Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/f385a4ab-f24c-3e9d-9487-f8da2a28af5d.roa
File:                     f385a4ab-f24c-3e9d-9487-f8da2a28af5d.roa (raw, json)
Hash identifier:          UuR0TJt63IOl7Y9NYbYH5VCirsvw8vWqAYjOlw5yaWc=
Subject key identifier:   A8:95:E3:52:8A:27:D0:0C:D0:F2:18:2E:45:A1:F7:83:0B:32:34:97
Certificate issuer:       /CN=5612fc31-f950-45ed-88e4-c18bd8b0d916
Certificate serial:       010D0C9F4328584B7B21FAC83C1EAB14520B7500
Authority key identifier: 32:05:A7:8D:81:AE:52:08:38:44:66:F2:B3:6C:D4:6F:7E:AA:50:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/f385a4ab-f24c-3e9d-9487-f8da2a28af5d.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     198949
IP address blocks:        204.58.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:fa:c8:3c:1e:ab:14:52:0b:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5612fc31-f950-45ed-88e4-c18bd8b0d916
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=504d72bb-67cf-4068-87a4-8c8c03107b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:18:72:10:fe:0e:c5:1a:a6:ee:37:39:8b:
                    a2:b7:fb:01:11:0c:d0:dd:41:2d:c2:4b:e2:5a:e4:
                    9e:9d:0f:32:9f:eb:aa:78:f2:80:a0:44:9f:d3:9c:
                    de:56:9e:fb:23:84:d1:33:b9:34:72:01:64:42:ef:
                    8f:d5:c6:66:c3:52:38:a3:55:70:76:5d:56:78:6a:
                    75:34:aa:5d:4f:db:c9:65:8d:ed:cc:e4:47:f7:6d:
                    08:f0:6b:1c:e3:71:e3:58:af:3b:c4:f7:4e:35:99:
                    b9:9e:24:0a:f2:af:3f:64:e6:92:6e:e9:bc:77:79:
                    8c:8b:e0:38:9d:dc:29:a4:38:0e:57:57:ac:31:14:
                    dd:f9:8d:5a:c2:c5:b3:bd:9a:b1:4d:90:c7:24:1b:
                    7f:fa:82:05:08:f7:20:61:6e:6a:61:88:e4:a1:12:
                    af:54:83:8f:f8:36:96:15:44:66:0f:7f:32:b7:0e:
                    c4:0f:7a:b6:11:96:d6:8c:06:56:49:9a:f8:3b:22:
                    63:52:37:db:0f:9b:79:bb:e0:ea:21:4d:dd:b2:34:
                    7b:d8:84:c0:28:93:17:db:a1:ee:7a:f0:09:5f:be:
                    a5:82:32:ad:43:df:d0:42:6b:cb:df:75:b6:13:9e:
                    87:94:c4:c1:f6:b2:6a:85:b8:3e:b4:d1:02:a7:08:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:95:E3:52:8A:27:D0:0C:D0:F2:18:2E:45:A1:F7:83:0B:32:34:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/f385a4ab-f24c-3e9d-9487-f8da2a28af5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.crl

            X509v3 Authority Key Identifier:
                keyid:32:05:A7:8D:81:AE:52:08:38:44:66:F2:B3:6C:D4:6F:7E:AA:50:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.58.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:32:a8:80:35:49:53:19:93:ef:5e:f4:a2:4d:eb:14:01:47:
         3f:2e:6f:bf:76:ad:a1:61:e7:7c:80:7a:94:ad:6b:b9:17:49:
         11:ac:41:79:9f:02:19:6e:57:cc:23:c4:13:84:c2:f0:bf:c3:
         5c:0d:d6:7e:00:d0:bc:16:c1:ce:1a:b8:fb:b0:ac:8e:df:ea:
         d8:f4:1f:11:4f:41:ab:d1:6d:24:73:76:4b:b9:c5:1a:4c:13:
         55:2d:4a:5f:3d:fa:dc:95:10:66:1b:f1:92:7d:e5:1b:2b:01:
         d8:a0:43:f0:64:7c:73:ed:3c:81:64:5c:7a:63:b5:0d:5c:5b:
         35:b4:61:b3:3d:80:52:64:6a:47:a6:eb:99:66:b4:56:70:5b:
         d4:0c:93:07:2a:e9:82:80:bb:e5:11:07:70:4e:11:b5:80:17:
         be:d2:41:c5:46:dd:9f:4f:66:e3:fe:b2:86:4f:29:9b:ff:e9:
         aa:1e:9f:9e:4c:86:37:62:8e:50:d0:5c:16:f6:42:10:77:f5:
         00:60:ab:22:c8:cb:e4:69:0a:b9:ad:56:8d:be:77:41:05:1a:
         5a:61:48:de:85:93:39:f5:d8:83:3e:00:b0:e9:54:14:24:be:
         a5:ce:f5:75:4b:cc:20:29:0d:f0:e4:cb:16:cb:fc:f7:4e:69:
         61:04:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:53 2025 by rpki-client