Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa
File:                     c0d92aec-a852-3811-9169-c6a18fe58454.roa (raw, json)
Hash identifier:          ktcCxURD9MG65rqT8o3KZPg6319do85P2uEN6h1VaVw=
Subject key identifier:   B9:03:F0:27:23:5C:DF:68:5D:FC:4A:0E:E1:EB:C2:96:0B:16:C6:BA
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584B4A471F94152B9644F1505C20
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     14434
IP address blocks:        66.248.160.0/19 maxlen: 24
                          98.142.160.0/20 maxlen: 24
                          172.84.192.0/18 maxlen: 24
                          198.36.28.0/22 maxlen: 24
                          209.221.192.0/19 maxlen: 24
                          2606:5a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:1f:94:15:2b:96:44:f1:50:5c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=518f7555-c40f-49e4-ae87-583412dc6d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:1b:d8:53:59:27:8e:84:6f:aa:18:98:83:
                    f9:cc:6f:08:b5:8b:25:36:c6:22:48:b5:9b:bd:e6:
                    e7:e1:72:05:63:9a:ac:7e:73:36:91:10:45:b4:5a:
                    af:f2:33:62:cc:ca:3b:33:ba:7b:57:24:81:70:61:
                    26:9a:5d:18:11:00:d8:4f:9a:c6:4a:f0:15:92:ff:
                    d2:37:be:7e:97:a3:91:4a:35:0a:48:ff:35:38:a8:
                    c1:9d:33:4c:82:ca:d6:87:89:d7:e5:57:93:81:3c:
                    aa:9e:f1:ab:68:87:87:04:8b:d5:b7:ed:82:50:bb:
                    70:6a:c0:b5:2e:01:34:c1:c7:8d:aa:67:70:c4:02:
                    f4:3f:85:f3:d2:33:1f:dc:05:43:0b:16:56:29:bd:
                    d0:22:23:e6:8f:fc:03:2d:46:71:c4:97:2f:da:94:
                    a7:85:eb:d3:d3:51:0a:4a:3b:ee:98:2e:3a:6e:6b:
                    13:f8:9f:4c:bc:e3:bc:12:fa:56:4d:00:f4:e4:fd:
                    99:7a:1f:88:bd:ce:32:c9:76:e2:da:af:f6:b6:bf:
                    75:30:6b:ea:2b:e0:4f:c5:9b:6a:f8:ac:e7:c7:0d:
                    2b:8d:fe:9a:a6:22:15:89:53:32:1b:0e:a3:48:c9:
                    4d:57:a4:b3:1f:e6:11:6d:bd:39:77:0f:b1:8f:ea:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:03:F0:27:23:5C:DF:68:5D:FC:4A:0E:E1:EB:C2:96:0B:16:C6:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.160.0/19
                  98.142.160.0/20
                  172.84.192.0/18
                  198.36.28.0/22
                  209.221.192.0/19
                IPv6:
                  2606:5a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9d:3e:1d:8b:83:14:60:fb:ce:bf:4f:14:ab:5f:ab:6e:88:
         73:f6:fb:a7:52:45:82:3f:c5:e8:79:ca:75:25:d1:90:df:c5:
         27:00:e8:8b:9b:d6:ca:6f:2a:6f:59:e1:8a:10:75:62:ed:e1:
         14:89:57:d1:a6:07:04:43:b3:4a:ac:d2:f7:c9:f8:fd:8d:b1:
         71:c2:5b:31:1e:81:72:2b:c5:d5:96:86:2a:a7:69:f1:82:a6:
         f6:5e:a2:e5:e7:04:95:59:37:cc:20:fe:64:86:c4:c1:4a:f3:
         99:fe:5f:4f:f4:8f:71:28:47:c1:54:20:31:60:5d:40:4b:3a:
         68:a4:09:84:25:47:53:fc:d4:84:3f:39:d6:f9:7d:92:7e:3c:
         5e:02:27:e0:4e:8f:ef:96:70:0c:89:a0:3b:66:3c:cd:45:28:
         47:63:e5:24:cf:6f:80:e0:7f:5c:96:ce:ba:f3:72:07:64:2a:
         eb:fd:b1:2f:e1:a7:25:8c:06:4c:99:fa:9e:82:c1:ba:e8:fc:
         bd:f0:b7:eb:16:80:b6:87:94:ce:a5:2e:41:78:7c:0b:82:3e:
         e1:e3:d1:57:52:b7:81:40:bb:62:cd:1a:13:0d:49:47:1c:24:
         27:56:5e:05:34:24:2a:86:9c:0c:cc:76:79:2f:02:4e:a2:71:
         af:b0:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:22 2025 by rpki-client