Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/dd13d1dc-4cb4-3565-9765-680c241c28a5.roa
File:                     dd13d1dc-4cb4-3565-9765-680c241c28a5.roa (raw, json)
Hash identifier:          BRQyDVHIfjH6HLeIRZeT0YXVyVFV3chYFb09qLddf2I=
Subject key identifier:   D8:70:FB:E4:7F:D5:15:DF:10:6E:24:B6:2E:10:F9:17:2E:3D:82:D7
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F4328584B8A7CD635BFE53A6ADC89D510
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/dd13d1dc-4cb4-3565-9765-680c241c28a5.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     400400
IP address blocks:        205.234.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:d6:35:bf:e5:3a:6a:dc:89:d5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=d28a758d-0382-4746-972f-9dfb8f62ec2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:79:ba:76:f4:9e:20:5d:70:be:98:e5:fe:
                    d2:31:1c:e0:a8:98:03:3a:c9:20:a1:d4:f5:ff:a2:
                    04:98:50:03:d1:0a:eb:a1:6a:7c:08:c8:e6:b1:a5:
                    00:50:e5:d1:54:87:25:da:25:d1:c9:ac:e2:b1:91:
                    78:33:6c:0e:39:5c:a2:08:fb:e5:b1:fb:6e:f4:72:
                    05:7d:67:57:ef:28:b4:77:3c:c7:6a:34:80:fe:22:
                    77:23:65:e9:89:bf:54:03:ea:aa:0b:dc:18:42:0a:
                    ec:a9:7c:fe:ec:d7:f8:b4:e7:4b:f9:3d:69:1b:a8:
                    a0:36:da:e8:fc:8b:a5:5c:e4:96:eb:21:17:5c:03:
                    a3:b1:fa:f6:53:02:4a:99:d0:2b:7f:95:23:70:f9:
                    9e:fc:49:31:e0:da:b7:ab:46:ed:5f:04:e9:79:ee:
                    d3:e8:a7:53:7b:c6:46:e9:de:f3:09:6d:e5:b8:20:
                    1f:2c:fc:42:d4:38:35:ea:7b:fd:04:e4:aa:ba:94:
                    9b:36:ff:47:40:bc:fe:3f:da:2e:00:5a:17:b6:71:
                    51:fd:fb:9b:51:d8:44:b2:68:ad:9f:84:ed:c0:93:
                    66:38:3f:cd:53:93:16:c4:e4:22:6b:30:e1:92:f9:
                    62:a2:e0:79:3f:91:08:1e:f8:a9:d9:8c:84:fd:ad:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:70:FB:E4:7F:D5:15:DF:10:6E:24:B6:2E:10:F9:17:2E:3D:82:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/dd13d1dc-4cb4-3565-9765-680c241c28a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:7a:21:ec:a9:81:4d:a3:4b:c4:5c:dd:92:a0:8f:c7:0d:b2:
         9d:ad:55:eb:87:12:83:9e:3a:ba:a7:36:3c:33:dd:11:fd:d6:
         7f:82:3e:5c:3c:8c:30:e2:e3:1e:b2:b6:0f:66:52:8b:62:0e:
         d2:08:fe:d9:88:71:c2:ca:73:a9:61:4e:d4:49:c8:91:b7:66:
         a8:ec:19:46:c1:aa:ca:c0:f4:39:14:4a:f6:98:55:18:d4:0f:
         8a:4b:bb:0a:97:67:60:ce:d5:d2:92:f3:fe:3e:86:df:44:04:
         ac:db:30:88:22:b4:97:05:01:ea:04:fc:98:d6:7c:91:5b:35:
         1b:5a:e2:3b:0c:52:01:6e:4f:47:25:45:60:33:51:47:a5:b0:
         03:d1:01:a6:d8:48:1a:64:8e:63:40:d7:86:e2:e2:7c:1d:b2:
         71:dc:df:49:33:15:31:c1:18:fe:be:93:5e:1a:d0:31:18:f4:
         0e:4b:c8:6c:ba:51:39:1d:f4:90:fa:77:00:cd:c7:eb:e7:88:
         c8:65:00:b4:43:15:bd:10:62:a9:32:f9:53:7e:60:38:0a:57:
         b8:45:43:4c:8b:6f:64:eb:89:88:a8:35:ca:cd:82:ae:23:66:
         9e:6f:89:52:4e:fb:78:8c:0c:92:93:a2:b6:ee:38:6d:6b:b3:
         cd:01:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:28:02 2025 by rpki-client