Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0465dbe2-09af-3705-90c5-8a1e500662c3.roa
File:                     0465dbe2-09af-3705-90c5-8a1e500662c3.roa (raw, json)
Hash identifier:          Ks7BhVqrZljyYOj1J9sTiCCm+m6xsa36p0nhLWY4v6A=
Subject key identifier:   4C:C4:8C:51:D6:4A:03:BE:C4:6A:43:DB:5E:37:A0:22:8F:04:C5:AD
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CE43AF68CD101F9FC73C80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0465dbe2-09af-3705-90c5-8a1e500662c3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        69.73.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:43:af:68:cd:10:1f:9f:c7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d9c35876-1dda-4ae2-b8b4-4d7dea8ec0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:2e:53:a8:09:d0:e8:95:2d:a9:e1:52:15:
                    cb:4d:80:7d:e8:55:7a:42:14:2a:51:6f:65:9d:1f:
                    85:28:0d:f4:04:42:d1:01:f1:c3:c9:30:25:63:08:
                    fa:38:41:79:cf:54:8b:a5:c9:54:f9:0d:91:2c:56:
                    56:77:00:fe:53:f4:6a:ac:08:89:d1:b3:b8:f8:3b:
                    aa:98:5c:17:fb:50:59:34:9d:b5:74:2f:60:cd:04:
                    0c:b4:23:a7:d0:01:7d:ed:91:dd:6a:c9:7d:cc:13:
                    1d:58:c2:ce:49:42:d5:b6:a0:4c:09:61:d6:ed:48:
                    e5:d2:9a:ad:0a:bc:c9:b5:3d:de:6a:a1:1f:19:70:
                    fa:26:59:53:c3:02:ab:e4:ed:40:97:1b:d9:ae:10:
                    71:4f:6b:53:af:bb:de:27:6d:2d:bf:c7:6f:3a:27:
                    ab:21:98:fd:96:f8:19:14:3c:15:36:de:e7:2a:45:
                    1b:01:66:cb:84:75:6f:ab:5e:e7:5c:92:9b:32:5f:
                    dc:05:05:f2:b1:e8:a6:76:7e:11:1c:f5:bd:b4:0f:
                    ba:35:3c:c4:78:66:f0:0b:ef:57:2f:67:65:2d:b9:
                    0e:7d:bf:30:11:01:0d:56:3e:d8:2d:72:dd:40:f8:
                    bd:08:52:7a:86:c8:1f:f3:a5:3a:25:05:8e:f1:e6:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C4:8C:51:D6:4A:03:BE:C4:6A:43:DB:5E:37:A0:22:8F:04:C5:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0465dbe2-09af-3705-90c5-8a1e500662c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ed:50:fb:55:23:e0:d6:b9:ca:67:3a:26:1e:67:4f:f1:d8:
         f7:a6:eb:8a:b1:e8:43:cd:cd:a3:b5:ad:44:07:cc:10:a2:a6:
         6a:b1:a9:6e:67:05:82:85:9d:81:bc:5f:95:73:31:ae:c8:10:
         bf:8f:a2:08:cf:34:b9:f5:6c:6c:75:3e:65:e2:67:f3:40:00:
         4c:27:18:d1:ec:d5:8d:55:5b:48:42:91:bd:ad:8b:36:e6:ce:
         af:68:98:d0:73:da:99:c9:6e:43:2b:5e:bd:cf:80:43:4b:5d:
         3e:ed:e7:f3:36:51:cf:f3:33:5d:76:f2:b7:19:9b:d4:5f:7c:
         fc:a0:b1:cb:81:0a:04:ef:c2:38:a1:25:52:9a:d1:03:1c:11:
         ef:bb:2b:78:4c:a1:ee:c0:f0:da:be:c9:0d:ec:26:ab:fc:98:
         c4:96:cc:2c:b7:b1:1d:4d:cc:8b:d7:84:45:3d:31:a9:8c:3e:
         82:51:02:f7:c4:4c:50:0d:35:bf:93:a1:b6:1b:8f:78:68:a6:
         d0:e8:00:53:e5:a8:12:fc:11:55:fd:1f:77:50:79:9b:ce:37:
         05:b9:7a:3f:19:46:76:c8:83:5b:96:c3:69:ed:4d:14:ba:b7:
         b5:e3:60:e4:af:74:17:51:b1:2a:cb:ae:af:27:26:a0:f2:bb:
         df:26:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:06:09 2025 by rpki-client