Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/204d99e3-e8c9-3495-86c1-3ef70bb7718a.roa
File:                     204d99e3-e8c9-3495-86c1-3ef70bb7718a.roa (raw, json)
Hash identifier:          HJkg2/CuxtqShBWtevISU0ZRoldPOLRLP2tJonGo9tM=
Subject key identifier:   7C:0F:30:B7:27:CC:89:3B:5E:BE:42:9E:AD:25:A6:04:CE:D0:34:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB84C2E5EF3F02AB3B7EF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/204d99e3-e8c9-3495-86c1-3ef70bb7718a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        67.167.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:4c:2e:5e:f3:f0:2a:b3:b7:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=ee1ec134-513a-4248-8ea6-e76fe645c85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:a8:c3:a7:12:9a:55:84:fc:8f:d3:5b:dc:
                    01:16:2c:db:8e:ec:8a:58:f8:39:af:62:e8:9d:35:
                    bb:ab:91:12:ce:4f:54:b9:68:71:b5:60:50:eb:2c:
                    ef:f2:a1:10:a9:56:8a:90:12:ed:aa:6a:b4:40:90:
                    57:7b:1f:dd:16:bd:f2:15:b6:3f:50:da:4f:8b:d9:
                    69:b5:be:4e:b3:45:dc:a1:7b:7f:f7:35:71:6b:43:
                    35:12:8c:01:2d:7f:64:d6:b4:c1:3e:7c:19:46:a7:
                    00:74:5a:18:95:86:35:fe:95:57:43:ce:8c:c4:92:
                    5f:8d:f9:7c:d1:f2:35:dc:9f:7c:66:9f:9d:6f:19:
                    5f:1f:cc:4f:8a:6f:9d:a5:61:da:a0:e9:65:33:c8:
                    de:a4:c6:20:e5:1a:64:b1:54:37:21:4d:a4:c1:8e:
                    55:27:e5:68:69:36:b2:9c:fc:39:c0:fe:c9:7a:b8:
                    21:a4:6a:2c:17:25:d8:49:f9:e2:7b:b5:e5:28:f4:
                    53:ab:68:60:51:45:1f:c8:3a:98:e4:d9:0f:22:33:
                    78:d5:30:51:ae:1d:76:eb:b3:98:e7:95:3b:bd:74:
                    c0:85:cf:9f:c6:16:1d:90:bc:b0:dc:74:fd:4d:34:
                    b0:6f:88:37:be:22:9c:25:d1:9f:58:46:52:7c:6c:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0F:30:B7:27:CC:89:3B:5E:BE:42:9E:AD:25:A6:04:CE:D0:34:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/204d99e3-e8c9-3495-86c1-3ef70bb7718a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.167.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:93:0e:8b:1a:ce:f2:49:0c:0b:fe:05:53:4b:46:d4:3d:2e:
         59:47:a1:60:0d:1f:02:34:43:37:18:64:0c:09:a5:33:d8:c1:
         22:a0:b1:f5:2b:04:2a:4e:54:bd:e4:74:1a:0b:dd:a9:7c:25:
         ac:b7:0c:33:1a:ad:4d:c6:1e:ba:bf:46:e9:87:de:e9:0d:a0:
         ec:65:42:c4:01:11:37:18:e9:23:71:8c:59:ff:c6:92:e3:eb:
         bd:a6:f1:9e:93:91:a7:36:25:5a:fe:89:e8:88:96:b5:b0:b9:
         bc:05:e3:7d:c0:7b:03:83:af:d2:06:91:a6:07:d0:66:be:d1:
         76:22:55:26:6f:e8:8b:13:cc:3a:03:f6:7b:28:28:e3:29:89:
         c2:07:d7:e7:9b:6b:94:02:94:66:1d:a9:fe:d0:e5:71:0f:c7:
         8e:6f:20:03:45:d0:56:d1:28:de:44:a8:fa:ac:39:a9:35:e1:
         3a:4f:c9:4a:e5:c6:fe:96:b8:be:f0:fb:63:20:d1:74:8e:1e:
         59:3f:a5:e3:61:52:e0:81:de:3d:fc:f1:a9:c2:a9:87:62:5f:
         e2:aa:ea:7e:79:e4:f0:e0:19:89:7d:7f:17:65:e0:0a:33:e9:
         64:08:77:90:9e:12:0e:dc:cc:87:50:a1:70:2d:e1:16:ae:c1:
         6e:3d:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:47:55 2025 by rpki-client