Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/ed400f92-a244-3f75-b1d5-ce56f50ce552.roa
File:                     ed400f92-a244-3f75-b1d5-ce56f50ce552.roa (raw, json)
Hash identifier:          DKxeUdkXevwpSGLi3YxRAfzhImiETs4F5olCFypEd7w=
Subject key identifier:   62:43:F8:2C:61:21:CF:A6:56:07:BD:8D:E0:F7:C7:6D:57:64:BD:96
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F4328584B6E9200BC675C675A80213280
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/ed400f92-a244-3f75-b1d5-ce56f50ce552.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     14618
IP address blocks:        206.15.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:92:00:bc:67:5c:67:5a:80:21:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=4b70feb7-7a66-4c66-909d-57e936c69df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:48:9b:35:0c:a5:c6:f7:0f:f0:f9:68:d6:ed:
                    3d:77:61:ae:fa:1c:0d:1e:20:b5:29:ed:fd:4f:d3:
                    d7:e6:ae:de:16:d3:f4:10:02:2b:98:15:7a:1a:f5:
                    8b:1f:07:2b:40:4a:61:af:a5:8f:d5:35:2a:51:8c:
                    e3:a3:d8:4b:77:1b:9c:74:05:79:f3:ad:b5:a7:f2:
                    23:41:7c:45:2b:52:76:d9:9f:67:5d:2a:e7:f0:b8:
                    db:0b:e7:dd:b3:83:41:ee:59:3c:ac:5e:7c:b6:ea:
                    61:4e:0d:98:d3:68:b0:1b:96:1e:ec:4e:b2:60:47:
                    2d:25:ad:1d:4b:fc:e8:a4:c0:da:d4:4a:1c:4e:9a:
                    be:52:fa:b3:77:69:c1:f1:3c:06:0b:14:dd:6f:2e:
                    5b:10:b2:69:d6:97:0e:8c:55:a1:47:a8:a8:3d:77:
                    f8:01:6c:08:2d:a7:89:ca:96:f2:a1:50:8f:18:2c:
                    dd:98:06:1f:9c:3b:16:c0:b0:68:a3:2e:3d:3f:2a:
                    c3:43:10:a7:af:6e:3c:84:79:7f:c4:99:d4:60:7b:
                    76:e8:57:d7:4c:8f:82:ee:16:bd:26:80:53:6f:83:
                    52:e5:f7:92:f2:52:8a:71:3c:b6:bf:4b:d0:3e:25:
                    c9:28:09:2f:9a:f6:bc:3f:af:25:8f:1b:ad:26:2f:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:43:F8:2C:61:21:CF:A6:56:07:BD:8D:E0:F7:C7:6D:57:64:BD:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/ed400f92-a244-3f75-b1d5-ce56f50ce552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:de:3c:25:f6:a6:ae:c5:92:e6:f9:63:96:9f:29:cc:46:
         96:90:da:52:2f:00:c9:4d:5c:bc:0c:bd:bb:fd:33:86:5a:4e:
         22:24:a2:dc:f4:fd:5d:a0:72:c3:fb:fd:b8:98:dd:2c:da:c7:
         00:25:b9:d7:f9:df:9b:4c:f4:df:96:e2:ab:55:10:e4:a4:1c:
         7f:90:28:5d:13:5e:85:f6:c7:87:c5:b2:a5:d6:9b:bf:2f:58:
         2c:96:a5:e7:1d:ce:ed:65:32:c7:00:d8:96:a4:00:71:a7:61:
         f3:9a:fd:06:68:c5:51:f0:26:ca:85:04:d8:d4:41:ac:31:29:
         ff:a0:9c:92:83:f5:45:7b:fe:ba:83:98:bc:c0:e3:b3:34:36:
         62:2a:18:a9:8e:a0:36:1f:3d:4c:00:a2:97:d9:e3:0d:14:df:
         41:f4:a3:9a:d3:97:22:c2:8e:db:c9:10:00:12:38:05:2a:5b:
         25:82:f3:b3:c1:20:19:fa:fa:23:0e:bd:40:b0:4a:af:d9:e2:
         94:6e:dd:43:f1:b9:57:95:04:66:0d:69:29:e7:35:13:7c:d8:
         eb:80:ad:17:02:1b:e9:2c:5c:c0:99:88:96:c8:69:0a:b6:e7:
         ca:fc:c1:58:b2:73:ac:40:fd:df:5d:2c:b7:04:a4:6e:70:35:
         82:04:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:29:17 2025 by rpki-client