Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa
File:                     e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa (raw, json)
Hash identifier:          Lm6O/aRttFKBspTSoJWr96vkF/G4l+wn8DdOJMMneDI=
Subject key identifier:   E6:71:EE:57:B7:9E:C3:DD:FA:AB:39:96:A1:4A:36:27:52:1B:DA:D2
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584B8BE21182EA56A6AA146B5680
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     4181
IP address blocks:        24.40.80.0/20 maxlen: 24
                          24.49.96.0/20 maxlen: 24
                          24.49.128.0/20 maxlen: 24
                          24.49.160.0/20 maxlen: 24
                          24.52.0.0/21 maxlen: 24
                          24.52.8.0/22 maxlen: 24
                          24.52.18.0/23 maxlen: 24
                          24.52.20.0/22 maxlen: 24
                          24.52.32.0/22 maxlen: 24
                          24.54.128.0/20 maxlen: 24
                          24.54.144.0/22 maxlen: 24
                          24.54.148.0/23 maxlen: 24
                          24.54.160.0/22 maxlen: 24
                          24.54.164.0/23 maxlen: 24
                          24.54.168.0/22 maxlen: 24
                          24.54.180.0/22 maxlen: 24
                          24.54.184.0/21 maxlen: 24
                          24.56.160.0/22 maxlen: 24
                          24.56.170.0/23 maxlen: 24
                          24.56.176.0/22 maxlen: 24
                          24.56.180.0/23 maxlen: 24
                          24.56.188.0/23 maxlen: 24
                          24.75.192.0/21 maxlen: 24
                          24.236.32.0/21 maxlen: 24
                          24.236.52.0/22 maxlen: 24
                          50.21.192.0/20 maxlen: 24
                          64.17.68.0/22 maxlen: 24
                          64.17.72.0/23 maxlen: 24
                          64.17.76.0/22 maxlen: 24
                          64.17.80.0/20 maxlen: 24
                          67.217.8.0/21 maxlen: 24
                          67.217.16.0/23 maxlen: 24
                          74.211.0.0/18 maxlen: 24
                          74.211.64.0/19 maxlen: 24
                          208.117.112.0/20 maxlen: 24
                          209.169.196.0/23 maxlen: 24
                          209.169.202.0/23 maxlen: 24
                          209.169.204.0/22 maxlen: 24
                          209.169.216.0/23 maxlen: 24
                          209.169.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:11:82:ea:56:a6:aa:14:6b:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=3ff10e77-d690-46c8-bdc2-111fdf42e428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:6b:00:f8:e5:97:bf:7d:e6:b1:6b:37:d7:
                    9f:96:0a:f8:b9:5d:34:bc:a7:df:8f:9b:c9:12:39:
                    09:12:bd:cf:3d:c2:31:0f:dd:df:9b:98:c5:e8:06:
                    af:95:4a:34:9e:03:06:28:cb:53:7b:16:46:5f:33:
                    0a:36:ac:c8:2c:c9:9a:a3:21:aa:05:9b:15:72:3a:
                    39:66:f4:e7:0f:b0:c9:d0:07:0c:a5:6a:6b:42:44:
                    36:ed:c5:8a:55:48:5c:05:52:5f:4f:b2:1d:ce:06:
                    4e:5b:35:87:59:f7:11:ff:ce:31:f3:19:b8:2b:3d:
                    3c:84:ca:3c:96:3c:2a:e7:7c:c5:c6:df:87:fa:8a:
                    d1:c1:86:3f:9b:69:ee:64:3b:66:f5:5e:a1:2d:42:
                    e5:64:cf:01:c0:5d:1c:b2:8c:35:59:22:91:88:34:
                    4b:f2:4b:38:32:8b:22:4a:c6:a0:c0:05:7c:0e:6f:
                    c4:e2:da:dc:f5:87:89:e2:82:bc:94:94:12:67:92:
                    39:a7:19:d7:4b:6c:bc:aa:a1:32:a7:04:60:59:aa:
                    12:29:7d:62:6a:d8:72:cb:b6:a2:50:02:6a:dc:52:
                    98:e0:53:91:e4:dd:22:e4:da:93:0f:fb:22:a3:73:
                    39:fa:f6:4d:57:10:90:b5:fd:98:d9:24:62:db:5c:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:71:EE:57:B7:9E:C3:DD:FA:AB:39:96:A1:4A:36:27:52:1B:DA:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.40.80.0/20
                  24.49.96.0/20
                  24.49.128.0/20
                  24.49.160.0/20
                  24.52.0.0-24.52.11.255
                  24.52.18.0-24.52.23.255
                  24.52.32.0/22
                  24.54.128.0-24.54.149.255
                  24.54.160.0-24.54.165.255
                  24.54.168.0/22
                  24.54.180.0-24.54.191.255
                  24.56.160.0/22
                  24.56.170.0/23
                  24.56.176.0-24.56.181.255
                  24.56.188.0/23
                  24.75.192.0/21
                  24.236.32.0/21
                  24.236.52.0/22
                  50.21.192.0/20
                  64.17.68.0-64.17.73.255
                  64.17.76.0-64.17.95.255
                  67.217.8.0-67.217.17.255
                  74.211.0.0-74.211.95.255
                  208.117.112.0/20
                  209.169.196.0/23
                  209.169.202.0-209.169.207.255
                  209.169.216.0/23
                  209.169.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:be:76:0d:60:e6:ac:c1:2b:cd:8b:7a:c1:cb:94:2e:d8:91:
         22:a9:2a:c2:34:a3:c5:36:6d:fc:4d:f9:d1:d1:25:24:a2:68:
         db:80:18:f8:ea:86:62:26:0c:46:aa:23:35:c0:d0:51:78:9b:
         ed:08:a8:bc:9a:bc:a8:34:9a:4d:c3:62:d0:f2:cf:b7:88:f4:
         9b:f5:56:a8:d9:ec:e4:40:bc:91:17:dc:2f:3d:4c:de:23:1f:
         59:e5:2f:b3:2b:84:69:a5:20:fe:a0:80:89:80:64:33:fa:91:
         c7:63:7a:fb:87:7b:c3:ec:a2:42:71:d5:b6:9c:a8:e6:72:7e:
         b9:a0:3a:c7:8c:93:5e:3e:38:e1:05:85:4d:86:14:71:06:18:
         48:e4:e7:7d:57:00:28:d0:01:c2:da:12:c8:85:a1:9b:24:d0:
         98:35:30:8d:4b:00:ce:d7:18:6c:d9:5c:b1:8d:e2:40:e7:ed:
         5a:68:63:2e:43:4b:84:de:5d:a2:ed:e4:e5:80:55:99:35:d2:
         8e:e0:35:42:07:a3:0d:8d:c8:30:a7:9a:66:0e:c9:87:f8:1c:
         6f:0e:c9:1a:4a:b3:b4:b3:22:10:93:a3:e5:99:9e:d9:a4:23:
         86:b5:55:ea:da:73:2d:af:bd:ef:2b:68:e9:a9:d4:be:e2:af:
         48:2a:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:21 2025 by rpki-client