Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
File:                     c94ce2a3-4802-3ebb-ac84-90080f08baea.roa (raw, json)
Hash identifier:          lwm0gwv+SflTeIfInJUohgzpXk7mW53jLLTgXvfIbmU=
Subject key identifier:   9E:15:17:EF:47:F1:A9:53:87:CC:A7:A8:9C:25:26:EA:7F:FC:7B:3B
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584B821CD1974F32F8955687CB00
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     22418
IP address blocks:        209.151.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d1:97:4f:32:f8:95:56:87:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6681bd74-3814-406e-ae91-7003e92203a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:2f:d8:09:85:94:b0:35:fb:e9:71:cd:0d:
                    73:31:41:ae:47:04:a5:2a:c0:48:a2:a8:72:37:f7:
                    30:68:ba:f9:4c:f0:c0:62:6a:e5:d6:ea:00:67:24:
                    47:48:bb:21:aa:c7:5e:b8:38:a8:8b:1d:e2:8b:1d:
                    81:a1:51:fc:5d:0b:0d:10:1f:1c:cd:17:bc:eb:ae:
                    cd:72:5a:bc:29:1c:45:d3:c9:38:7f:e5:a9:8b:c0:
                    eb:62:9f:96:7d:e7:e2:75:9f:d7:c2:f3:04:c9:c8:
                    d2:43:73:c7:ac:45:bb:14:92:de:f1:80:92:a6:e3:
                    4a:2b:03:00:6a:dd:0f:13:8d:1d:8c:ab:6b:86:05:
                    88:c0:af:e2:0b:c1:cb:b0:9a:92:90:ce:be:64:7d:
                    40:6a:1f:22:1c:8e:81:08:bc:43:60:2a:24:fb:9d:
                    1f:3a:c0:d8:54:04:cc:2b:ef:3f:7b:33:a3:3f:14:
                    20:45:96:31:d1:f4:41:c6:63:3b:cc:77:57:5b:5c:
                    d7:ea:cf:ae:4f:c4:25:dd:0e:9f:ea:1a:d7:fc:95:
                    19:bc:3f:86:91:e3:bb:e1:e6:3f:e4:84:8b:16:e8:
                    e0:75:b6:0f:1d:e8:5b:7d:22:01:b8:19:22:02:bb:
                    86:52:fa:96:73:e5:90:53:48:3e:fa:3e:ba:71:e2:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:15:17:EF:47:F1:A9:53:87:CC:A7:A8:9C:25:26:EA:7F:FC:7B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:6a:88:91:18:17:cc:9c:0b:74:5c:22:20:f9:f0:35:d2:
         82:31:c0:f3:00:84:aa:3f:38:e5:8c:e7:f2:07:fe:99:3c:52:
         ab:5c:4f:8c:85:63:39:34:21:dd:1d:e3:be:17:3b:29:50:c3:
         54:45:b9:b1:42:ac:82:3d:79:76:71:90:3b:60:7c:a2:08:7c:
         99:8a:ba:d6:5a:f7:f2:75:38:86:60:e1:0b:0d:83:62:7c:ed:
         bc:3e:de:5c:2d:4b:6e:22:f4:5e:4b:16:57:26:11:08:c7:2b:
         20:0d:62:43:91:56:ca:c1:08:d8:cf:d6:e7:98:fa:39:c8:f8:
         b5:71:4b:f8:28:6e:9e:52:18:85:60:d3:be:bb:ac:14:02:74:
         9c:4c:19:cc:c6:68:0d:96:44:3b:e8:84:05:ba:d1:72:9d:58:
         d7:65:81:87:f2:7e:8c:ff:f5:c1:a9:a8:4a:3a:f2:c2:35:17:
         5b:36:4d:9e:b2:88:92:fd:5f:86:4c:31:e3:04:ca:a7:ee:25:
         cb:d2:74:c7:e7:99:39:cd:c8:7d:01:67:d7:eb:e5:19:ac:b4:
         4d:24:78:9e:c8:a8:bf:ae:58:3f:c4:17:34:85:23:2a:a9:1a:
         0a:92:04:43:0a:b5:43:fc:46:d0:39:d2:01:87:82:fc:96:73:
         77:42:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:00 2025 by rpki-client