Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa
File:                     56839789-9117-3bbe-a93a-9673ed9152fd.roa (raw, json)
Hash identifier:          D5pp3WNmSvZLLKsLAT51n3L3LbIUtiRqRX8iM6tSpxY=
Subject key identifier:   11:D7:CD:03:78:19:9A:B6:D5:63:0F:34:51:05:E9:B8:27:67:FC:36
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B89177403DEB18A491EA3BE80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     25899
IP address blocks:        208.56.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:74:03:de:b1:8a:49:1e:a3:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=ab6e4d52-f68c-41d7-91d1-8a586fbbbe55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:9d:77:41:11:dc:e5:ff:41:95:03:da:b3:
                    67:b5:51:4e:77:cc:f7:df:14:c6:63:3a:ad:72:a1:
                    eb:0a:c1:d8:3f:ec:d6:dc:03:98:05:fc:52:c3:eb:
                    01:4d:a7:d9:01:7f:9f:de:ee:b3:9a:45:da:62:7a:
                    83:28:cf:80:5e:ea:b2:20:fc:60:ad:4a:93:d7:88:
                    49:f2:15:96:3a:bf:52:e7:56:4e:c2:62:7e:d8:9a:
                    1f:0c:e4:4a:91:10:d9:43:a8:98:7b:49:ba:51:52:
                    58:70:44:32:d5:c0:42:4f:93:fc:94:1e:da:a0:67:
                    25:39:11:ec:79:24:75:72:c0:fe:88:28:e1:ed:8d:
                    ae:fe:ff:b8:19:8f:86:4a:3c:1d:33:55:50:e9:a0:
                    91:50:35:95:66:8d:af:00:21:11:fe:05:fc:f6:a6:
                    9d:bc:ac:fe:93:00:06:b8:30:74:cd:fa:9d:84:32:
                    28:c5:0f:41:b3:ef:21:e9:09:c1:72:d1:50:d2:2d:
                    80:28:80:c8:55:6b:76:2d:d4:7b:e9:60:ab:81:d1:
                    d7:cb:c4:9e:ea:c4:95:81:34:56:af:b3:50:c7:07:
                    a4:79:e2:10:16:2f:db:1a:9f:be:a6:7d:99:6b:74:
                    51:c8:ad:f6:45:0b:8c:b8:2a:27:8e:48:e4:72:f0:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:CD:03:78:19:9A:B6:D5:63:0F:34:51:05:E9:B8:27:67:FC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/56839789-9117-3bbe-a93a-9673ed9152fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:2b:8d:e5:df:96:89:24:d3:74:40:85:a7:18:dd:ad:43:
         f9:e2:5e:1a:77:3c:0d:06:fe:d6:70:c9:37:eb:60:80:1a:9c:
         fb:02:a9:41:be:9b:a9:e6:d1:cf:d8:43:57:01:2b:c5:39:ea:
         02:49:63:e4:93:fc:dd:22:27:db:29:9d:63:88:3e:fd:12:f5:
         49:b5:df:47:22:ca:21:ae:e7:a2:ce:f6:b1:5c:86:52:06:77:
         ea:8e:32:78:51:73:29:1f:a2:f1:5b:61:22:1a:90:7c:a2:7f:
         ab:4b:a5:b2:a5:f0:7f:49:8e:73:e7:69:1a:94:ee:7b:5d:91:
         8f:f1:cc:91:af:9f:12:7d:f7:cb:17:04:e2:27:70:f0:b0:94:
         e7:92:2f:26:76:c4:b1:94:88:e8:8a:99:36:75:85:1f:51:5a:
         8f:01:88:39:5a:59:c4:92:cd:b7:41:5c:93:a1:f9:0d:2f:7a:
         56:de:a0:55:01:81:6b:18:85:8c:84:f9:60:c2:b5:c7:2e:b8:
         b2:27:20:2f:3f:17:65:06:ef:28:78:c9:83:f7:9f:39:b9:af:
         92:1e:9b:90:f4:e5:78:7e:27:84:ee:7c:31:63:76:99:74:33:
         3f:1c:c7:d4:e2:dd:0e:c9:5d:66:99:6c:e8:30:22:9b:cc:b7:
         60:60:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:44:05 2025 by rpki-client