Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/1d887a2c-a304-3bab-9d2d-334f871f734e.roa
File:                     1d887a2c-a304-3bab-9d2d-334f871f734e.roa (raw, json)
Hash identifier:          VdvUlvrmExgPiiLwb2HPQzajE0wgKPxRDbEOceUVwRo=
Subject key identifier:   58:12:95:DF:9C:48:BA:FC:30:BC:FA:42:29:89:59:03:52:5F:CF:84
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584B80B764CC2CA5A0A83298E340
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/1d887a2c-a304-3bab-9d2d-334f871f734e.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     53334
IP address blocks:        216.59.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:64:cc:2c:a5:a0:a8:32:98:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=eb3e28c0-dfc5-4958-b93d-cb9a1a7743b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:a7:db:a0:12:2c:55:5e:c8:a1:15:3d:fd:
                    f6:0f:de:df:d7:11:ba:be:fd:1b:4f:fe:c3:c2:e9:
                    17:ee:9e:85:b9:93:19:3f:59:0a:15:4b:8b:93:da:
                    16:93:8f:00:7e:5a:b6:7e:87:f3:49:c0:95:31:43:
                    b3:d9:fc:09:96:eb:9e:63:50:c2:49:91:95:3d:1d:
                    20:36:a4:6b:ed:2b:fa:47:95:78:4f:0b:fe:13:5b:
                    54:89:d4:fe:d6:bf:a0:c2:f3:02:b9:fa:f4:8d:46:
                    6a:04:27:72:2f:9e:90:3f:6d:1c:2b:32:d0:f4:b3:
                    09:50:46:6d:a1:f5:d7:02:21:34:1e:bf:52:cf:d0:
                    2e:b4:1c:54:37:92:66:26:b7:1b:58:ca:1b:d9:92:
                    17:a0:9a:81:60:76:38:1f:47:5f:a6:3f:5d:af:ea:
                    25:e3:97:a6:69:95:ce:00:94:ff:f4:7a:67:80:b3:
                    6e:8e:26:63:b4:0f:c0:55:3b:e2:4b:c0:48:7c:10:
                    aa:98:f2:43:a3:4e:51:c5:c2:56:49:4f:cd:1e:68:
                    d1:58:e9:89:98:81:c5:00:9e:e4:91:5e:74:f9:ef:
                    9b:58:f3:7c:f7:1c:83:95:ed:07:47:59:b6:9d:08:
                    f8:98:8f:cb:2a:b1:db:82:3b:b7:af:ef:9f:9a:16:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:12:95:DF:9C:48:BA:FC:30:BC:FA:42:29:89:59:03:52:5F:CF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/1d887a2c-a304-3bab-9d2d-334f871f734e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:5a:49:d8:2c:ab:4a:e3:06:ce:1c:34:a3:c2:cf:38:d5:
         88:59:ad:47:01:62:52:a0:e6:2b:ac:05:82:f1:aa:12:68:2a:
         c8:30:ec:24:3a:23:12:73:fc:f9:29:66:ba:64:c1:cb:83:55:
         d4:e4:bd:ea:20:86:3a:62:43:2b:89:11:a4:05:2c:80:fe:c6:
         6a:96:b2:75:0b:85:78:a0:a9:9b:db:f0:16:2e:72:06:3b:de:
         ff:0d:01:f9:d2:2d:15:d7:2c:66:17:f7:62:20:48:6a:d3:20:
         35:21:71:d5:32:fc:49:88:2b:be:e1:2d:a4:4b:c5:66:33:51:
         42:1f:92:40:5b:77:98:6d:f9:86:bc:4b:59:66:bb:0d:e6:fd:
         eb:88:36:a2:bc:5d:7a:ba:73:50:43:64:89:00:ba:7b:84:e7:
         90:81:6c:aa:2e:ca:33:1b:c1:05:d1:82:3e:e4:9c:a4:7c:52:
         2a:b0:66:c4:ed:aa:de:92:8d:70:ba:48:77:c2:8d:9a:4c:2a:
         ee:79:3d:50:32:f7:b9:68:d9:6a:38:17:d1:d7:42:73:b2:b8:
         63:16:a7:25:67:92:11:91:7e:84:12:25:d1:8f:02:0c:91:f6:
         46:33:e6:21:aa:11:e2:bc:ce:59:ff:6f:c4:28:c0:2d:ff:61:
         28:48:21:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:49:56 2025 by rpki-client