Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/b46ba7a9-4be2-32f5-8684-16ddac68ecc9.roa
File:                     b46ba7a9-4be2-32f5-8684-16ddac68ecc9.roa (raw, json)
Hash identifier:          Nrp8ilDz7BL2TZcwr9G8n8tpqCcCJK5uzOC3bWJOdvc=
Subject key identifier:   2C:93:6E:ED:CF:1E:40:4F:54:A8:C7:BC:F0:73:6B:40:DA:C6:33:7E
Certificate issuer:       /CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8
Certificate serial:       010D0C9F4328584B8508ADE233E9009D1CE9ACF0
Authority key identifier: 1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/b46ba7a9-4be2-32f5-8684-16ddac68ecc9.roa
Signing time:             Tue 14 Oct 2025 14:07:42 +0000
ROA not before:           Tue 14 Oct 2025 14:07:42 +0000
ROA not after:            Mon 12 Jan 2026 15:07:42 +0000
asID:                     393668
IP address blocks:        131.143.235.0/24 maxlen: 24
                          192.65.0.0/24 maxlen: 24
                          2620:12f:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:08:ad:e2:33:e9:00:9d:1c:e9:ac:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8
        Validity
            Not Before: Oct 14 14:07:42 2025 GMT
            Not After : Jan 12 15:07:42 2026 GMT
        Subject: CN=6787fc2c-e4a4-4921-babe-393e86a58c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:c4:c6:1f:01:75:e3:48:f5:8e:22:88:6d:
                    6f:1d:8e:28:82:2b:b9:00:da:9e:39:cd:ff:06:f9:
                    c1:c0:9c:0d:7b:55:a2:c1:47:fb:31:df:c7:f5:9d:
                    dc:f2:f0:36:9e:c8:9d:f7:14:1d:3d:f5:97:ab:17:
                    31:a8:66:03:ae:41:f2:0c:ae:b0:6b:d4:eb:48:e9:
                    1a:4e:22:c4:4c:95:d9:a9:5a:2b:1e:26:ac:1b:e0:
                    7b:73:d7:40:64:82:34:58:91:23:78:46:d4:af:cc:
                    c0:1b:93:7f:4d:ef:85:43:3f:37:1e:21:57:cc:96:
                    79:47:ec:ab:43:79:bb:74:52:c0:3e:1d:39:cf:5a:
                    30:19:81:5d:f8:5f:f8:45:96:80:2e:dd:8a:ba:78:
                    40:cb:2d:b9:5d:ae:93:57:e0:01:12:e6:e3:4b:78:
                    01:25:57:82:89:84:8e:19:93:30:c4:e4:77:d8:7a:
                    68:d1:f3:c6:02:68:c1:09:69:fc:e9:a8:d2:3e:98:
                    01:27:7f:68:c3:c0:ee:8c:2e:e3:96:a6:ee:cb:6a:
                    df:32:1e:6a:52:8b:62:f4:19:b3:13:37:1b:98:59:
                    30:97:64:bd:37:bf:1a:90:94:13:14:64:6c:81:5d:
                    f6:0e:53:31:51:a3:16:3b:00:17:80:b5:ee:9c:3b:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:6E:ED:CF:1E:40:4F:54:A8:C7:BC:F0:73:6B:40:DA:C6:33:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/b46ba7a9-4be2-32f5-8684-16ddac68ecc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.crl

            X509v3 Authority Key Identifier:
                keyid:1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.235.0/24
                  192.65.0.0/24
                IPv6:
                  2620:12f:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a3:ea:45:52:64:1e:b9:db:f6:08:97:53:a4:44:b2:a6:ff:
         00:b6:e7:c5:66:94:b1:be:8a:db:90:42:e3:b8:fc:67:33:7b:
         3c:3f:f1:82:10:bb:35:ec:fd:28:25:4f:36:3d:19:71:6a:d9:
         74:fa:a4:4d:2b:e8:e7:9e:a3:43:f1:ee:28:48:d8:de:6b:30:
         3e:b2:17:6e:9d:de:60:6a:91:e0:8a:15:35:21:ab:ae:a6:74:
         7c:4c:6c:7e:11:04:e3:87:ec:15:32:8a:ee:00:75:65:22:3c:
         11:09:63:c2:49:46:1d:79:93:24:75:98:32:d8:cd:25:65:bf:
         70:b5:79:fd:a1:cf:c0:31:e6:58:db:86:3e:05:d8:5c:03:36:
         27:aa:39:fc:3e:16:b9:e4:33:0b:ec:fd:54:79:99:cb:67:bf:
         4d:85:e8:dc:63:fc:eb:01:93:c3:ac:de:9d:f0:ed:37:22:0f:
         76:82:6b:20:4c:e7:37:ee:16:80:bc:e5:95:02:b0:40:c5:d9:
         3f:ab:dd:61:41:ff:20:fc:94:c1:99:a8:c0:8f:a6:42:a4:0a:
         19:d0:1c:dc:e8:35:81:e9:4d:5b:13:c1:37:bd:d2:7e:78:d1:
         5a:5d:82:2e:0b:b6:91:e5:30:cd:0e:f1:ea:e1:71:50:bb:c2:
         1b:ad:ef:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:43 2025 by rpki-client