Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
File:                     ed98aa57-d32e-3a51-850b-fcb85c818c67.roa (raw, json)
Hash identifier:          KO0sd71cmN0ZIpH2oN8P4evMfHFxdxHxtG8Eyx8duNY=
Subject key identifier:   A9:4A:E4:03:E7:0D:33:F7:82:CA:6C:A1:E0:07:36:24:60:4C:2A:0B
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584B7DECC553E47023B4A9B63BA8
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     21928
IP address blocks:        72.250.0.0/17 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c5:53:e4:70:23:b4:a9:b6:3b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=06771f14-ccba-41ec-a378-d796e782590e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d0:1a:d7:78:39:ea:23:99:6e:ba:5c:52:05:
                    e4:d7:d5:14:b6:94:95:d7:71:56:c5:2d:0a:80:a8:
                    1e:0d:82:b3:d9:2f:8a:0a:f5:e1:e6:9a:f6:36:6b:
                    f1:0e:d1:f1:33:fd:35:0f:d5:f0:21:a8:f5:12:f8:
                    95:4a:aa:78:58:e5:ec:0c:bd:91:3d:1e:d9:1f:c3:
                    05:f9:18:04:a8:20:46:e8:bd:b1:de:dc:98:19:84:
                    67:7e:93:d0:54:4a:ab:61:46:9d:08:ff:72:d7:e4:
                    6f:c0:d0:9e:dc:af:67:63:a8:10:87:27:f7:21:e2:
                    62:e6:e9:e4:ef:87:1e:c3:09:53:ab:f3:3e:09:47:
                    48:45:fb:23:a7:cb:23:ea:b7:a5:3f:05:bd:9f:33:
                    c1:77:18:dd:eb:8a:a1:01:e7:63:39:46:41:b6:93:
                    3e:01:61:da:88:4b:15:0f:9c:ec:4a:8e:6a:ce:8a:
                    9d:b0:e2:19:a1:78:03:e7:cb:d1:b0:1c:a6:f3:af:
                    ab:2f:35:14:71:ce:24:08:06:25:0d:ae:eb:4a:87:
                    9c:b6:3d:27:b3:9b:e0:5c:fd:be:d8:b9:3b:32:4e:
                    25:ce:d8:ac:d0:e7:db:ef:a6:2f:ae:3a:77:a6:86:
                    1d:bb:55:4e:92:cc:2b:7a:76:f8:26:9f:bc:02:2e:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4A:E4:03:E7:0D:33:F7:82:CA:6C:A1:E0:07:36:24:60:4C:2A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.250.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         fa:b5:b0:2f:53:8a:63:ac:0f:1a:ff:38:99:f0:3b:41:aa:4f:
         f6:bb:b5:81:0c:9c:07:65:db:ba:b6:70:d2:e8:cb:e4:80:40:
         35:c8:6e:16:83:d4:be:5e:27:6a:d8:11:1c:41:0a:d1:af:ad:
         5f:53:a7:29:0a:7d:f7:15:e5:4a:6a:47:73:d1:d2:b1:a6:83:
         dc:2c:d0:94:22:d8:fe:e1:a8:8c:71:fe:2c:d9:bf:22:11:76:
         dd:fc:89:df:64:51:cd:b3:93:38:ac:40:b9:99:b4:13:20:ed:
         2b:5a:bd:8a:5b:a8:6a:db:a4:81:9d:5c:7c:56:ae:eb:b0:f8:
         ed:cd:9a:0b:f7:e6:b3:08:db:f3:57:e8:ff:2a:2a:4f:68:27:
         02:2f:f3:11:57:87:db:2b:31:73:23:6d:c3:da:56:c9:3c:fb:
         81:65:e0:e6:ac:ff:cb:5d:72:22:5f:f2:0b:e0:59:63:23:13:
         79:98:c6:78:06:ae:93:6f:4b:b9:59:16:f9:59:f7:e1:c3:5c:
         fb:cc:0c:9e:10:ff:e8:6f:1d:8e:d8:80:9e:d3:a6:cb:05:5f:
         12:08:a5:73:0a:b0:b7:15:63:8a:9e:b5:d7:4e:7c:9d:5a:39:
         35:67:70:31:dc:4c:a8:ca:e8:f5:c3:bd:e3:f4:6f:c0:da:56:
         14:7b:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:51 2025 by rpki-client