Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
File:                     8d86e371-b987-3a40-92a0-b73d73f009c3.roa (raw, json)
Hash identifier:          GSZ1ch6+SFUdIEUqExs+Smllxz/PUWqqXK8d29BvSTg=
Subject key identifier:   EC:F9:52:65:C6:0E:70:AF:10:84:7E:16:6C:B1:EF:57:73:F8:68:CC
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F4328584B0B76A13DC0F638415E016A60
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     394893
IP address blocks:        205.234.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a1:3d:c0:f6:38:41:5e:01:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=56f7d685-f93b-47cc-9a97-8856f2dd9c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:ee:0a:cc:60:fd:b9:ae:3c:15:f6:6f:c6:
                    f6:35:dc:3b:75:15:34:9e:e3:9d:0b:20:90:77:87:
                    6e:a8:54:ca:40:16:e2:13:81:c6:70:d5:12:1a:be:
                    21:85:1e:ff:b5:2f:b5:7e:7c:44:5f:b5:2c:5b:ed:
                    1e:89:f1:60:40:6f:fd:c9:26:a4:a8:3d:98:5d:9a:
                    66:2f:1b:0f:de:28:3f:17:74:47:42:15:74:c7:86:
                    94:41:44:75:51:3b:07:19:c1:e9:8e:ed:1e:54:54:
                    51:76:c3:da:59:36:47:c0:b2:cb:82:80:5c:57:99:
                    c2:b6:ff:93:7c:c7:78:c2:f1:67:8c:e0:12:cc:da:
                    85:e5:a4:82:5f:3f:4b:d0:34:80:fa:84:bb:fb:1c:
                    94:16:62:bf:b6:4c:93:9a:f8:92:a5:a0:c5:69:02:
                    f3:c8:17:85:77:b5:c8:9f:7a:de:df:bb:85:8d:b3:
                    a9:2f:4b:8b:be:02:a8:d6:cb:9b:7b:7e:31:9a:af:
                    98:10:f3:13:ed:4f:5f:8b:e6:7c:a0:21:16:71:6d:
                    3c:14:e9:35:8a:30:d3:ed:5a:e5:c1:cf:a3:42:9d:
                    d2:c1:f0:ed:86:93:36:03:99:8f:94:2d:e7:14:bb:
                    86:d9:8e:98:a7:59:71:8f:31:e3:2e:63:ca:dc:e4:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F9:52:65:C6:0E:70:AF:10:84:7E:16:6C:B1:EF:57:73:F8:68:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:55:76:fd:57:fa:32:91:76:59:22:6a:67:cf:6b:36:95:5e:
         2f:a5:e4:40:d4:4b:f2:45:19:8d:c1:20:23:4a:8e:41:b4:4a:
         e5:fb:b5:a3:45:80:7c:89:18:e7:4d:c1:4f:d3:bf:f7:34:ce:
         db:5a:42:1a:4a:9f:70:de:49:5f:c4:64:1c:2c:42:c4:3e:6b:
         54:85:6c:88:e4:75:93:84:b5:33:79:19:7e:e8:97:03:37:8e:
         42:5f:9a:e8:f3:66:81:4f:59:9f:cd:69:05:a6:7f:b6:af:92:
         20:9a:49:33:c9:58:14:58:ca:bf:10:a1:18:b6:4d:b9:b0:f8:
         57:43:e8:4c:13:ca:ff:e4:2f:f3:77:0a:67:ba:13:8b:c1:f3:
         96:96:55:b2:2e:8f:b5:b2:20:d4:cc:57:51:0e:cd:e9:92:10:
         56:3d:e7:6f:c4:f4:c1:65:d1:8e:19:51:a2:7d:ae:21:5b:0c:
         60:1e:c7:6c:3a:de:83:93:ea:2e:a0:dc:17:e2:b6:17:da:0c:
         d0:1a:2e:52:7b:cd:c2:43:25:27:91:e2:44:3d:cb:aa:c1:e9:
         17:d5:8a:72:2e:ab:1b:62:85:e0:2f:ac:21:ae:28:4c:fe:6e:
         7f:9c:c7:35:85:9c:53:fd:53:60:e8:0d:14:30:9b:bd:89:86:
         6d:e1:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:28:09 2025 by rpki-client