Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d42e19f3-bd5c-3b9c-927a-e69d8c299fee.roa
File:                     d42e19f3-bd5c-3b9c-927a-e69d8c299fee.roa (raw, json)
Hash identifier:          IJ0DACyOQaz4bcfI8MzDO3/nxZk1Br8+Q3a76OrFhqY=
Subject key identifier:   44:37:33:80:3B:76:7C:0D:9D:D7:6C:2B:23:46:0B:DA:70:FD:94:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD587D0DA927CED0295980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d42e19f3-bd5c-3b9c-927a-e69d8c299fee.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        69.246.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:58:7d:0d:a9:27:ce:d0:29:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=5025f28f-2599-4e07-a2ff-ac2a8cb03e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:64:47:fb:90:7b:ee:d3:b0:26:3f:8a:3c:
                    55:b1:a5:09:ea:76:28:04:06:f4:72:db:e1:de:0f:
                    59:62:b8:da:ad:fc:9f:dd:a3:9c:f2:34:6a:21:1d:
                    a7:cf:e7:23:42:ff:ad:a0:0c:83:cd:8e:ac:34:59:
                    99:4f:73:9b:aa:ca:ef:42:c2:89:b6:61:89:ca:4c:
                    56:2b:7c:52:50:85:a2:4b:b5:86:c1:b8:1b:5e:d2:
                    3c:e8:6f:6f:08:06:0f:27:34:98:43:8d:02:b6:dd:
                    11:d7:c1:34:5a:06:14:a1:c2:71:4f:6d:a7:4c:0f:
                    55:b7:4b:38:ae:92:be:d6:b4:12:c8:e1:c4:b4:5c:
                    3f:73:1a:30:a2:7d:41:fb:e9:26:89:f6:06:0a:2b:
                    80:c6:4d:f6:20:35:ff:a7:75:f6:cf:90:36:74:ac:
                    3a:c1:10:5a:d0:00:9d:43:b8:47:98:6e:66:bf:24:
                    63:f0:2a:01:a4:65:73:23:b9:47:44:30:a4:7c:c8:
                    3e:d4:00:bf:e2:81:fa:19:51:a8:c5:ed:93:c1:ad:
                    94:60:bf:5e:4c:9f:f5:78:99:fa:7f:31:c2:1a:8c:
                    be:5f:cb:1b:78:7d:7c:6a:a0:9f:41:49:bc:86:b1:
                    20:70:a4:48:dc:32:5e:0e:33:a4:41:34:6d:b3:09:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:37:33:80:3B:76:7C:0D:9D:D7:6C:2B:23:46:0B:DA:70:FD:94:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d42e19f3-bd5c-3b9c-927a-e69d8c299fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:b4:d0:70:69:c4:69:b9:f7:cd:90:53:aa:af:05:a5:ad:
         b5:91:87:58:09:5f:f8:d1:e5:63:34:08:85:07:87:ac:a3:6f:
         52:2b:3f:47:18:b0:da:63:ab:ae:33:c2:e5:13:57:c4:13:6f:
         3e:a8:10:3e:d4:e1:d2:72:e8:3d:12:e7:85:4f:91:cc:7b:31:
         c3:a4:38:ed:54:7a:11:0d:63:ce:b2:a9:50:bd:05:24:ad:f2:
         b7:26:65:25:17:c3:8d:77:3b:51:0d:4f:8c:da:a0:14:5d:8f:
         fd:0d:c9:50:ec:d7:53:f6:f5:87:c1:f5:0f:ea:6e:7f:ed:e5:
         49:37:2b:7b:53:8a:f4:88:0b:95:4f:91:7c:dd:a2:1b:50:33:
         ea:5a:aa:2a:9c:b7:70:81:1b:6d:56:d2:de:bc:33:0b:96:cb:
         c9:b0:78:72:0e:11:b6:09:5e:97:8b:45:b4:d3:35:87:37:b0:
         67:97:c4:7e:26:26:04:64:ea:60:90:7b:e0:9e:00:67:c3:43:
         72:f7:06:6a:b3:fb:0e:9b:aa:db:93:1e:85:91:ac:e2:53:96:
         91:ca:b3:29:83:aa:f9:75:15:a3:2d:cb:cd:ae:a0:4d:df:ef:
         02:a3:01:53:2d:46:d8:93:a3:e7:5e:96:93:98:cc:f3:07:79:
         2a:4a:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:12:10 2025 by rpki-client