-3a78-b3f4-05ccd8e6e568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:15:2e:e4:49:0a:4c:d3:fd:35:a8:ca:08:26:85:a9:dc:7f:
         a0:57:52:98:c8:df:ae:ff:50:e0:9c:30:56:b1:9c:db:7d:f0:
         84:22:01:da:a6:00:be:87:32:dc:5b:9a:48:8c:e0:46:2e:70:
         a9:28:42:70:3f:5c:7f:fd:50:12:57:93:16:1a:87:ff:f6:48:
         77:fc:d8:b9:67:e4:60:f0:0d:06:7e:73:0f:56:4e:32:4a:4d:
         b0:8f:76:e3:51:8d:57:ba:12:31:b1:ab:25:fa:5b:4b:6c:f2:
         f1:18:6f:60:34:b3:44:06:f4:38:88:93:96:97:a8:e4:7a:51:
         d0:ed:24:8f:8b:f5:33:c6:fd:83:2b:ca:98:76:35:70:73:bb:
         83:41:ae:f2:75:91:fd:13:a4:9c:06:d6:87:a4:82:45:22:d1:
         71:f1:3d:21:91:60:be:5a:78:36:8e:61:da:f9:40:c0:58:60:
         66:91:8c:0b:88:ad:d9:c7:fc:27:ca:1d:e7:8c:13:7d:bb:f7:
         a8:5d:8d:4a:7d:9a:da:4a:f6:00:bb:23:80:47:99:6c:9c:27:
         59:8b:53:69:93:d6:54:99:0f:f7:cc:61:98:ce:b4:fa:5c:09:
         56:e0:28:e5:d2:3f:94:d9:5c:cb:2d:44:94:ca:eb:4d:f5:ae:
         8d:8b:7d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:32:26 2025 by rpki-client