Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa
File:                     4a99249e-6e25-30fa-8e16-0fa2326d6959.roa (raw, json)
Hash identifier:          h5nRl59xhpTob6BLZrNOWzT9fHgugWA6QfXERWneIuw=
Subject key identifier:   CC:8B:B3:A1:20:2A:B5:DA:11:3B:C5:7E:1D:7C:4B:14:ED:92:0C:FF
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584B758C9477DA36423C249E16A0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     209854
IP address blocks:        172.102.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:94:77:da:36:42:3c:24:9e:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=72884fe0-dac2-4bb7-9c9e-15b243912d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:37:95:f4:13:15:02:ff:b8:46:0c:75:19:ed:
                    e7:d2:d4:86:1c:7c:b7:97:6c:22:79:e4:a2:ea:65:
                    98:83:6f:23:17:fa:f0:bd:b2:78:70:6a:39:2e:4f:
                    e0:9e:ce:d5:29:e3:81:21:c6:68:ff:f7:9d:1e:7a:
                    20:26:3e:d8:db:5d:bc:a2:6d:40:c5:72:c1:dc:e7:
                    37:fe:c3:62:85:62:f5:ad:5c:f3:75:f0:f1:95:01:
                    a1:98:52:fb:e3:bb:a8:ac:a7:87:40:7f:5d:49:06:
                    11:98:93:66:2d:96:bb:66:dd:f1:79:ba:09:c3:d2:
                    ae:ea:e0:57:17:88:d5:38:0b:4d:72:c6:7f:72:52:
                    b1:12:a1:81:c1:06:53:44:93:cc:07:a8:05:08:9e:
                    cd:d8:29:c9:4b:22:fc:9c:50:5a:e2:c6:74:a4:a1:
                    2c:84:d5:e1:09:17:e2:62:52:70:cc:58:c4:2f:a7:
                    64:2c:ad:e3:7b:45:dd:cd:b9:83:9a:a0:4b:49:ac:
                    b9:c9:07:08:a5:43:d0:3b:de:c9:e1:b8:db:aa:2d:
                    14:22:2f:e4:70:49:29:cd:4d:3c:d0:d5:1e:1e:ee:
                    98:ba:0c:3e:f7:5d:73:44:0c:9a:ba:bc:0f:84:47:
                    15:fc:30:01:82:29:77:71:12:98:1b:99:04:d8:5b:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8B:B3:A1:20:2A:B5:DA:11:3B:C5:7E:1D:7C:4B:14:ED:92:0C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c6:a6:8a:9c:56:39:23:1d:5d:39:ba:60:73:4e:bc:b8:77:
         c2:e9:9e:35:74:ab:81:8f:8e:37:a6:60:7c:88:db:37:0a:ba:
         33:01:0f:af:be:68:4d:22:bd:71:6f:a1:fb:fd:ec:f6:bd:92:
         c9:19:76:7b:6a:72:bc:5f:6f:33:90:37:a3:9b:8a:62:57:9e:
         99:15:22:4c:f5:f5:b5:9c:9f:ff:2d:dd:e6:b0:83:f6:46:90:
         f9:36:a0:99:c2:87:01:3d:a7:b2:1b:53:1b:e3:5a:5b:78:f9:
         f1:db:5a:ed:69:3d:01:26:bf:9a:6c:d8:93:2b:55:61:53:62:
         ce:fa:32:3e:11:39:64:d7:68:b1:ef:4d:bd:47:d4:ab:41:40:
         e2:98:fd:f1:12:fa:db:94:87:29:f4:85:f5:6c:79:9f:0b:84:
         f7:7f:b5:7d:86:6e:df:b7:02:a2:47:91:b2:7a:ca:67:af:74:
         e7:be:79:aa:26:e0:3e:c8:a8:74:9a:f3:5a:bc:e4:6f:ef:89:
         92:5f:6f:92:4c:93:e3:6a:b2:88:a5:a4:db:99:22:9b:ff:0f:
         dd:b0:31:7c:63:2d:8f:57:05:c7:9f:b0:a4:aa:5e:7b:ec:c1:
         9a:f5:06:e3:9c:b3:bc:d9:26:dc:1e:53:b6:c6:e1:de:c2:c8:
         90:46:66:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:38 2025 by rpki-client