Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa
File:                     4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa (raw, json)
Hash identifier:          +YnbnnymF3t1KnilBGOqrvFICSEYlRRtpv25SZqvRHg=
Subject key identifier:   59:DA:89:F3:9B:6C:56:FD:10:73:1C:68:E6:0D:7B:22:50:D4:EA:93
Certificate issuer:       /CN=5dc12714-5247-41c5-b244-d0edceb32982
Certificate serial:       010D0C9F4328584B67974614012022CDEEA89D80
Authority key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     18619
IP address blocks:        206.166.213.0/24 maxlen: 24
                          209.237.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:46:14:01:20:22:cd:ee:a8:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc12714-5247-41c5-b244-d0edceb32982
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=ce823d7e-d845-447e-8bcf-84759bbbf2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:a2:bc:17:f7:8d:d3:bd:bb:30:b1:2e:c2:
                    98:26:c0:ec:a0:77:76:cb:bc:43:6d:04:b6:ec:15:
                    3d:69:de:84:78:4c:d8:9e:d2:ea:05:69:90:15:30:
                    ce:74:59:de:e3:cd:49:d2:5e:94:d7:3e:41:8b:ae:
                    19:24:24:26:31:a6:bc:9d:b1:c4:cb:dd:99:cf:c7:
                    33:29:73:a8:68:65:92:81:1f:8b:50:85:92:92:6b:
                    10:78:91:5b:67:4f:2f:f1:9c:5b:af:36:78:e6:41:
                    36:8b:0d:49:fd:7d:34:9f:d9:d9:a6:32:9b:fe:51:
                    6d:00:f4:fa:44:ff:47:84:26:08:20:6d:8c:bc:cf:
                    0f:c4:aa:c7:8d:f7:e6:69:f4:7c:f1:d4:a7:1f:c2:
                    14:12:50:1b:b5:08:e6:03:e6:00:59:8c:32:09:76:
                    e0:7a:c5:46:5d:e4:14:64:44:60:e5:ee:03:77:f8:
                    8a:f9:86:7c:18:48:04:f8:24:47:6e:18:7a:ba:bc:
                    cc:66:83:70:a5:27:a8:45:bd:3c:d6:b9:15:40:1a:
                    de:59:9d:83:0d:31:df:2a:e4:6f:14:8d:90:75:5e:
                    38:86:4d:f3:f4:71:0d:14:b7:45:65:9e:b5:59:6d:
                    58:0b:d7:42:75:e7:2c:c7:5e:18:e4:18:52:9a:d1:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DA:89:F3:9B:6C:56:FD:10:73:1C:68:E6:0D:7B:22:50:D4:EA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.166.213.0/24
                  209.237.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b8:b5:01:ec:cc:72:8b:09:5e:69:97:dd:29:b1:96:56:2d:
         55:a6:73:24:22:88:5e:d4:32:a7:f3:0d:31:1a:0a:4a:1a:cf:
         63:10:35:a5:e5:69:59:94:a4:84:79:40:fa:10:42:cf:5f:c6:
         88:77:f9:1f:79:2c:42:34:a5:74:29:5f:e3:3c:10:43:1e:85:
         9e:f4:b1:c9:3b:f8:c5:f3:ad:c5:6b:d1:3d:62:42:66:03:3a:
         52:d5:22:35:dc:61:d7:03:c0:7e:c0:55:dc:1c:2d:d3:81:ae:
         9b:57:05:2d:2b:4a:b8:88:60:d3:c4:3a:eb:bf:de:8c:5c:b4:
         33:71:3d:95:ba:65:8e:d3:63:03:b6:f1:85:39:e2:f5:a9:5e:
         0b:32:6d:c6:af:d6:85:4b:6c:8d:bc:b5:16:2a:cf:53:fb:23:
         81:35:75:43:c5:9c:f4:7d:b9:c8:64:49:12:9d:54:b4:43:cd:
         7f:1a:1e:f0:45:e7:34:71:7f:ea:17:b6:16:89:ad:3c:1d:b0:
         87:88:bc:fe:fe:46:78:ae:a2:93:47:14:33:ac:67:59:4f:b2:
         c8:19:f0:cc:e2:ae:a8:2f:95:8b:ab:6b:aa:3f:fc:7d:2d:cf:
         7f:5c:30:46:96:5e:fd:59:df:d1:f1:a3:db:b7:e6:b7:aa:af:
         76:8c:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:40:15 2025 by rpki-client