Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa
File:                     67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa (raw, json)
Hash identifier:          0ekI91L21Us6hlBH4ZJCW56JWYbr7Xdw8qTbiE+Az4U=
Subject key identifier:   AA:3B:E2:23:BE:58:75:E2:4F:3E:D8:1A:1F:AA:DC:D5:09:8A:E9:33
Certificate issuer:       /CN=a3073e85-2b7a-45f5-809d-4c36116cd85c
Certificate serial:       010D0C9F4328584B1D9C228A5522B5A339193020
Authority key identifier: 16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     401245
IP address blocks:        206.225.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:22:8a:55:22:b5:a3:39:19:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3073e85-2b7a-45f5-809d-4c36116cd85c
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=a8afecf6-0bb0-4492-ad76-78b0b7f912ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:b4:3c:64:40:90:32:cb:03:d4:0d:d4:59:
                    9d:c4:fb:ca:53:ba:5b:9d:7d:99:a8:cb:ab:51:af:
                    4f:12:1f:e4:e6:89:c8:16:c0:8e:79:8a:a3:f9:f0:
                    ce:44:af:26:ce:7a:ab:12:b3:ef:45:da:da:b4:42:
                    8c:7b:94:af:d6:de:8b:d1:bb:23:cd:30:33:eb:72:
                    c7:16:2f:ca:45:f1:2f:1c:86:c3:e4:99:ef:57:4f:
                    48:43:29:a5:f2:80:2e:b8:a7:d6:df:6a:9d:8a:23:
                    45:58:fa:c2:9a:32:9f:9c:50:2b:73:49:fb:d6:ab:
                    ed:53:6f:71:d6:86:3f:8b:7e:e5:d5:e6:d9:75:51:
                    ff:3f:e5:f4:2b:76:ff:0b:38:2e:b6:59:d8:01:cc:
                    64:b2:e6:58:55:75:55:99:81:16:47:56:6d:3c:64:
                    6e:21:c3:d9:fd:0e:ab:fa:56:c0:4c:95:36:3d:ac:
                    4a:8c:95:35:b5:5f:ab:ae:39:4f:25:ed:7c:34:ba:
                    8d:a3:09:4e:06:39:a6:53:c6:ee:db:a0:e3:e0:50:
                    d7:c2:24:b2:07:c7:36:94:7f:b5:50:fd:bb:5f:b1:
                    77:82:92:b7:db:c7:e5:bd:3d:16:8a:22:c8:57:06:
                    d1:11:6d:7e:a3:c7:77:4f:1b:9a:93:37:8f:27:77:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3B:E2:23:BE:58:75:E2:4F:3E:D8:1A:1F:AA:DC:D5:09:8A:E9:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl

            X509v3 Authority Key Identifier:
                keyid:16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:d4:4a:7a:16:03:22:cf:48:bd:f7:71:88:c5:00:25:66:
         28:8f:9b:24:20:09:93:85:1d:f2:2a:21:29:00:8c:9c:f5:90:
         41:d2:5d:e1:4a:e3:49:9a:26:7d:7f:52:ea:64:7e:d6:43:fb:
         2f:ad:e4:83:6b:51:1e:3d:87:88:af:2e:d0:f7:be:f8:be:dc:
         83:76:a6:43:b1:77:4c:7d:30:84:de:33:03:5b:ed:c7:54:f4:
         20:f3:9c:88:26:6f:92:e8:73:5b:43:f2:c4:50:de:83:66:b6:
         9c:19:77:9b:b5:01:de:f7:d5:19:98:a8:da:3e:11:ac:98:7c:
         17:a4:cc:f3:e1:30:03:af:b8:28:c6:31:86:24:f1:12:fe:a2:
         d5:e5:f7:16:02:ca:87:23:26:fd:18:e3:5a:d4:7c:32:c0:17:
         df:c6:e2:7e:e9:ea:4a:ec:e7:83:47:35:dc:d2:34:57:da:a7:
         3b:ed:65:f5:bd:6b:d4:b2:20:be:e9:e1:58:2e:c0:5e:bd:bf:
         98:35:cc:b0:83:7e:5c:9b:c6:08:ce:45:82:91:df:32:06:fd:
         df:41:97:b8:05:07:47:26:19:82:4b:6a:8c:72:fe:4f:cd:66:
         f6:86:49:5e:88:3b:07:49:45:25:3b:17:25:35:2d:ef:eb:90:
         75:25:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:20:43 2025 by rpki-client