Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f83a1185-9bbd-341e-96d1-df7756f22434.roa
File:                     f83a1185-9bbd-341e-96d1-df7756f22434.roa (raw, json)
Hash identifier:          AhcDf84IuLiIBGpro8XnqT9ZZYwfSmM//4nKXFCnSDI=
Subject key identifier:   73:6D:6C:C7:CB:5B:29:0F:2F:B0:11:D1:CF:E3:7D:8C:D7:B3:91:A7
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CC8EBC180FC61D95B073C0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f83a1185-9bbd-341e-96d1-df7756f22434.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        69.73.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:8e:bc:18:0f:c6:1d:95:b0:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=eb1889d2-0d34-4148-b317-79336a269148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:cc:0e:5d:47:9a:3a:45:c8:10:df:0a:de:
                    8a:3b:ff:8b:f0:2c:e6:55:4b:0d:9b:ce:c3:84:68:
                    70:2a:fb:1e:75:eb:9c:dd:bf:07:e0:d5:4b:90:ce:
                    c0:4c:3c:cf:cf:60:4f:97:0a:18:67:c5:7b:96:14:
                    74:fe:78:91:5d:96:18:71:b5:f4:d7:26:92:25:be:
                    9d:e3:ab:e8:19:95:3c:1b:9d:dd:6a:a6:58:40:4d:
                    0f:0f:d3:c0:ef:b0:8c:92:32:69:87:8c:fb:66:2c:
                    57:79:37:64:1d:74:b7:9f:8e:91:d5:b4:16:79:b2:
                    4d:a3:42:25:43:a4:34:80:a9:5d:55:de:59:9d:46:
                    84:c2:0a:61:27:46:7d:60:61:9b:fe:a1:4e:7a:c4:
                    fe:de:f5:73:b5:8e:b7:a6:3d:98:66:a1:76:06:c4:
                    67:e1:25:3c:51:18:b5:9a:49:b7:7f:ff:ba:68:18:
                    6c:63:16:3b:08:0e:e5:e7:2b:e8:a4:b2:94:76:a5:
                    36:19:c1:c9:96:96:41:fd:3d:b6:b2:e3:76:05:07:
                    8b:a0:c2:26:df:20:15:44:16:a8:61:ca:48:9b:9e:
                    14:f4:67:e3:e7:74:c0:e8:ab:ce:44:30:2a:f4:a4:
                    4d:a6:28:66:c9:c7:4b:95:e1:87:31:83:60:4c:b7:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6D:6C:C7:CB:5B:29:0F:2F:B0:11:D1:CF:E3:7D:8C:D7:B3:91:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f83a1185-9bbd-341e-96d1-df7756f22434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9f:f0:a9:90:f3:0a:d0:6e:6f:8e:c4:51:f6:c9:dd:31:63:
         be:17:97:d2:7e:8b:58:d8:60:3c:fe:d5:e4:62:99:00:f8:b0:
         f3:be:05:c6:0a:ad:b6:99:a2:fe:4b:0b:d9:cd:0f:98:95:ee:
         fe:2f:77:1e:22:f9:19:88:ea:58:92:37:6f:9f:e7:ca:6d:3a:
         84:5b:1d:c3:72:99:68:c8:1b:f7:93:95:48:d6:03:22:eb:0c:
         2d:41:49:d3:12:62:54:20:22:9d:f1:bf:e9:ef:84:06:8d:c1:
         eb:4d:98:5c:c5:72:d4:63:dd:2c:af:e0:ec:3c:23:fe:4c:50:
         13:98:3c:1c:55:b2:be:37:ed:68:ee:72:f0:c4:58:31:3f:45:
         ab:99:61:71:73:43:42:68:1f:70:e3:27:32:ed:17:de:49:a2:
         86:d1:b3:9e:4f:ab:c6:74:d1:d9:b0:50:07:f4:f6:b6:74:53:
         e8:72:5b:1a:7e:0a:e1:9e:20:b4:94:b7:3e:80:81:34:e7:ea:
         14:e9:05:59:8c:89:60:57:f2:d6:43:bb:d0:fd:14:64:59:04:
         69:de:4c:75:de:b6:c7:2c:37:e7:3c:0b:fc:83:1a:d8:d9:1f:
         03:c2:14:0f:ad:4c:8b:28:5e:da:ba:d5:75:13:77:8c:55:7e:
         c3:db:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:07:38 2025 by rpki-client