Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d28e471f-6c59-3ea4-abc1-fd4430348f0c.roa
File:                     d28e471f-6c59-3ea4-abc1-fd4430348f0c.roa (raw, json)
Hash identifier:          CcImEHFPDA0ApRABkoX4zC0EhF46ThHmH1aAzbMDD7s=
Subject key identifier:   01:32:70:81:C1:83:5C:35:57:18:D4:25:B9:54:E3:31:83:45:0D:23
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C70CA4ED55FD1C168C060
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d28e471f-6c59-3ea4-abc1-fd4430348f0c.roa
Signing time:             Fri 10 Oct 2025 15:41:23 +0000
ROA not before:           Fri 10 Oct 2025 15:41:23 +0000
ROA not after:            Thu 08 Jan 2026 16:41:23 +0000
asID:                     20197
IP address blocks:        204.84.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:70:ca:4e:d5:5f:d1:c1:68:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:23 2025 GMT
            Not After : Jan  8 16:41:23 2026 GMT
        Subject: CN=a8e9188f-d0d9-4ee3-851f-25301bd986ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:6d:32:82:76:c9:1a:c0:3b:d5:63:36:9d:
                    48:bf:35:e5:dc:24:66:32:b4:7d:e5:ba:77:9f:4b:
                    65:ff:f5:a4:9c:bf:fd:ab:c8:07:4d:53:ca:3d:7a:
                    55:fd:a4:d4:47:fc:15:da:72:7d:b8:79:f4:c9:27:
                    f8:d4:b1:c2:93:13:d2:f4:79:26:dd:f9:41:0b:f1:
                    c7:f2:0f:ca:74:0e:b6:bf:61:fb:d9:cd:ab:dc:00:
                    6c:2f:6b:c3:18:7c:51:6d:d2:63:7e:1a:10:76:d5:
                    03:9d:45:34:2f:7f:e3:bb:bd:dd:b8:65:ea:26:6a:
                    7e:f0:b9:d2:e4:00:ad:38:9a:de:f9:ed:de:42:72:
                    a3:5f:6a:85:4f:fe:f7:4d:1a:5b:ca:cf:45:d8:f8:
                    e3:2c:3a:80:42:cd:19:38:26:1a:be:6d:da:f2:13:
                    c3:92:e9:29:62:cc:55:d6:72:e8:ed:f9:86:5b:f6:
                    77:d0:20:08:21:e1:6f:87:4a:83:2a:25:d5:53:74:
                    ba:13:41:2f:0a:c0:50:df:cf:ad:8b:ed:a4:25:db:
                    7c:fc:59:5e:f0:8a:f2:05:17:bf:e9:f2:29:72:ef:
                    87:e1:f4:e6:b7:7e:16:52:e6:e8:5c:f0:bc:bb:31:
                    2c:92:33:bf:c2:96:a1:0f:ca:20:ea:a0:31:3f:6d:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:32:70:81:C1:83:5C:35:57:18:D4:25:B9:54:E3:31:83:45:0D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d28e471f-6c59-3ea4-abc1-fd4430348f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d5:83:ef:f8:3b:d1:98:ca:dd:39:22:ef:2f:5c:7f:f8:b8:
         e4:b9:ed:75:83:4f:e2:de:f2:8f:87:5b:d6:88:98:a3:ae:f5:
         de:be:7b:43:ef:d5:32:18:63:99:6e:96:e8:ac:9b:c7:49:b9:
         15:d3:97:9e:d5:f2:d8:1e:79:a0:6d:75:2c:ab:77:71:2c:c4:
         30:3c:d8:8c:14:45:7d:f7:04:65:f6:d6:41:f9:28:0e:68:c5:
         09:a1:2a:be:93:58:6e:33:f7:12:93:fb:7e:d0:29:10:cd:c0:
         b2:9b:9e:ff:dc:27:77:ee:13:34:aa:5a:d8:8b:60:da:7f:8a:
         55:f8:e1:2d:c4:68:49:73:11:ab:26:3f:d1:da:d1:17:cb:04:
         7a:e2:27:e9:17:e2:dc:4d:04:69:b9:c6:98:62:ca:31:58:0b:
         32:38:5c:d4:40:2f:d0:fa:82:02:89:b6:31:93:f9:51:f7:90:
         20:28:f9:e8:df:23:e0:b0:2f:36:bd:93:7e:4a:45:d4:47:ee:
         18:fa:b4:dc:ee:65:14:f1:16:66:61:4a:d6:3e:20:96:95:d5:
         7d:a8:92:18:67:ff:b2:ee:34:3b:cc:9c:fd:3a:5a:93:89:13:
         07:fe:93:2a:4c:5b:d1:22:5d:69:ba:2b:99:3f:dd:8c:1e:16:
         fb:ad:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:25 2025 by rpki-client