Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
File:                     065ac7bb-bf21-3a5a-847d-e97aa48db175.roa (raw, json)
Hash identifier:          kq2+nDXDcw5zOxcfmTXnKZRVBXabH8oOv0TEPGWbTck=
Subject key identifier:   A0:68:9F:83:E6:FA:DE:75:F9:E0:25:E6:AC:7A:65:E4:74:53:B7:DF
Certificate issuer:       /CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
Certificate serial:       010D0C9F4328584B89175F8A46493EF42603C690
Authority key identifier: 46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     13427
IP address blocks:        137.83.103.0/24 maxlen: 24
                          173.243.64.0/20 maxlen: 20
                          192.96.17.0/24 maxlen: 24
                          192.156.255.0/24 maxlen: 24
                          198.153.60.0/22 maxlen: 22
                          2604:8d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:5f:8a:46:49:3e:f4:26:03:c6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bfbc46f-3c48-4406-ba8c-a423b906a63e
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=72846725-79d1-4f1f-ae1e-3df36429c593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:8c:e2:60:37:12:5f:f8:85:23:19:03:5c:
                    09:c7:55:11:60:25:13:e2:8b:f1:b4:73:46:27:d8:
                    cc:d3:93:f3:a0:ae:ad:96:e0:30:d0:81:d0:4f:1d:
                    2a:5b:fc:fd:e1:73:e9:ea:ec:f4:55:7b:9d:a0:48:
                    d2:01:cc:4d:20:b7:b3:86:26:37:4f:6e:81:b0:9e:
                    ba:4e:ab:1e:50:fc:d0:02:50:d9:12:21:92:77:f3:
                    32:14:00:4e:9f:ab:de:44:4f:e3:5c:c5:54:22:bf:
                    46:3b:b9:a7:f1:68:c2:71:ec:c2:a0:12:4c:c7:58:
                    dc:3e:c5:fa:fe:df:31:70:6e:a5:c9:ee:a8:b5:03:
                    d4:d5:f4:63:e6:82:0d:b6:7f:b9:27:33:e1:4c:2d:
                    f6:dd:dc:a6:69:28:ff:20:8b:f0:41:00:2f:c4:c5:
                    f6:21:bb:bc:ec:16:8a:65:ee:12:b9:c6:81:dc:4c:
                    21:6e:47:83:5c:af:73:85:5e:13:35:87:53:7d:93:
                    16:30:b7:74:86:99:99:e9:97:67:94:7f:ba:e1:8d:
                    25:76:ed:2b:ec:9e:f1:b7:3b:14:91:e7:14:70:f0:
                    e2:3f:10:b3:26:6c:58:42:c0:d2:4c:a5:b8:e1:74:
                    c0:8f:58:a7:e6:e7:c0:e6:b6:1d:e1:c2:ac:1f:31:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:68:9F:83:E6:FA:DE:75:F9:E0:25:E6:AC:7A:65:E4:74:53:B7:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/065ac7bb-bf21-3a5a-847d-e97aa48db175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e/1bfbc46f-3c48-4406-ba8c-a423b906a63e.crl

            X509v3 Authority Key Identifier:
                keyid:46:5D:03:13:67:9C:B3:F8:AC:69:42:A1:7C:9B:B7:86:4A:DB:F6:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bfbc46f-3c48-4406-ba8c-a423b906a63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.103.0/24
                  173.243.64.0/20
                  192.96.17.0/24
                  192.156.255.0/24
                  198.153.60.0/22
                IPv6:
                  2604:8d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:88:8e:c6:e0:d2:82:5d:c4:be:13:55:b3:f1:bc:43:da:c4:
         94:48:a3:6e:e8:a2:61:ee:b7:e0:30:e5:d0:0f:97:c7:82:87:
         79:29:d0:dc:f3:eb:7b:3c:00:45:85:5e:31:2a:82:8b:67:13:
         4e:0d:c3:5c:06:e8:24:30:cb:bb:bb:d3:f0:b8:0b:cc:e9:2c:
         c8:c4:e8:99:6a:c9:2f:6a:32:49:b1:a3:87:f1:60:ef:89:47:
         74:10:4b:47:03:ec:68:00:f0:70:2e:10:0b:9f:ac:51:ea:45:
         e3:64:5c:8c:fa:1e:ef:a2:45:33:4e:34:e9:f0:54:1c:e9:76:
         c4:f5:c6:33:d7:b5:c3:d5:9a:63:2d:84:6c:a1:f2:52:41:bb:
         08:11:0d:88:26:2a:82:9c:b6:bc:7e:58:5b:72:a6:62:b1:61:
         a7:4d:e8:74:7a:eb:18:28:bb:47:d2:21:6c:b9:57:2e:80:e7:
         50:b1:bc:c2:d7:d3:33:98:23:0c:a4:09:89:30:f1:73:c1:a6:
         42:74:c2:d4:06:95:2f:a7:8f:95:64:05:fa:2b:c1:fd:45:5f:
         7e:6c:dd:3d:d4:90:a7:ac:67:b1:04:0f:ac:e6:5a:20:6f:b0:
         67:8a:e5:5e:01:7e:aa:bf:cb:17:d6:68:a1:6f:c8:b4:30:81:
         5f:50:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:08 2025 by rpki-client