Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
File:                     6806c449-9b48-3ef6-8232-47296eb5e804.roa (raw, json)
Hash identifier:          /Er/t+CqgP9A4Zw+9zutwhmXBSxXlbeJITAgkUQybUk=
Subject key identifier:   B2:2D:85:34:7D:65:68:8E:8F:B7:E2:81:31:33:41:BA:D4:34:61:03
Certificate issuer:       /CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
Certificate serial:       010D0C9F4328584B8917763F4021838ABDEAF680
Authority key identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     46886
IP address blocks:        104.36.252.0/22 maxlen: 32
                          104.193.128.0/22 maxlen: 32
                          158.51.192.0/22 maxlen: 32
                          165.140.16.0/22 maxlen: 32
                          170.178.140.0/22 maxlen: 32
                          2602:ffa4::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:76:3f:40:21:83:8a:bd:ea:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=d4aa591c-0228-4cb4-be5f-b2dcdce12106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5d:8b:e8:30:60:e0:bf:b6:0f:2b:18:f7:33:
                    1f:5c:e7:de:a1:5a:88:3d:fa:57:62:cf:2b:2a:f4:
                    46:e2:45:10:e7:73:f7:57:17:1f:7a:e5:cb:2c:c5:
                    3a:c1:46:5f:1a:77:06:b7:f3:66:eb:83:61:66:a9:
                    9a:4a:c5:0f:e2:e6:46:b4:ef:53:e4:09:7e:6d:4e:
                    c4:91:89:52:df:98:d1:6d:f6:4b:42:24:ef:ed:ec:
                    f1:32:52:34:97:60:da:e8:3a:53:45:ed:4b:e6:fd:
                    96:b9:36:6c:03:2e:3c:a8:fa:e1:cf:13:d8:0b:b1:
                    05:0f:02:a0:16:53:de:06:a6:4c:11:90:a7:84:4d:
                    34:ea:35:b3:42:ed:76:e2:e3:96:ee:af:2c:c0:f5:
                    59:bb:33:4b:f0:d6:84:cd:dd:39:88:20:d0:1b:eb:
                    c7:9c:97:ee:ca:b0:d7:fa:cc:d4:6d:ff:89:98:91:
                    81:01:fd:93:c9:62:10:b4:75:c7:df:04:e5:95:c4:
                    58:c4:81:96:dc:98:6f:84:b1:95:46:a5:b6:ee:a5:
                    65:f0:44:c0:59:2c:04:39:33:da:e9:8e:60:5c:2d:
                    98:41:2b:7e:41:9c:f9:33:b8:09:b2:21:29:32:dc:
                    0c:83:95:03:61:60:49:d1:44:a7:fc:b6:42:c5:7d:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2D:85:34:7D:65:68:8E:8F:B7:E2:81:31:33:41:BA:D4:34:61:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/6806c449-9b48-3ef6-8232-47296eb5e804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.crl

            X509v3 Authority Key Identifier:
                keyid:AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.252.0/22
                  104.193.128.0/22
                  158.51.192.0/22
                  165.140.16.0/22
                  170.178.140.0/22
                IPv6:
                  2602:ffa4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:3f:1e:36:23:17:43:b5:85:dc:db:dd:f7:b9:38:f1:8a:
         16:ef:a1:d8:0f:65:7e:0f:08:fe:4f:45:43:d1:ce:5f:96:dc:
         88:8e:29:4a:8b:5f:e5:e6:e8:ab:27:c8:91:64:a7:13:d7:ee:
         8b:2e:3b:12:42:2a:8a:f1:bf:3c:d2:66:66:2f:58:d8:04:ad:
         f7:42:e2:d3:a1:e5:35:87:d0:42:6d:83:6d:5c:3b:9e:b5:19:
         5d:36:29:2d:7b:f2:ec:d9:67:f6:50:8c:6f:9c:63:10:95:81:
         88:81:c9:73:93:93:3a:fa:d1:e1:b9:99:84:b6:83:bb:29:ad:
         6d:89:43:ff:20:5a:ec:91:31:cd:08:72:6c:f0:97:c3:0d:d0:
         36:d1:f3:d0:54:14:14:5a:ef:a0:f9:d1:db:e0:0f:ae:e3:cb:
         c3:58:3e:61:bf:3f:cf:0b:0d:3d:00:4c:bb:2e:6e:6f:ad:83:
         20:d4:5c:cd:d8:f7:1e:ee:1e:a2:f4:00:39:0a:c3:46:60:d7:
         85:89:0b:de:b0:df:41:de:8c:2f:c7:b2:a0:60:43:4d:ff:1f:
         f5:63:8b:d1:c3:d0:51:44:b4:26:de:06:ef:30:3d:1a:6d:4a:
         c7:fc:c4:ce:64:ae:61:c7:ee:2a:8c:72:f5:5b:d8:d8:b1:ad:
         dc:e1:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:40:09 2025 by rpki-client