Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/51f8590f-f6fa-32b5-b9fe-508500c8e1d3.roa
File:                     51f8590f-f6fa-32b5-b9fe-508500c8e1d3.roa (raw, json)
Hash identifier:          1syA7mrfjq8fJolQxW+gwXXentIyi7+iKeRvNh8oow8=
Subject key identifier:   08:70:A4:D8:2C:8D:B6:46:93:75:DD:6B:EE:40:55:BB:06:E1:3E:C9
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584B8BE21DAE58C38490C1D629C0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/51f8590f-f6fa-32b5-b9fe-508500c8e1d3.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     40559
IP address blocks:        69.130.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:1d:ae:58:c3:84:90:c1:d6:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=bb054067-2f8f-44fc-8380-aa2842b840c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:53:0c:92:2a:27:71:28:80:1f:75:e8:2e:
                    b2:fb:23:0a:1b:66:4d:68:b6:3c:ef:14:8f:ba:bc:
                    a9:6a:e3:d9:c0:e6:60:82:bf:ef:ba:90:ae:37:b8:
                    80:c3:09:39:99:11:60:97:89:be:22:7a:88:8d:91:
                    f3:af:91:a0:9a:59:da:ac:b5:fc:ba:ec:c6:b6:44:
                    1f:70:23:49:16:8e:0d:b0:47:38:db:a8:e3:11:58:
                    df:47:a5:84:a6:c6:e3:64:64:e1:d0:6e:8a:c3:be:
                    49:4a:18:80:1f:87:47:7e:c5:90:3b:3c:ab:d6:91:
                    21:de:10:16:22:9b:a3:86:f4:d6:4b:fb:0c:9a:75:
                    5e:60:ac:93:9c:04:38:c4:5c:2b:fe:5c:e3:db:78:
                    d0:eb:70:5f:33:9c:40:ec:24:30:e6:2c:9e:94:da:
                    d5:71:40:95:5d:d9:4a:b5:d1:53:53:bd:d8:6a:4d:
                    08:c4:83:f5:6c:9d:dd:9d:17:55:f4:4e:88:0b:e4:
                    ab:47:b2:90:15:aa:a6:82:04:ff:fe:cd:54:df:73:
                    a7:9e:6d:16:00:b0:6b:65:63:00:17:5d:cc:ee:bd:
                    8a:5f:9f:42:0a:39:aa:0d:65:d6:1f:60:f2:69:96:
                    b3:b1:d5:bd:e9:ce:47:c8:98:58:f1:a5:57:4d:c1:
                    ec:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:70:A4:D8:2C:8D:B6:46:93:75:DD:6B:EE:40:55:BB:06:E1:3E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/51f8590f-f6fa-32b5-b9fe-508500c8e1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.130.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:0d:8c:4c:5f:f8:14:2c:e3:70:98:ea:07:b4:6c:18:a5:c4:
         f7:1c:f3:2f:ad:6d:42:df:00:a4:4a:00:fa:50:18:e9:77:48:
         86:54:8e:41:97:63:83:17:de:ab:46:f7:77:52:69:d9:6c:0f:
         c7:31:36:45:b4:6d:bb:5a:54:b1:08:d8:d2:4b:01:36:ad:fc:
         86:73:27:de:28:38:3a:c5:83:bc:76:06:3b:88:7a:03:c6:f5:
         43:7f:d8:2c:16:0c:00:3d:68:64:0a:07:0a:fa:12:79:48:61:
         b0:1a:45:fe:b1:f7:a6:89:f5:7c:dd:58:31:3c:e8:87:df:0d:
         a9:46:e2:2d:95:b8:7c:02:53:8d:cf:ff:fd:a6:78:11:96:b0:
         1d:1b:0f:08:cc:79:c8:0f:fb:3a:ce:a6:c9:11:35:6d:b0:2e:
         41:48:a6:96:89:e9:99:01:fd:7a:0f:6a:b8:b5:d8:8d:df:68:
         0a:1d:fb:46:be:61:d6:e1:f9:6a:10:fa:84:ed:25:9c:3c:60:
         01:72:3a:6b:5e:86:64:88:11:9f:1a:69:1e:1e:1a:11:88:7b:
         af:5e:18:2c:59:a5:6d:ae:24:2b:2d:de:5e:35:43:f8:2f:0d:
         ba:49:d6:ed:cc:a3:c1:7b:f1:7b:b5:66:92:c6:97:24:6e:9c:
         14:9e:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:31 2025 by rpki-client