Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa
File:                     78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa (raw, json)
Hash identifier:          yF9KnPYuJpEfqFs4WnQieqCIYtDTMgPbO1PuWj3AFFA=
Subject key identifier:   65:35:69:BD:61:77:F2:B4:2A:6C:AC:CC:EF:B4:EE:46:01:8F:B6:21
Certificate issuer:       /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial:       010D0C9F4328584B2496C5C68BBEED8B7FE36B40
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     394356
IP address blocks:        207.135.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:c5:c6:8b:be:ed:8b:7f:e3:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=f0049a59-c09c-4eae-8064-46e16d29dc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:cf:ef:fb:f7:42:95:04:d2:bb:ee:e3:c2:
                    51:02:02:7d:20:de:3c:01:08:41:d5:ff:84:ae:de:
                    8a:16:c6:9a:06:1b:d0:81:bc:27:d7:4c:c1:f6:4e:
                    2a:da:41:5e:43:f6:f6:4b:b4:f7:7b:15:95:6e:1c:
                    0a:e1:9f:e2:3c:dc:d3:f0:b7:f1:03:3b:ec:f8:5a:
                    e0:2e:c2:e6:14:0a:7b:3c:e3:c8:14:b8:69:99:47:
                    9b:50:8d:f1:06:f4:01:2a:cb:68:1d:5d:2a:6f:04:
                    93:f4:11:25:e7:18:74:f8:13:16:15:18:c1:16:a2:
                    c7:b8:c2:8e:2f:a2:7b:03:15:93:a1:d4:bd:70:a6:
                    9b:1f:dd:a6:ab:5c:0d:4b:7d:10:c7:42:0e:ca:85:
                    ac:e9:dd:3c:bd:9e:ad:6c:ce:98:1c:4f:f2:58:fc:
                    17:63:61:43:f2:81:0c:ac:ac:04:38:13:f7:21:22:
                    de:39:05:ad:35:fd:5c:13:52:34:3c:23:04:5f:e3:
                    ae:43:8a:52:98:58:02:50:37:a0:fc:71:be:66:d6:
                    d5:0c:58:54:34:59:4f:16:1b:54:bf:c8:3a:b6:38:
                    75:3e:74:ba:90:65:61:f8:e3:12:b1:6b:95:27:b3:
                    0b:4e:9c:68:8a:84:17:9c:6a:de:70:1b:8b:5f:ea:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:69:BD:61:77:F2:B4:2A:6C:AC:CC:EF:B4:EE:46:01:8F:B6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/78caf35a-9a6a-30a5-a687-ad79a422ed6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9f:b5:a5:a6:41:78:30:fa:d7:90:08:d0:1e:b6:dd:b2:0c:
         fd:ee:f6:33:e7:a3:83:54:c1:52:8b:26:50:b3:9c:71:31:f1:
         31:e0:a2:a5:0b:05:61:5f:a1:6b:55:19:7b:e3:84:22:d9:54:
         b3:37:2f:d3:02:2c:2f:af:1d:f2:68:f4:04:ed:be:a5:48:e4:
         78:d9:5a:36:ae:b2:64:e5:2d:85:6a:df:f3:5b:23:f8:8d:46:
         e1:04:91:ae:41:79:db:0b:59:0d:d0:35:51:84:88:a1:e4:df:
         d8:90:98:36:ce:68:ee:e4:a7:5b:db:26:ed:47:36:be:04:86:
         89:07:9f:51:77:08:97:2a:69:8b:90:11:d3:9d:fb:fe:3c:df:
         10:1d:36:59:ff:61:a6:ff:47:d6:3e:3b:c3:ce:54:3c:95:1f:
         71:e1:a5:55:75:59:bb:d1:e6:d4:92:2b:bb:3b:20:52:c9:75:
         9c:b9:98:10:a8:92:5a:43:13:b6:21:8a:cc:7c:1c:c0:9b:72:
         dd:49:c7:33:71:66:21:1c:a3:4a:62:60:69:59:63:33:1c:d5:
         dc:01:12:d3:ff:c0:0e:98:e7:76:d5:09:6f:67:fb:d5:05:c5:
         e9:b1:4f:6f:08:87:6c:90:0e:21:75:ca:7b:e0:62:38:2b:42:
         4e:8a:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:44:49 2025 by rpki-client