Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa
File:                     8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa (raw, json)
Hash identifier:          KgLeAzX5RLM+Irazpa+mPd9nKHusf7EqRFvR2D6tlWE=
Subject key identifier:   DD:50:70:AD:6F:40:77:89:AE:7F:91:5D:40:65:30:BF:25:AA:31:6B
Certificate issuer:       /CN=e22f9709-dbc2-4fbd-a776-befd371f460a
Certificate serial:       010D0C9F4328584B5141C14EDC84953FCFAFFE40
Authority key identifier: 0A:28:4D:DF:BF:29:B1:DD:48:7F:A1:A9:C6:15:B6:10:76:7F:50:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     32728
IP address blocks:        205.132.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:c1:4e:dc:84:95:3f:cf:af:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22f9709-dbc2-4fbd-a776-befd371f460a
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=6ee0b978-4984-4cc1-b4f1-5673b24b1b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:26:a4:db:fa:45:bc:c4:10:90:b5:b2:15:
                    ce:de:cc:61:53:97:cc:a2:8d:46:74:7a:7a:a5:6b:
                    27:5d:09:cf:76:9b:99:c7:b9:de:84:06:ce:51:3d:
                    a6:40:f7:2c:0d:16:8f:cb:92:28:c0:5f:2a:b5:02:
                    e9:6b:77:7a:f7:e5:c8:a2:a7:b5:40:35:51:fb:8d:
                    4d:dd:0e:3f:75:91:8a:7f:3d:5b:f4:15:d5:a7:75:
                    85:da:73:bb:a4:81:d4:5b:82:7b:b5:72:19:66:56:
                    6a:20:8b:45:4a:ad:f0:20:11:5a:de:45:65:53:6a:
                    ff:d9:3e:c4:90:00:40:e6:9b:d1:5f:0f:68:dc:52:
                    d2:31:4b:49:34:30:bb:c9:a2:c5:0a:be:18:ab:ee:
                    d0:63:01:79:21:88:a6:44:06:b2:db:ab:1e:1c:e0:
                    97:d5:3e:7b:ec:c9:5c:bb:16:eb:a2:49:92:94:c0:
                    8f:22:6c:39:8f:0b:d7:81:28:91:39:e7:bb:e9:d3:
                    f8:4d:7c:8f:8a:aa:7f:94:50:b2:9e:39:4f:2d:09:
                    c5:73:fc:d2:3c:1e:ab:19:08:85:d7:6d:d1:9b:02:
                    7d:ad:57:81:1a:9c:86:3a:c3:35:d7:75:0a:1b:06:
                    68:83:a7:d0:93:63:91:57:b1:b0:bb:8f:69:46:c0:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:70:AD:6F:40:77:89:AE:7F:91:5D:40:65:30:BF:25:AA:31:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:28:4D:DF:BF:29:B1:DD:48:7F:A1:A9:C6:15:B6:10:76:7F:50:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.132.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:54:e9:6e:08:e2:93:07:f8:1d:10:58:5a:68:be:0f:c9:6a:
         c9:32:ea:6a:24:ff:4e:59:c5:d5:c4:04:5d:41:a8:34:2a:ef:
         7e:d0:67:9f:37:ce:4f:62:10:9e:d0:92:2b:e8:13:02:55:7d:
         4f:5f:32:d3:a8:d0:ba:ae:34:7e:1c:43:35:af:41:d5:ed:35:
         53:f6:b9:8b:fc:18:80:0a:1e:93:47:3a:a5:8e:b8:2f:e5:27:
         03:a9:71:1d:76:32:36:f5:4b:13:4b:93:ed:d4:8d:8d:1a:3b:
         68:7e:1b:4e:dd:e3:79:b0:4b:f5:88:a7:7b:57:dc:67:b8:35:
         6f:d1:08:88:af:d0:42:53:53:e9:16:7b:17:c2:da:dc:c1:25:
         f6:3d:87:ef:96:3d:5e:ef:75:08:74:3a:69:ac:13:34:e9:fb:
         4a:75:06:8a:ee:a2:6f:97:dd:c6:a6:51:b5:a3:d5:27:99:77:
         72:e7:d5:46:c5:96:d7:5c:b8:b6:1d:19:00:3b:c5:2f:54:09:
         a0:a1:ff:a7:9a:b9:75:c1:88:28:db:11:66:d0:4e:41:40:03:
         a4:2b:d6:11:b1:e6:06:d6:4b:82:e8:2e:57:b7:e4:96:59:39:
         54:bc:73:f2:4e:62:4d:78:f8:72:a9:e2:1b:8f:d7:eb:af:67:
         33:06:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:41:41 2025 by rpki-client