Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
File:                     9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa (raw, json)
Hash identifier:          ossh/RWpFeoftKgfy6tSQYWehQu663IoCL3/MZTMK4c=
Subject key identifier:   3F:D9:7E:0F:44:D3:63:10:7C:CC:F3:24:1D:5B:19:DC:C6:5E:5D:33
Certificate issuer:       /CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
Certificate serial:       010D0C9F4328584B21CC322FFF0546D9C1EB80E0
Authority key identifier: 96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     62648
IP address blocks:        72.22.192.0/21 maxlen: 21
                          209.172.16.0/22 maxlen: 22
                          216.245.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:32:2f:ff:05:46:d9:c1:eb:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=458f3fb8-acc6-4c8a-9cd2-c1aa4905046d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:1f:cf:45:82:27:9f:aa:67:d4:01:c2:80:
                    2c:bd:68:68:50:4b:71:85:15:49:13:60:7a:12:48:
                    e1:be:ca:ee:33:e7:b9:2f:89:a8:2b:ff:fa:89:af:
                    65:ca:d3:f9:56:49:1f:a5:9d:ff:b9:26:21:b7:7e:
                    b8:51:2d:3d:ae:d6:c4:29:50:fb:f2:1e:44:b6:a9:
                    84:e3:41:60:1b:93:fc:1c:a5:6e:e3:72:39:91:01:
                    92:d4:ef:e5:ca:9d:7b:45:8e:07:97:37:4a:2b:63:
                    3a:4b:c1:15:3f:b1:bc:2f:00:73:6b:70:b5:87:54:
                    90:df:1c:d1:ba:6e:aa:a2:1f:b9:b9:07:47:ea:95:
                    9d:fa:26:c9:17:48:e9:9a:87:f4:35:ea:d1:d9:05:
                    84:5e:ba:24:a9:cc:21:b6:6f:2d:7b:33:2e:40:46:
                    1b:f4:cb:02:bc:11:7e:aa:a1:87:c8:60:ac:8c:db:
                    9b:2c:0a:95:c5:29:7b:4c:0f:e9:f2:f2:9e:39:30:
                    8e:ed:13:1c:1a:ea:5c:da:8b:3a:39:1d:f3:9e:5f:
                    58:8e:c3:f6:8b:61:73:7b:da:a2:24:76:d1:81:e2:
                    f4:d1:2b:f7:f2:23:e7:36:87:7d:6e:c8:4f:ec:8e:
                    3f:98:b0:7e:3c:38:12:1b:8d:a8:4d:56:0d:37:b9:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D9:7E:0F:44:D3:63:10:7C:CC:F3:24:1D:5B:19:DC:C6:5E:5D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl

            X509v3 Authority Key Identifier:
                keyid:96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.192.0/21
                  209.172.16.0/22
                  216.245.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:34:28:d1:9a:50:fc:b4:a3:2f:44:cc:9f:f0:07:be:bf:
         5a:d1:0b:a9:bc:d9:c6:18:3c:83:1f:92:86:bc:13:34:2f:b8:
         2c:f7:0e:b8:f6:a5:f9:73:4a:fe:9d:38:79:8a:da:60:8c:a6:
         02:95:8a:c9:dd:20:71:92:d9:98:2d:49:40:76:91:3f:b1:f7:
         5c:23:61:83:ed:30:28:29:c6:e5:1c:5a:0b:9c:29:2d:c2:4b:
         ed:8c:98:ff:91:d0:e2:61:1b:1e:d2:e8:45:0d:5f:ee:36:c5:
         7d:ba:1a:fb:c4:fe:5b:64:d8:79:b5:e9:ec:b2:3e:fb:4c:18:
         01:c6:00:1e:8e:6c:1d:e6:ea:2d:f2:ba:cb:00:44:80:b2:f0:
         54:eb:6f:48:ba:a9:5e:9f:29:a1:74:9e:03:41:13:81:57:ea:
         be:bd:5d:2e:c3:da:56:79:fb:b4:7b:6e:c6:d6:86:e8:cd:bb:
         c6:d3:ab:d3:5b:ad:43:71:91:6b:8b:7d:c3:fa:5a:e0:27:e1:
         19:00:08:ff:54:36:59:a7:b9:2d:4d:16:36:2d:ff:80:6f:7c:
         2b:e8:46:34:b7:e4:b7:ef:38:6d:f9:76:2a:f8:8c:0d:21:c3:
         9f:de:b7:e1:6c:d3:2a:8c:30:a1:41:4c:3c:f0:ab:2d:6e:ad:
         df:dc:42:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:20:55 2025 by rpki-client