Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/139ae1a7-8eee-3df7-a758-a5fa9b21966a.roa
File:                     139ae1a7-8eee-3df7-a758-a5fa9b21966a.roa (raw, json)
Hash identifier:          DX3cfPuTEqaZUX8JXiLQMGxAIL0U3rYH1NZVsK1BHaM=
Subject key identifier:   3C:73:1D:BA:56:15:07:27:FE:71:BE:62:77:86:B6:6D:65:0F:5E:77
Certificate issuer:       /CN=a63e4741-f0d0-41ab-b0c9-866af37d6849
Certificate serial:       010D0C9F4328584B821CC70EE3B4A562D8757980
Authority key identifier: 59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/139ae1a7-8eee-3df7-a758-a5fa9b21966a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     19694
IP address blocks:        206.198.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c7:0e:e3:b4:a5:62:d8:75:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63e4741-f0d0-41ab-b0c9-866af37d6849
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=1dbb60db-e995-45d7-a039-79bb56b0bb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:b5:31:94:53:70:86:2d:16:69:9f:83:83:
                    d4:5b:11:91:f1:09:b3:57:94:6e:23:5d:1c:d3:f8:
                    19:b6:0a:ab:f2:4e:6c:93:e1:d5:51:99:66:af:66:
                    9a:c4:73:f5:e7:2d:95:27:7a:d3:42:f5:58:11:f3:
                    35:ea:9f:cc:55:10:83:05:bf:54:b4:0e:78:ea:92:
                    7e:b0:79:5f:1c:40:20:6a:6e:4e:ac:bc:2d:63:17:
                    ed:31:aa:3e:db:9a:0b:2b:87:1b:a6:65:a0:08:b2:
                    c2:37:7f:3c:59:85:eb:6b:79:5f:c6:6f:7c:13:29:
                    d2:42:46:65:1f:71:e1:76:7a:8c:06:c4:8b:b9:5a:
                    da:06:99:6d:10:18:2f:ca:6e:da:a0:5e:01:27:3e:
                    f7:1e:48:9a:ec:dd:ee:36:47:81:8b:6e:27:dd:3f:
                    6b:f6:61:ed:b6:4f:85:d1:49:02:ef:c7:eb:ec:aa:
                    44:45:53:8e:d8:f7:bd:80:c1:3c:3e:46:2e:c0:9b:
                    66:49:71:8a:a9:90:13:dd:65:51:d7:e4:59:c5:1a:
                    cb:81:c1:89:86:55:91:ef:08:8e:75:1b:11:19:9a:
                    f4:37:64:24:03:0b:7f:f8:e4:93:0b:19:71:f8:8c:
                    71:b8:13:ac:0d:86:b0:f3:28:ef:3a:90:a2:7a:ac:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:73:1D:BA:56:15:07:27:FE:71:BE:62:77:86:B6:6D:65:0F:5E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/139ae1a7-8eee-3df7-a758-a5fa9b21966a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.crl

            X509v3 Authority Key Identifier:
                keyid:59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:79:79:87:8d:2a:8b:17:87:89:b1:a7:83:dd:ab:27:f4:97:
         9d:8d:0e:bb:60:ac:d0:f6:3c:60:71:ea:47:f0:cb:fd:0b:f9:
         79:e7:ea:d1:eb:98:42:5b:10:ca:ef:af:fe:89:19:32:f4:ab:
         38:fb:e9:48:f3:ac:c2:5e:df:9c:ee:6f:74:41:ee:6a:9c:11:
         33:96:8c:bc:24:22:d3:70:9e:d5:b4:1d:3f:51:26:ec:39:a3:
         cc:92:32:fe:68:a4:2f:0b:22:95:31:c1:0b:76:0d:9f:e7:95:
         32:60:c0:a8:11:a4:79:45:03:6c:d0:9b:b0:5e:f4:01:9e:54:
         f9:35:d9:ba:4d:7a:7b:b1:07:b1:f8:a7:a1:b1:e3:05:6e:bc:
         aa:47:26:0f:f8:ef:a6:fb:fe:af:99:67:69:fc:76:0b:81:e4:
         69:06:a8:c7:12:a1:25:d5:bc:da:4e:94:b4:2e:c5:26:34:c3:
         02:3d:4f:a0:c1:c3:d7:c2:9a:10:7c:b0:57:51:ec:9d:fe:96:
         58:0a:9d:55:09:cf:3b:f6:2f:ac:8e:d8:1f:2e:3c:53:85:07:
         a6:84:3a:e0:0f:d4:c5:cd:eb:84:46:2c:fb:f5:11:77:04:fb:
         83:b2:aa:45:9e:85:c2:fa:6f:37:b3:6e:60:f4:74:be:fa:8a:
         66:6a:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:26:16 2025 by rpki-client