Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/62ce336c-5ac6-3ec9-a29b-4e733b44811e.roa
File:                     62ce336c-5ac6-3ec9-a29b-4e733b44811e.roa (raw, json)
Hash identifier:          bEkc6mdOzLeMDq1kw5xmGTA3QLw9Hz5MK6H9d3NWnfE=
Subject key identifier:   BC:9D:70:BD:AE:8C:1C:74:D8:F7:08:E8:D6:16:9B:12:FD:96:BE:84
Certificate issuer:       /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919
Certificate serial:       010D0C9F4328584AFEE6CE68058586F1C1190A00
Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/62ce336c-5ac6-3ec9-a29b-4e733b44811e.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     3356
IP address blocks:        205.233.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ce:68:05:85:86:f1:c1:19:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=78192dcc-a4a7-4d64-be60-c7f0642814f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:fe:dc:58:03:19:97:81:05:24:b2:65:2b:
                    2c:64:d1:69:95:b4:8c:20:df:b6:5c:6a:04:6c:44:
                    c0:20:1d:fe:4c:6d:a3:c1:19:79:86:14:73:e9:d0:
                    16:1d:e5:0d:5c:54:7a:a9:1f:57:76:6a:f3:9d:72:
                    6d:cf:57:de:4d:16:66:ac:06:0f:46:14:45:0e:26:
                    f5:b4:c0:89:64:aa:c0:37:18:e4:2a:3b:24:94:ba:
                    c7:e1:5b:b2:de:aa:86:d7:72:51:50:f5:eb:84:33:
                    2e:0a:49:6a:e4:2a:11:f3:ae:b5:f8:14:9a:8a:9f:
                    a2:b1:ad:dc:1f:a9:6a:bf:16:60:60:56:32:31:58:
                    02:41:2e:75:65:ef:22:27:5d:14:59:59:ad:fd:18:
                    17:a2:5e:ec:1b:01:48:49:9f:25:60:05:f0:4d:ff:
                    3a:f6:41:9d:13:d5:ea:44:e2:b2:7f:af:50:1f:c6:
                    72:46:c5:9b:2d:70:36:e4:b7:f4:51:31:cf:f7:2a:
                    61:fd:03:68:45:44:55:42:1b:60:5d:66:20:61:5b:
                    38:c6:d3:ed:fd:ca:49:62:df:bc:42:92:f3:34:4a:
                    eb:30:e4:76:20:a7:ec:0d:34:4c:e7:69:f6:2b:7d:
                    6d:9c:07:21:02:03:fd:91:df:8c:e1:59:97:8d:ba:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9D:70:BD:AE:8C:1C:74:D8:F7:08:E8:D6:16:9B:12:FD:96:BE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/62ce336c-5ac6-3ec9-a29b-4e733b44811e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl

            X509v3 Authority Key Identifier:
                keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:1d:eb:05:69:b1:0b:53:9d:bc:89:eb:05:b2:db:d9:d6:
         10:7c:d7:eb:09:86:ab:0f:34:b6:7c:8b:cb:5b:28:49:33:4b:
         ef:1a:1d:28:17:8d:69:eb:73:e1:5d:6b:c2:56:23:c6:98:dd:
         10:d9:ee:e9:d6:c8:1a:ce:a7:ab:e9:30:43:43:5b:4b:af:27:
         33:36:c9:8f:c2:c5:f0:d5:25:8c:c9:ff:79:86:e2:7b:16:48:
         4a:7b:15:12:f4:04:f5:33:16:52:9b:d3:d3:bc:4e:34:dd:8e:
         fa:a6:02:fd:ca:a4:80:b6:f8:5d:86:81:98:35:ba:78:97:7b:
         9c:c4:28:44:c0:7b:9f:6b:aa:d2:d5:31:d8:58:ee:bd:a0:1d:
         aa:e6:5c:65:d9:b5:12:c8:81:fd:8d:cd:f6:34:c0:70:3f:c9:
         fa:74:f9:5e:29:52:d4:a8:b1:7f:7e:e6:a8:8f:99:53:b3:cf:
         ac:91:36:81:c5:52:42:7a:1a:d6:56:27:2d:d0:de:2c:52:99:
         90:96:8c:40:0e:52:68:d0:30:77:f6:6b:51:09:e2:39:f9:a0:
         ec:71:80:e9:79:a0:ad:d6:cd:61:15:f7:42:1b:75:6e:09:a0:
         6a:26:af:91:9a:f7:dd:14:c5:b2:16:94:41:7d:d3:bf:6c:d1:
         90:be:6a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:27 2025 by rpki-client