Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa
File:                     b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa (raw, json)
Hash identifier:          Mh/5Rj0Fo3ayjbdOYn+a+me1HzvKnakII63pX6ovBek=
Subject key identifier:   30:30:8A:DA:D9:6F:90:E1:1E:32:D5:D5:87:85:66:2F:68:A2:88:23
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584B8BE20F0C6D9763F31913DB40
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     42
IP address blocks:        206.108.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:0f:0c:6d:97:63:f3:19:13:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=0c557485-4616-4ae6-8192-ca3baa7af04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5a:0a:f0:f6:89:68:0f:5e:cd:81:63:4c:4e:
                    7d:d4:93:67:ca:6d:9e:14:ee:a3:f7:a8:79:17:3d:
                    16:a0:36:fd:09:27:c6:8a:ab:c8:ae:b0:d5:8e:33:
                    9d:b0:a9:e3:16:40:6e:ea:5a:39:8d:12:93:e8:6e:
                    a4:2c:cd:2a:d8:1f:63:b4:f4:5e:83:db:85:aa:56:
                    76:19:25:cb:57:77:96:7c:4e:7b:b1:9a:b6:b5:f7:
                    54:dd:b4:f0:b0:e8:27:cb:1a:34:5a:0d:6e:59:5c:
                    e9:8b:22:72:77:76:c4:15:64:df:20:fd:b1:74:83:
                    86:fd:5a:dc:16:d2:53:ad:ab:97:62:01:bb:2d:25:
                    1b:eb:56:15:0c:a4:a7:ea:f4:57:53:36:5e:d1:81:
                    3f:e0:3d:4d:73:ca:65:ba:7a:1b:0a:d4:e9:9d:8a:
                    d6:1c:29:62:d6:02:4e:40:30:79:07:1e:6e:02:b7:
                    5c:a6:27:b3:4d:f6:8c:c8:ed:57:c2:af:86:63:a5:
                    bc:6a:c1:99:e8:42:b0:37:1a:6e:9a:45:c3:36:5b:
                    1b:3a:f1:1d:13:ab:ea:45:e5:90:2e:52:0e:04:71:
                    d4:70:09:5b:25:78:f9:49:5a:3d:64:8f:ca:db:ea:
                    70:f8:a9:39:c3:39:1d:1f:64:c8:e4:6e:9b:70:1b:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:30:8A:DA:D9:6F:90:E1:1E:32:D5:D5:87:85:66:2F:68:A2:88:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ce:84:86:09:ff:3d:f2:59:b9:3a:40:e0:08:3a:df:af:de:
         32:9c:d2:18:e6:ab:98:9d:ff:22:5b:0a:31:60:50:76:93:ca:
         f8:70:60:c0:98:ae:e7:7f:04:1a:21:c9:34:e7:08:4a:cf:33:
         bd:1d:bb:ab:06:65:1d:da:44:42:b1:ef:f0:02:6b:06:0d:5a:
         a2:9b:69:57:78:59:5e:99:26:d5:2b:a8:3a:00:95:7b:43:73:
         46:b3:98:88:01:5c:b0:fa:fd:06:92:71:6f:23:5f:0b:03:15:
         a2:80:85:4f:d5:50:9a:8d:9d:e8:9c:5f:4a:62:eb:f6:14:7e:
         47:4a:ee:32:91:f1:0a:6f:6c:a5:51:0c:53:79:16:24:5f:7e:
         5a:8c:30:eb:f5:25:9e:d6:53:66:b7:02:57:02:90:da:53:97:
         ee:27:9c:af:95:9a:54:d3:19:67:fd:8d:4d:ae:ad:51:ce:81:
         13:04:fc:d0:fd:1f:ab:d7:31:a7:b0:3e:30:15:73:1b:28:d8:
         89:c5:d4:8e:35:06:ba:5d:77:5e:84:fa:27:43:7a:db:6a:b6:
         4f:60:d3:ef:b2:0d:3b:04:8a:d8:a4:07:23:d9:e1:57:84:ca:
         1d:72:87:80:58:70:0d:5d:65:ef:b4:68:81:0d:d8:48:62:86:
         12:4d:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:19 2025 by rpki-client