Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/85ce9481-a869-37e4-9908-06446820c349.roa
File:                     85ce9481-a869-37e4-9908-06446820c349.roa (raw, json)
Hash identifier:          bcYqXnW6WJCcj3GnKuggt7KruQr0kTcv1dhVhW58Ps0=
Subject key identifier:   E3:6D:AA:0B:FB:71:2E:BB:4C:2B:9D:40:A8:2B:86:1A:40:82:19:35
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B64CE165B2BD25A629FA2E370
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/85ce9481-a869-37e4-9908-06446820c349.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36040
IP address blocks:        208.117.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:16:5b:2b:d2:5a:62:9f:a2:e3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f0ab592f-5077-4734-833b-c3493453e568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:64:a0:ba:a2:f5:e4:fd:c6:84:ec:b6:4b:
                    93:3b:0d:6c:86:59:ef:b8:f4:57:07:cb:28:b1:34:
                    c4:d5:a9:b0:20:4f:07:12:36:c1:9f:48:6b:ac:51:
                    1a:48:73:43:37:08:50:b3:4f:4a:c5:39:6d:49:a0:
                    a0:27:3e:b9:03:fd:1c:8c:3e:5e:ea:6b:87:50:99:
                    96:be:8b:3e:2f:d1:9a:65:00:c9:26:b7:63:43:fa:
                    2a:18:2c:14:7d:ee:bc:ac:ad:b7:2a:f9:f9:d1:8a:
                    45:f1:2d:c9:32:5a:e4:81:bc:50:fa:0e:7e:5e:bc:
                    e6:8e:45:95:bd:da:98:93:ba:1b:35:4b:3b:0d:88:
                    d3:ae:54:6c:df:f8:f4:04:11:6b:84:3e:dd:98:86:
                    fa:1c:8f:78:f8:7c:6b:fc:79:18:f9:c5:9d:ec:38:
                    3c:a3:29:df:df:5b:c3:b2:50:ef:00:1e:7e:57:08:
                    b8:1c:43:24:cc:8e:e3:2d:0e:e7:19:d6:1c:4e:f8:
                    7f:77:c4:da:4e:f1:ae:ba:3c:eb:6a:f7:27:ba:fe:
                    20:8a:62:1a:57:62:e4:58:81:0d:2b:43:8f:e5:94:
                    7e:17:b3:01:22:e4:b9:de:8b:fd:0f:97:63:43:85:
                    a8:8b:d0:c4:95:28:33:7e:18:d8:79:35:5c:5b:bb:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6D:AA:0B:FB:71:2E:BB:4C:2B:9D:40:A8:2B:86:1A:40:82:19:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/85ce9481-a869-37e4-9908-06446820c349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:41:03:4d:3a:17:ae:55:d5:f6:d4:dd:d3:e7:4f:22:78:dc:
         f4:21:f3:e3:34:b8:17:8c:f3:54:cd:ca:63:5a:c4:bf:b5:af:
         58:22:0d:c1:4b:48:41:54:90:dd:8f:b7:f2:99:d5:4e:e3:1b:
         81:26:80:59:fd:52:75:db:59:6d:76:ad:ce:e9:d0:14:dd:13:
         70:b7:2c:76:f3:61:d5:93:f0:33:c5:76:f5:18:0e:6f:0c:aa:
         92:b4:a1:99:61:86:b9:7a:ad:92:ac:0b:2e:e3:46:30:b6:28:
         43:3b:41:9c:74:38:4e:e5:81:dc:42:2a:39:01:e6:b0:05:4a:
         8c:4c:6d:88:4b:17:8f:61:cb:bf:45:5b:e4:10:8e:e9:e3:d8:
         a0:49:f3:e9:61:89:38:d6:11:0b:36:bf:e2:20:69:05:42:46:
         aa:50:53:a4:d8:47:be:b4:02:6d:0b:a3:67:c9:29:b4:51:f4:
         7c:c0:81:c8:10:8a:2e:39:a2:07:27:84:a0:b9:dc:da:69:88:
         ae:69:e7:42:0c:87:ca:9c:2f:b4:41:bb:c4:82:03:84:90:82:
         eb:03:88:4e:db:63:a3:d8:3b:d8:3f:e0:06:9b:e8:14:9b:eb:
         65:62:44:d4:af:a0:9a:8d:f8:94:92:a7:66:d9:e9:d4:31:ba:
         f0:a9:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:23 2025 by rpki-client