Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/04fa2c84-1de0-3787-83b3-78af88443cab.roa
File:                     04fa2c84-1de0-3787-83b3-78af88443cab.roa (raw, json)
Hash identifier:          4gLleQ42gA3xEQvVYfLB5V955VXnwWXrFBxWyVRPvpI=
Subject key identifier:   61:D0:B4:18:EA:24:0E:49:3A:B6:DF:54:41:90:03:5E:0F:CC:9E:8C
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B44B1BD4B562EF40754B8F6C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/04fa2c84-1de0-3787-83b3-78af88443cab.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     11233
IP address blocks:        69.1.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:bd:4b:56:2e:f4:07:54:b8:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=868b62f1-04e7-4fbd-a623-dfb999940238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e7:d5:74:15:98:6f:a8:2b:47:4e:ce:d5:f5:
                    c0:f9:ac:67:99:43:0c:fa:41:33:4b:dc:81:5e:c5:
                    f7:5f:82:c9:d9:d3:56:b7:95:05:7f:b3:56:66:8a:
                    55:25:4e:a2:4b:13:06:1a:e5:01:43:a1:8d:51:97:
                    a6:e6:c7:39:0c:d4:58:6e:bb:f7:f5:33:6f:44:b2:
                    e6:ed:46:3e:4c:be:a9:e5:b1:cd:a6:73:76:27:5a:
                    b1:5d:8d:ec:cb:81:0c:8a:59:51:1f:8a:24:51:1d:
                    7b:32:21:f7:96:83:ac:82:eb:09:82:eb:e0:db:24:
                    ea:5e:d3:5f:fb:20:01:c4:ed:01:6a:b1:13:51:fd:
                    e3:eb:47:a4:e5:e3:29:1a:5f:e3:fd:2f:18:5c:40:
                    9e:b5:a1:84:b8:fa:40:5f:4a:8b:de:a2:9b:e3:bd:
                    d7:6e:2d:4d:e6:f8:d6:37:1b:b7:51:f8:06:e8:0c:
                    63:87:ca:42:a5:93:85:7e:83:c1:36:e8:ec:8a:59:
                    e6:70:90:0d:64:70:01:fc:a6:0c:37:84:99:98:22:
                    e4:35:c3:93:87:71:1c:72:76:97:cf:da:48:72:99:
                    28:ce:53:91:20:bb:4b:f2:89:6c:9b:46:78:9a:63:
                    c8:c9:69:9f:5d:2a:45:5f:11:4e:9d:bb:24:b4:29:
                    c5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D0:B4:18:EA:24:0E:49:3A:B6:DF:54:41:90:03:5E:0F:CC:9E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/04fa2c84-1de0-3787-83b3-78af88443cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3d:bc:10:de:91:c2:6a:f4:df:8a:11:bc:ee:19:0f:35:0c:
         9c:5b:1f:3b:ef:fb:35:37:02:48:81:97:99:6b:1f:92:92:bb:
         e7:61:d7:64:b5:83:a3:03:ea:a6:23:e7:af:18:09:b7:fd:c7:
         39:34:6e:80:56:9b:fc:15:d8:0d:86:a3:df:71:0e:05:28:5e:
         70:68:c9:fc:fb:8b:b7:9a:ee:8e:cc:e5:d2:b2:c2:69:09:05:
         e7:91:8a:59:15:c3:ca:6d:ba:b3:fa:a2:88:00:99:6b:00:67:
         6f:6f:bc:01:d5:fd:9c:3a:cc:56:f4:56:be:05:92:03:23:f4:
         d3:a7:9b:8a:56:29:89:6a:c5:13:59:39:b7:4c:ea:47:9b:4f:
         14:b4:c2:14:62:08:62:64:72:d7:aa:88:bc:1f:d6:36:b0:d5:
         75:c9:b3:e2:46:6d:0c:54:f8:73:53:17:f1:38:1e:b7:94:b2:
         25:40:24:f1:11:dd:5a:1c:24:27:42:46:10:a7:94:58:4f:d6:
         e3:e9:e3:b7:50:80:0e:b8:ec:4a:d0:62:57:75:ab:92:52:25:
         eb:5f:eb:77:30:67:ec:06:99:08:27:c8:6f:19:37:68:5c:88:
         83:35:e3:42:bc:5d:bc:f4:9a:a0:75:94:8d:79:95:a9:e5:88:
         19:21:78:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:44 2025 by rpki-client