Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/d681baca-275f-3528-8cb6-64dd19384edb.roa
File:                     d681baca-275f-3528-8cb6-64dd19384edb.roa (raw, json)
Hash identifier:          xwBmVzhxBMVFGuz4JrC+WaXHLnPEHBAcfGVMkK/0slE=
Subject key identifier:   E6:DB:78:BB:18:A4:8E:B1:B6:C3:0E:67:12:72:5F:C8:90:3C:92:FD
Certificate issuer:       /CN=91518d14-585e-444c-bf2c-92e2195ab178
Certificate serial:       010D0C9F4328584B583C909C2D1DEF861EDB6640
Authority key identifier: 1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/d681baca-275f-3528-8cb6-64dd19384edb.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     25700
IP address blocks:        204.8.32.0/22 maxlen: 24
                          204.13.164.0/22 maxlen: 24
                          204.15.224.0/21 maxlen: 24
                          208.99.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:90:9c:2d:1d:ef:86:1e:db:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91518d14-585e-444c-bf2c-92e2195ab178
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=93962597-7541-48f7-bf74-70d939a48d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:8e:d7:f9:4c:e5:80:97:ce:c4:65:57:84:
                    13:dd:10:99:6d:c0:af:26:bb:e1:71:3f:a9:98:f8:
                    2c:20:4c:2b:cb:a4:dd:dd:3c:db:71:af:5a:c8:10:
                    2b:df:4d:5c:57:b6:1d:b3:96:c7:47:ab:0e:ac:71:
                    fc:6f:b2:6e:22:ba:6f:42:2d:f7:d5:6d:b3:30:76:
                    e1:71:a8:e0:3f:15:62:6b:76:18:c1:18:44:1c:b6:
                    96:bf:f8:eb:eb:68:5b:65:97:49:b3:87:2b:c3:ff:
                    4e:4e:e3:58:a3:b8:dc:dd:12:32:dd:26:20:2a:fa:
                    41:d4:4f:7f:ae:46:b3:1c:1d:88:a3:9e:c6:dd:5b:
                    d5:a5:e5:0e:a9:87:68:c2:28:ef:28:32:b5:91:0a:
                    be:c1:e5:65:58:16:c7:79:51:fb:51:07:86:8c:6d:
                    3b:20:8c:ad:32:44:b6:a4:01:1d:7a:cc:58:e2:a8:
                    d8:fa:cd:69:dc:9a:75:a4:34:07:ef:25:00:ac:74:
                    82:78:32:a5:e5:91:3d:5b:11:96:e2:51:47:ae:32:
                    bd:2a:27:20:a2:b3:75:c0:1a:64:3c:8e:5d:5e:85:
                    cb:44:b0:10:24:4f:b4:41:05:e4:ad:89:61:56:76:
                    c9:4b:49:e6:1c:34:68:ee:39:c9:ed:2d:33:fb:e1:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DB:78:BB:18:A4:8E:B1:B6:C3:0E:67:12:72:5F:C8:90:3C:92:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/d681baca-275f-3528-8cb6-64dd19384edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.32.0/22
                  204.13.164.0/22
                  204.15.224.0/21
                  208.99.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:cc:ad:ea:c0:ed:ea:80:2a:d4:56:9e:40:d0:65:b4:00:60:
         b1:35:54:af:4c:95:ad:84:c1:b7:ba:72:b5:99:28:fd:4c:7f:
         55:aa:5c:75:27:92:61:f5:a5:f6:21:ca:d6:26:eb:f3:25:d7:
         61:6c:b9:9d:c7:10:f2:3b:61:be:43:ce:fe:d0:9b:be:dd:75:
         f2:13:ca:1b:f3:87:31:b3:1d:56:d6:49:4a:eb:ba:da:74:56:
         c2:8c:6b:1a:7f:71:59:56:2c:13:62:b6:0c:60:b3:41:18:92:
         bb:63:0d:9e:8c:cb:dc:12:c9:12:02:4a:85:2e:d3:28:4b:95:
         4f:a8:88:63:f8:cd:84:04:4f:1d:2a:c9:ad:9d:45:13:92:a4:
         b7:89:9b:6b:d2:99:37:3f:42:5a:96:34:1c:4b:10:64:60:a8:
         16:30:81:69:40:df:c7:8a:ef:b1:e6:16:6e:0c:28:f6:85:99:
         ad:cf:c2:86:a2:30:c8:c8:95:d6:38:13:1e:7a:c7:ec:49:83:
         d4:e5:d7:d5:c5:cf:47:53:f3:7b:f0:b4:fd:c8:79:59:17:00:
         46:76:a8:5c:e5:96:21:d3:bc:7e:e3:ae:0b:8c:e0:c3:ca:8e:
         39:96:f7:c5:3b:29:ca:6e:ca:be:7c:83:78:28:13:f2:2c:18:
         f9:79:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:40 2025 by rpki-client