Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa
File:                     c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa (raw, json)
Hash identifier:          n+Z6P43dfiBGd0D8UNNltutI7Ag9zo5X72Q4H5wMF+o=
Subject key identifier:   A4:30:F5:40:C4:BE:E6:DC:9E:63:C5:18:D7:48:DB:6C:4D:5D:39:D0
Certificate issuer:       /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial:       010D0C9F4328584B4BAC5964AA27F207E31773C0
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     36236
IP address blocks:        198.176.44.0/22 maxlen: 24
                          2604:a680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:59:64:aa:27:f2:07:e3:17:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=39e9da4c-275d-47d4-99eb-169b6bff6d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:0d:8f:9a:a0:8e:23:5b:9e:01:7c:5e:29:
                    40:2a:00:7e:f5:8f:48:37:06:65:72:00:d0:7f:50:
                    c3:c8:38:25:d9:67:42:4a:cc:26:74:2e:f7:bd:25:
                    fb:90:bd:9f:95:75:46:49:12:1c:82:03:3b:9a:c1:
                    bd:e3:77:85:07:e4:d1:46:bd:c4:c4:65:8b:0d:ac:
                    c3:56:fa:2f:c4:e0:12:59:6a:15:c4:9e:42:ec:13:
                    a7:b3:c5:48:a1:c8:83:d2:c9:08:fc:2e:0d:59:98:
                    e1:a3:90:bd:52:3a:d8:85:07:52:3e:fd:25:8c:c3:
                    60:09:d2:9c:5a:b9:9d:ff:6a:a8:0c:4e:ce:f3:ea:
                    a9:15:16:48:d4:ea:9d:ae:4a:83:2c:7c:9a:f9:88:
                    53:0c:17:fc:71:35:b0:f0:68:2c:be:20:ac:66:b9:
                    f9:47:ef:f3:b4:a3:ad:fd:89:0d:2a:8a:21:86:1e:
                    ff:c6:7e:c0:a5:f3:8b:a1:7a:45:15:01:ef:c1:e9:
                    1a:af:bf:2e:54:b8:ab:28:d9:0a:36:7a:93:b2:d4:
                    1f:60:98:cf:41:f7:f2:c0:9c:63:b2:e4:5b:19:26:
                    58:de:76:5d:0d:06:a4:e5:8f:f0:c4:8d:cb:42:1d:
                    10:cb:3d:f3:bd:98:1d:4c:e6:c3:2b:1e:d2:2d:14:
                    6d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:30:F5:40:C4:BE:E6:DC:9E:63:C5:18:D7:48:DB:6C:4D:5D:39:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/c39a4354-aede-3ae8-ab66-37717e4d1c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl

            X509v3 Authority Key Identifier:
                keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.44.0/22
                IPv6:
                  2604:a680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c3:b7:48:94:75:69:b0:8b:8b:67:60:48:29:68:bd:2f:9e:
         5c:19:a3:29:f6:8c:ba:3a:0d:1d:3c:ef:ca:4e:b7:03:17:3b:
         0c:1e:8f:83:c1:bc:aa:4d:85:50:df:ef:67:72:8a:a6:71:9a:
         48:de:23:10:ef:59:27:2a:0e:b0:7a:38:e0:6e:89:ef:4b:54:
         3c:00:9d:c6:f7:5a:d6:5a:a5:bc:33:8c:0a:72:5b:bf:e0:12:
         60:ce:7e:d3:de:88:7e:b4:75:78:4f:ae:a2:a0:9d:a4:5a:b7:
         44:26:2d:1b:c0:c5:2f:d8:3d:54:23:9c:6d:83:db:e1:f6:a1:
         49:d3:63:0b:6c:d8:80:1a:14:d8:11:f1:ca:e5:94:df:23:73:
         74:3a:8b:c6:bc:ab:53:db:e6:37:f8:be:b5:a1:30:04:88:94:
         07:3d:74:be:66:c9:c0:3d:ac:26:df:6c:cf:ef:74:83:f1:37:
         35:8c:40:ee:21:28:76:9d:a8:79:0f:49:bd:e7:06:8a:54:04:
         0a:a7:db:52:7f:db:2f:ea:26:1e:ea:ad:b6:3b:c2:0e:58:a3:
         e2:23:21:b1:63:d1:c7:68:b7:f2:c2:cc:26:bd:4d:86:de:25:
         b0:21:3c:ca:c5:ae:d9:6e:6a:a2:70:e6:5f:25:ec:43:46:20:
         83:ae:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:39 2025 by rpki-client