Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa
File:                     685ceee8-b900-37c5-8e47-74eadff0d2fe.roa (raw, json)
Hash identifier:          lfWAua01+Jr8NJSHJiYZrJwxMmfXCkLurlD0FIz0B2k=
Subject key identifier:   C9:0A:3C:E0:7E:2C:67:6B:81:7A:03:C3:2D:57:31:31:9F:9A:2D:49
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584B5C6C770F47DC2A9B84B6D180
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     62468
IP address blocks:        107.151.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:77:0f:47:dc:2a:9b:84:b6:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=0046440f-86cb-4dee-8bd8-6ee6719985d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:ea:3c:23:f8:86:ed:1f:2f:ba:33:56:8a:
                    d5:5e:58:1b:28:ad:55:0e:6a:0f:2e:73:b3:6f:d1:
                    64:7c:bb:d8:ed:34:1e:0a:a5:f5:1e:e3:e4:a1:74:
                    8a:e6:48:51:5f:cf:18:12:a6:51:73:5e:ab:0d:03:
                    e6:bc:99:b6:5a:bf:c1:43:61:df:a1:f6:61:0e:53:
                    b1:e3:ff:5f:ea:b3:ce:c3:e0:ba:db:db:a6:45:1f:
                    90:74:df:3d:b8:cb:ac:84:c5:01:3b:8a:44:48:55:
                    50:29:1a:12:9d:21:ac:5c:96:1f:73:4e:3c:b7:ab:
                    fa:b0:14:f4:82:09:33:d9:89:03:b0:48:92:80:91:
                    9a:91:65:a0:c4:11:50:46:d9:c6:ca:65:f0:bb:18:
                    7c:b0:59:84:32:16:fe:e9:4f:3e:e1:40:35:71:89:
                    b2:53:ed:40:be:61:ed:1b:01:f5:74:08:03:4e:f5:
                    8d:a7:3e:b7:1d:b4:7a:d8:2d:0d:2e:f3:46:66:60:
                    be:0e:44:92:ef:42:ef:bf:91:7b:4a:e4:43:6d:58:
                    c4:90:31:76:cd:8e:b6:4c:d2:56:3d:05:35:6f:e8:
                    8d:a1:0c:45:c5:7e:3b:57:14:cf:c7:2b:b9:23:a6:
                    72:33:c4:6a:10:f8:b6:a0:ac:51:a9:c5:61:6b:d2:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0A:3C:E0:7E:2C:67:6B:81:7A:03:C3:2D:57:31:31:9F:9A:2D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:1b:f0:52:d3:b8:07:c9:f5:8b:da:20:3a:ef:c4:dc:8e:3e:
         ac:ad:b8:0e:44:94:d5:c4:e0:41:58:d4:59:50:65:5f:92:bb:
         d6:e4:a2:ed:bb:e8:be:c7:1f:2d:98:96:47:50:a9:8e:68:6c:
         ee:d7:3f:fa:de:d7:43:53:d7:1f:08:33:87:55:56:8a:2b:63:
         f6:79:6f:37:06:9f:d5:ab:ae:c7:04:58:14:0d:d9:23:7c:60:
         f0:03:f1:7b:83:bb:b8:3c:31:4c:75:68:f0:35:09:96:30:ab:
         14:e6:69:b2:7f:d2:78:ea:bd:b6:74:1e:30:ad:bc:84:d3:9b:
         e4:7e:3e:45:f4:3c:a6:6b:71:d1:9e:85:56:c6:e4:71:da:31:
         ac:73:22:2d:ac:51:53:54:b3:c6:6f:4b:1d:49:13:70:d8:a5:
         3c:5e:02:ee:c0:bb:aa:80:20:38:c3:fc:55:5e:f0:df:6e:60:
         86:0a:da:ac:43:8f:74:5b:96:69:0e:6d:be:cf:be:0a:1b:13:
         46:df:5e:e7:1a:a2:6e:28:01:5b:ad:6b:0a:12:45:4a:94:d3:
         b3:7f:eb:8e:18:50:f7:6d:f1:61:35:65:cc:48:f9:84:b9:bf:
         de:87:78:5a:f0:30:82:28:dd:89:72:af:b3:e8:2e:a3:d4:4f:
         bd:a7:84:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:58 2025 by rpki-client