Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/930999ae-f578-32bf-91bd-5342e22048ce.roa
File:                     930999ae-f578-32bf-91bd-5342e22048ce.roa (raw, json)
Hash identifier:          SVLPMFmy+SQ97+ZEorQZK1u/iVZRPzT4STW6vvNOGUo=
Subject key identifier:   7F:1D:E8:B7:DE:11:DC:4E:05:A6:5A:40:8E:45:D3:E1:10:9A:0D:96
Certificate issuer:       /CN=7eea862e-9b02-4c2a-9cb9-f7c1375fa604
Certificate serial:       010D0C9F4328584B8BE23166ED86AF6A95718880
Authority key identifier: BE:49:C9:84:4B:50:F1:4E:44:05:2F:96:D1:5B:B2:8B:CC:7F:B6:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/930999ae-f578-32bf-91bd-5342e22048ce.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     63279
IP address blocks:        170.39.203.0/24 maxlen: 24
                          2602:806:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:31:66:ed:86:af:6a:95:71:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eea862e-9b02-4c2a-9cb9-f7c1375fa604
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=c876f460-88d1-45ef-8b6c-6001a7a789f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:2b:a4:9b:d2:17:c1:38:19:19:0a:ee:47:
                    e3:66:19:65:6d:a3:91:2d:24:02:ba:56:8a:3b:eb:
                    67:94:48:bb:5f:54:4c:d2:7f:d1:f7:32:87:26:bd:
                    33:9a:2e:a1:11:ee:80:1e:4a:99:16:7f:1d:fb:61:
                    e2:12:05:bf:98:b5:a3:a9:a3:5a:9d:22:70:09:df:
                    1e:da:fb:64:f8:9d:ae:10:10:2c:10:37:c4:b6:3c:
                    00:cb:0b:3a:63:31:3a:c4:23:e0:e6:29:0b:2d:31:
                    9c:7e:2b:fd:4a:15:ea:f1:e5:d6:49:a7:a7:2e:70:
                    d4:83:83:da:98:e7:28:ff:b3:0d:25:8e:28:d3:d6:
                    1c:02:ef:6f:11:08:c9:f1:c6:26:2d:19:52:30:58:
                    01:c4:81:8c:e2:c8:ee:96:32:08:d0:9d:1e:f8:86:
                    91:7d:a1:ef:77:47:74:37:40:55:dc:e0:bb:28:b3:
                    f8:c2:bd:36:2d:c7:6e:8f:c6:81:9c:53:35:10:d4:
                    ad:0c:e0:0b:76:b8:ad:b8:da:79:5f:c0:7b:57:d0:
                    57:41:b9:90:a4:c1:e7:42:47:17:79:d7:3d:ba:09:
                    15:78:f0:9f:2c:ee:16:3a:94:72:4a:8d:6c:b9:fb:
                    ef:f7:7a:27:11:da:63:c1:a8:70:61:10:70:50:1b:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:E8:B7:DE:11:DC:4E:05:A6:5A:40:8E:45:D3:E1:10:9A:0D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/930999ae-f578-32bf-91bd-5342e22048ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.crl

            X509v3 Authority Key Identifier:
                keyid:BE:49:C9:84:4B:50:F1:4E:44:05:2F:96:D1:5B:B2:8B:CC:7F:B6:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7eea862e-9b02-4c2a-9cb9-f7c1375fa604.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.203.0/24
                IPv6:
                  2602:806:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:75:f3:9e:aa:59:60:d4:c7:2b:e0:2e:88:53:2a:c5:56:ff:
         44:bd:97:ae:de:c4:37:4f:48:ea:36:17:88:e6:e7:4b:63:a5:
         55:18:aa:f1:0f:8e:86:f7:95:25:69:ee:69:a7:ab:e6:e9:93:
         04:bd:15:df:27:94:26:59:c1:9b:45:79:e2:e7:f4:50:d0:9e:
         76:d2:b2:ec:28:97:4f:12:9d:ac:55:81:b4:b9:0a:3c:8d:ba:
         f4:29:44:24:24:ab:dc:33:02:78:82:17:17:7a:e7:c1:aa:6b:
         0d:89:2a:67:d6:34:5f:c3:9d:21:65:6c:79:5a:49:d0:50:cf:
         86:b5:7d:e6:a5:09:cd:e1:51:98:6b:63:2b:1c:ea:e0:91:5b:
         64:7e:99:5c:bd:1f:ae:c9:4a:f3:6e:9f:25:a0:c1:73:08:84:
         8f:40:4c:f7:b1:15:b5:10:03:eb:37:c3:4a:ff:3b:26:d5:a3:
         cd:c4:d3:01:3f:ea:da:81:80:ea:ac:08:01:d3:f0:e3:be:c6:
         eb:b6:59:40:ac:42:88:2d:0f:51:18:2e:e2:18:c4:56:62:e0:
         25:60:da:0e:97:84:d0:71:9a:13:86:6f:f0:f2:da:af:7b:af:
         45:a7:0a:16:c6:56:ff:34:0a:d6:c9:ce:d6:3c:6f:83:ce:6d:
         40:e3:42:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:18:30 2025 by rpki-client