Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c905560f-e46c-3a04-8eec-93cebdd49469.roa
File:                     c905560f-e46c-3a04-8eec-93cebdd49469.roa (raw, json)
Hash identifier:          NvcKG0Rss1gOH0kcE4mU8D1APT8mHuLj+iK7TxdClJc=
Subject key identifier:   B6:0C:EE:B0:41:FA:E9:33:44:E5:E7:02:30:07:75:5C:7E:04:F9:DF
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584B80B75E656EED73F85F4B3700
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c905560f-e46c-3a04-8eec-93cebdd49469.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     16509
IP address blocks:        206.225.201.0/24 maxlen: 24
                          206.225.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:5e:65:6e:ed:73:f8:5f:4b:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=a9c49901-e103-4280-92c7-361e03d2cadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ca:32:3d:40:81:25:dd:1e:9e:8f:e5:ba:24:
                    11:f3:f5:cd:f8:7b:54:79:a8:4a:da:bf:93:cb:13:
                    72:20:16:e9:ee:79:50:99:44:39:86:7c:af:c3:06:
                    80:a0:92:53:27:f3:cc:8e:c4:32:f3:60:92:a4:60:
                    5d:77:74:5d:d7:f9:74:cf:b0:11:df:6f:be:93:91:
                    cc:2c:01:d3:fa:6a:96:b4:b0:5d:b7:bd:68:1a:5a:
                    c9:53:4b:d6:dd:d7:49:8b:6c:38:c6:d5:c4:04:f8:
                    65:75:e4:d3:c6:83:25:b9:b6:cc:db:e0:dc:e7:70:
                    18:fc:e7:2e:01:99:bc:f3:9c:a1:7d:e5:02:06:24:
                    56:11:15:e9:4f:51:8d:20:46:aa:4c:d2:60:cf:b8:
                    5a:4c:dc:16:cb:9e:2f:4b:c7:b0:49:a7:95:b8:a8:
                    37:cc:67:eb:a9:26:18:92:1c:0e:4b:b6:39:1d:47:
                    ec:8b:83:b5:78:b7:3b:0c:57:d5:fe:49:6a:76:59:
                    10:c0:a3:37:3f:b3:d5:82:34:8a:fe:f9:37:6b:18:
                    84:43:cc:36:64:8f:a0:8e:c9:4c:23:c2:a6:96:34:
                    6a:18:71:e3:8d:93:18:b2:96:97:0f:ec:55:b2:ab:
                    a9:d1:72:b2:48:79:1e:db:8d:a5:45:83:72:78:e4:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0C:EE:B0:41:FA:E9:33:44:E5:E7:02:30:07:75:5C:7E:04:F9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c905560f-e46c-3a04-8eec-93cebdd49469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.201.0/24
                  206.225.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:04:09:3f:91:79:ed:8c:47:37:a2:6c:cd:59:df:1f:a9:0a:
         ae:05:0e:9c:c4:1e:90:fb:72:39:f0:64:8a:9e:b2:e4:1c:68:
         5f:94:c5:ca:b4:7a:94:da:06:be:07:4a:d2:b1:dc:b1:7e:cb:
         56:48:e1:75:c4:69:18:3a:45:9e:82:c2:98:6e:41:fd:5c:e1:
         05:09:d9:cd:2c:31:08:6d:55:a1:35:a4:ab:c5:70:37:75:38:
         93:43:39:7d:d2:d1:f5:b2:a2:a3:0e:6d:79:1b:42:c3:a6:e2:
         cc:18:30:9d:e1:ae:7c:04:04:f1:4a:bb:55:03:d5:20:f3:8d:
         a9:81:47:5c:e3:25:8f:40:11:fd:d0:49:61:5e:18:24:d2:ac:
         7e:eb:4c:0d:d3:e3:39:8f:86:12:1d:6a:eb:c7:c4:9b:4a:3d:
         37:89:46:07:a5:e3:61:b2:62:30:ff:2d:ab:e3:49:13:d7:95:
         9c:83:a0:04:f3:82:a7:b7:cd:61:8d:8e:c2:3b:86:39:56:c5:
         aa:ae:2e:a8:4a:b8:54:cb:02:ba:bf:4a:15:31:e9:b2:25:64:
         a2:45:d4:dc:cb:13:be:bc:5e:aa:cf:73:56:66:35:bc:bf:3a:
         37:09:33:f7:87:2d:db:cf:c1:b5:82:b4:4c:a1:0c:fb:13:79:
         49:8d:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:13 2025 by rpki-client