Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa
File:                     a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa (raw, json)
Hash identifier:          MLaoUEFctUnKuXMAQNZQPBedu9urjEiqXudtjYU6VVA=
Subject key identifier:   78:BF:D0:91:42:08:4E:4B:70:D3:CE:DA:A1:1D:2B:47:26:D3:74:44
Certificate issuer:       /CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
Certificate serial:       010D0C9F4328584B7DECA862FFA4A46BE5540B40
Authority key identifier: 9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     12059
IP address blocks:        216.223.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a8:62:ff:a4:a4:6b:e5:54:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=f2ac7550-cd37-4b40-af0f-b69cbd92dd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:10:c7:d1:9c:88:27:df:ff:9e:89:5a:51:
                    41:26:ab:cc:b8:b3:60:bf:e3:38:1a:1a:24:67:bf:
                    97:9d:f2:f9:97:fa:05:00:12:69:b2:e0:a7:e3:0d:
                    5e:bf:4e:41:6e:61:62:41:fb:73:86:a9:9a:34:d6:
                    cb:f3:cc:37:38:4e:d0:a2:8c:af:73:9d:7e:1c:b6:
                    13:79:8d:77:28:af:94:1b:e6:0b:25:ad:99:a2:89:
                    0d:0c:52:4a:e6:2f:60:5f:69:f4:66:fb:5a:3c:41:
                    5c:34:aa:c1:de:11:a0:b5:01:55:63:65:f9:b4:a9:
                    ea:ec:68:d0:51:6f:45:96:a4:03:f8:71:15:e5:f5:
                    e2:a9:9a:fa:73:b2:28:12:30:a8:cf:f1:7e:16:7a:
                    99:b4:43:08:1d:1f:85:40:48:be:3d:c0:f0:a3:79:
                    11:b0:43:70:3e:13:7e:81:df:10:98:69:7c:d8:28:
                    f7:ef:16:dd:c5:3b:34:02:f5:46:ba:79:55:e6:c5:
                    3e:c6:d9:ea:95:fc:6e:ac:d6:e0:ee:fe:58:4e:46:
                    02:4a:e9:9a:d4:cd:9a:53:c5:de:e5:18:11:e9:73:
                    f1:da:c9:80:ca:11:e2:e8:29:33:94:e1:bf:39:e6:
                    51:ee:a5:04:78:a8:8f:23:ed:bf:5f:59:7f:dd:7e:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BF:D0:91:42:08:4E:4B:70:D3:CE:DA:A1:1D:2B:47:26:D3:74:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl

            X509v3 Authority Key Identifier:
                keyid:9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:38:e4:3b:c9:d6:ee:be:14:c7:cc:b1:59:ab:c9:e9:09:
         92:0c:ac:21:9c:8a:6a:e4:44:45:27:f8:30:95:bf:21:6c:3e:
         07:01:1b:a6:59:01:f7:38:36:b4:e7:d0:ab:50:7a:f4:92:56:
         08:4b:e9:d2:1f:a7:60:de:4d:a2:f5:c2:2f:5a:26:c8:af:d3:
         57:cb:ae:a8:4f:af:a0:d4:d8:1d:0f:6d:05:c8:71:92:62:02:
         e7:74:ec:63:2f:99:74:10:54:ac:35:62:59:9b:a4:54:48:3f:
         56:30:e0:54:3b:88:73:5c:be:56:d1:51:24:2d:1b:d8:fe:b9:
         06:6f:78:ac:5c:4b:49:11:97:d7:94:b2:af:e2:a5:a9:63:5c:
         3f:39:a7:88:88:1c:46:78:ca:c9:27:69:c0:f9:32:e5:e8:e9:
         59:b5:84:ce:95:b7:8e:02:83:38:9f:38:ca:91:3c:22:c8:9d:
         ec:e9:4a:4f:59:8e:69:18:1c:43:94:39:2a:b2:69:f0:81:94:
         ea:ce:c7:f8:9c:b2:b7:ed:98:0d:69:cb:5d:8a:67:0c:46:ca:
         a5:fa:b0:fc:56:13:4a:1a:a4:36:c7:dd:43:ce:ef:58:a1:0a:
         67:e0:5f:99:f4:85:03:72:4a:af:9a:53:93:a9:06:15:d6:65:
         64:96:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:00 2025 by rpki-client