Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/b6793fdf-2a49-3a1d-8712-d5e3279ad89e.roa
File:                     b6793fdf-2a49-3a1d-8712-d5e3279ad89e.roa (raw, json)
Hash identifier:          Ei6AV8M+6xSe7AI4mBp4cuPz7d14lcDrPSyxjErRFTU=
Subject key identifier:   EA:6A:1B:3E:53:D1:E0:F8:2E:C6:65:36:5A:EB:3A:98:CF:AB:1F:54
Certificate issuer:       /CN=cfa06203-6633-4db7-84da-b0100b7671ee
Certificate serial:       010D0C9F4328584B821CCB9BDA6436C5700CAC80
Authority key identifier: D7:1F:2B:A9:AF:46:82:27:F6:CD:54:75:53:A3:98:D9:DA:C4:11:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/b6793fdf-2a49-3a1d-8712-d5e3279ad89e.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     54496
IP address blocks:        205.207.108.0/24 maxlen: 24
                          205.207.109.0/24 maxlen: 24
                          2620:10f:a000::/48 maxlen: 48
                          2620:10f:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/cfa06203-6633-4db7-84da-b0100b7671ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/cfa06203-6633-4db7-84da-b0100b7671ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:cb:9b:da:64:36:c5:70:0c:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa06203-6633-4db7-84da-b0100b7671ee
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=154a13a7-bafe-4bac-a637-061aa789b177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:7b:26:bd:fc:0e:9c:9e:9a:bb:a8:24:2f:
                    e6:c0:00:2c:c0:53:dd:46:8a:b8:0a:68:06:01:b8:
                    01:23:7a:ec:98:ef:2c:e8:e6:e2:8a:87:ba:1e:11:
                    a2:57:40:f8:14:4b:07:f1:06:b6:41:16:4c:7c:04:
                    e3:f3:97:19:0c:a2:b0:b8:5c:9c:7a:d9:ad:88:cc:
                    c4:11:08:35:66:f8:4a:2d:af:a7:32:65:73:e2:31:
                    aa:02:d3:81:1d:7a:8b:28:30:a0:04:1b:d4:83:58:
                    3a:7a:95:39:98:d2:58:48:4e:9f:63:86:59:6e:30:
                    5c:e8:1c:55:cc:ff:8a:07:fd:78:4d:6e:4f:a8:1c:
                    71:bc:da:aa:3d:13:b0:6e:2d:cc:99:b4:0d:f2:6e:
                    58:2b:dd:54:4e:47:9d:d6:59:b9:0d:f2:e0:d6:8f:
                    ae:d5:90:f8:58:e2:a0:2f:d8:b6:ad:bf:37:7a:85:
                    eb:6e:7c:38:7d:b7:03:3d:e5:3e:b1:eb:27:24:36:
                    99:67:23:34:4f:af:f8:c5:63:f7:5c:9b:e8:16:f4:
                    6f:bf:20:fd:ec:a9:be:a5:b9:b4:01:2a:64:b7:16:
                    eb:d9:c6:4f:3d:12:9c:40:a2:10:94:49:b8:c3:39:
                    a5:ab:61:e9:4b:9c:c5:e9:a1:08:35:d8:5a:71:ed:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6A:1B:3E:53:D1:E0:F8:2E:C6:65:36:5A:EB:3A:98:CF:AB:1F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/b6793fdf-2a49-3a1d-8712-d5e3279ad89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/cfa06203-6633-4db7-84da-b0100b7671ee.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1F:2B:A9:AF:46:82:27:F6:CD:54:75:53:A3:98:D9:DA:C4:11:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.108.0/23
                IPv6:
                  2620:10f:a000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:12:41:d5:d6:89:0b:1e:6f:8f:2f:04:52:4f:1c:3b:58:
         56:96:21:79:d1:55:9a:d7:c4:04:5e:70:c0:4b:98:ba:a1:6b:
         32:59:bb:0c:76:25:15:f6:d0:10:55:96:6b:7f:07:2e:ce:15:
         0e:95:50:02:f4:a1:90:1f:32:aa:68:de:81:11:7e:b2:c4:2b:
         b7:b8:80:3d:1a:39:2e:22:db:42:64:fe:1d:70:a7:bc:2b:27:
         7f:78:8a:ec:2f:a1:99:59:cf:e5:bf:82:cd:37:85:61:8d:bc:
         d6:21:8f:1a:f2:0e:07:7d:4f:7c:bd:e5:ba:d3:79:29:3a:7d:
         07:5a:64:ac:c9:0e:35:c1:c7:23:c7:ff:d4:f0:f2:3a:45:3a:
         26:ed:e8:45:d4:b4:de:18:7f:65:fe:9c:69:71:c6:58:ca:68:
         f6:16:0c:4e:59:cb:93:a6:d7:96:f6:4d:f2:b9:05:26:f9:b2:
         a1:df:45:fb:7e:0c:2a:2b:58:a4:79:ea:76:e4:82:bb:9b:a6:
         06:2e:e7:4c:fa:d2:ee:82:b9:67:91:ce:61:0a:fe:dc:b8:70:
         b0:4d:5a:4f:4f:57:22:f9:69:d8:fa:3b:e6:a2:7d:21:93:2a:
         3d:5b:ab:64:8b:b2:c6:1d:ef:c9:61:3a:2d:50:22:8a:d6:83:
         f9:1a:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:09:36 2025 by rpki-client