Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/48742374-4f94-3610-be59-8ac53f061c5a.roa
File:                     48742374-4f94-3610-be59-8ac53f061c5a.roa (raw, json)
Hash identifier:          sFDGVz/KsdMRiHod1W6pr450vLdxP87vLI09APAdOTQ=
Subject key identifier:   60:0B:88:F5:19:A7:D7:53:C6:48:47:A4:80:D5:1F:F5:E5:05:34:88
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CE3A912039C0A89CE24D80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/48742374-4f94-3610-be59-8ac53f061c5a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        69.73.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3a:91:20:39:c0:a8:9c:e2:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=847ba81d-07aa-45b5-a81e-8107044b7915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:0b:f0:40:59:5a:30:43:76:58:29:34:54:
                    da:fc:ea:35:55:b5:3f:40:89:2b:7c:f4:e0:0a:44:
                    5a:4a:a1:47:e8:dd:f5:02:d6:c3:57:47:83:ed:fa:
                    6e:3d:01:30:05:a8:2d:24:5a:95:d1:e5:80:2e:81:
                    df:ff:b3:b4:0d:11:7a:23:f8:c6:6b:59:27:60:68:
                    7a:56:d9:0f:26:a5:9c:39:21:9d:1b:5d:6e:a1:e2:
                    1c:3a:b0:0a:8a:f8:71:82:36:2c:88:ce:fb:3d:29:
                    80:fe:99:22:ce:2c:f3:aa:91:65:37:b5:79:8e:06:
                    c5:82:6f:09:d9:6f:c2:2d:d0:12:12:f5:57:fa:31:
                    9e:26:fe:0c:df:74:b7:92:0a:e0:d7:08:5e:06:c8:
                    78:fa:fc:d5:2a:cb:37:45:46:2b:c8:e5:72:7b:8b:
                    ff:e1:09:dc:fd:7c:5a:d4:f4:8e:88:b9:8b:69:e9:
                    5e:b6:7d:5f:af:fb:5d:7d:9a:e9:8f:d8:4e:99:6a:
                    28:4f:3a:8c:8c:43:be:ec:7e:52:bc:43:81:60:6f:
                    0e:e5:1c:d7:27:cd:f7:b7:f5:6b:cb:aa:b7:c8:86:
                    cd:73:49:2a:17:f7:70:65:2f:98:b8:03:ca:88:2a:
                    3d:99:b0:19:65:96:19:7c:a8:91:8a:ad:75:64:9a:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0B:88:F5:19:A7:D7:53:C6:48:47:A4:80:D5:1F:F5:E5:05:34:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/48742374-4f94-3610-be59-8ac53f061c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:81:e0:91:df:96:db:0c:35:41:3a:1b:62:66:2d:f4:d0:40:
         a9:c0:9c:74:a8:eb:e7:02:b4:20:82:7d:7d:ab:a4:fe:49:57:
         fb:9e:48:de:2c:e8:26:3e:6f:88:aa:2a:8a:dc:82:aa:27:69:
         28:4d:1b:76:ba:a2:30:15:71:9e:e5:78:99:c8:59:5c:8d:07:
         63:c6:8c:e6:1a:01:28:f2:7a:f2:12:34:08:33:a1:e8:c9:7b:
         07:c4:fc:43:64:6a:62:b3:54:60:c7:87:66:17:dc:75:c3:69:
         f8:f7:3b:9a:f9:fa:be:02:10:aa:0a:15:71:4f:d5:0a:39:99:
         31:c8:c0:ae:64:37:2f:81:7b:6d:fe:58:dd:47:e6:4a:2a:37:
         5c:4f:02:18:84:b8:5b:3d:ed:69:db:1d:d1:1e:b9:f9:74:80:
         76:00:d1:de:40:3e:cb:d8:71:bb:36:70:fd:c7:4a:fa:a2:f5:
         ab:eb:24:53:e4:a3:bc:42:fb:e3:71:89:ce:8a:da:1d:ba:49:
         6d:bc:f2:2d:8c:ec:13:20:cd:89:c6:47:c2:82:6d:97:78:43:
         94:bd:69:7d:f5:84:77:61:78:67:bc:71:d5:a4:bd:b8:78:0c:
         4e:65:38:7f:55:f8:85:b5:73:6c:ab:45:f5:e4:85:1b:04:d0:
         d6:34:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:47 2025 by rpki-client