Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd3a86b6-5970-3ca6-b83a-84003c526441.roa
File:                     cd3a86b6-5970-3ca6-b83a-84003c526441.roa (raw, json)
Hash identifier:          Ke/l1TG2I2Nukg3E2fGArgEfZf0rTU98CAOc06lM9zg=
Subject key identifier:   8B:83:94:4C:15:67:7B:95:3D:C9:07:95:A0:CF:E2:67:6F:E0:8E:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD0F6080CDEA57041BB280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd3a86b6-5970-3ca6-b83a-84003c526441.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        69.246.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:0f:60:80:cd:ea:57:04:1b:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0f06f7ce-b520-43dd-a663-807e81c7db5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:bf:3f:52:2c:20:c5:b2:b6:2e:d0:e3:6d:
                    b6:cc:03:d8:14:b4:49:e8:3d:a1:20:37:93:9f:39:
                    b9:70:54:f7:0c:84:77:39:03:8b:8d:dc:af:3c:3c:
                    7f:c2:db:34:2a:97:09:a6:43:73:0d:93:d6:03:3f:
                    90:ba:90:93:e6:6e:27:47:5b:9c:f5:a2:aa:56:10:
                    ef:94:cc:a0:c9:2d:0e:45:3b:80:79:14:39:da:b0:
                    c5:9d:f6:71:23:7d:be:a6:28:5e:4b:26:3d:64:84:
                    31:c0:74:51:cc:c9:35:83:f4:69:26:a9:22:7f:71:
                    4f:81:70:0e:22:a7:c4:81:c0:87:8b:89:73:47:b8:
                    42:56:e1:e7:d5:3c:1c:62:73:00:81:aa:6b:7a:8c:
                    36:d4:48:a0:63:dd:3d:66:d5:d0:7d:fb:61:5e:55:
                    5d:87:3f:c5:52:be:af:11:b4:77:bf:3a:bc:7e:91:
                    9f:1a:5a:42:45:e6:57:95:15:9f:d1:8e:8e:4b:8f:
                    be:71:5c:c7:f9:c4:62:a2:9c:1e:84:6b:6a:8b:ff:
                    ee:1e:68:9a:ef:98:37:d7:23:0a:43:80:1f:12:a8:
                    85:0a:1c:5d:7b:e6:be:eb:79:8a:c0:fc:a2:f2:46:
                    78:dd:29:26:5c:04:52:db:4a:ff:fa:ce:e4:2c:75:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:83:94:4C:15:67:7B:95:3D:C9:07:95:A0:CF:E2:67:6F:E0:8E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd3a86b6-5970-3ca6-b83a-84003c526441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:93:08:58:78:0e:66:90:41:3a:d7:f5:67:fc:ff:28:98:e4:
         79:af:40:28:70:09:d7:c2:e9:d3:4a:3a:2a:32:6d:3c:4b:9b:
         9e:8b:a9:c1:dc:7b:6f:85:0c:79:c3:d6:80:f0:d6:ea:77:12:
         d6:17:18:1a:fb:d4:8b:fc:cb:6c:e9:03:7d:cd:d2:21:c8:bf:
         1e:6d:df:70:ed:89:58:ad:73:6d:aa:cf:c5:b2:bb:e8:a0:33:
         10:6c:c1:1c:13:41:87:63:91:53:ff:7f:60:58:b2:ef:77:9b:
         7f:b4:dc:df:a7:9c:88:e1:33:13:d0:8d:1c:6f:1b:cc:a9:bf:
         aa:ff:e3:93:48:ae:65:36:b8:a9:fa:8f:1a:35:6f:29:0e:57:
         24:c7:b4:09:cf:a7:0f:6c:c5:2f:1b:2c:0a:c8:e0:69:f1:1a:
         7e:32:80:29:35:31:5c:63:08:2a:ee:cf:04:43:25:cf:9c:46:
         61:5e:a3:bb:4c:4a:5e:74:55:5a:36:58:28:ff:7d:49:4e:2b:
         9b:fc:5a:09:74:f2:69:08:68:ee:28:b8:c3:5d:45:9f:53:32:
         63:42:39:3f:aa:75:ff:00:01:20:1b:a1:8d:1c:5b:61:83:05:
         ca:5f:37:f6:b7:9c:3b:ba:7d:09:6e:aa:3b:63:1d:eb:af:16:
         10:a6:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:10 2025 by rpki-client