Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/da18f8a3-d863-321b-b845-80ddc6a707fc.roa
File:                     da18f8a3-d863-321b-b845-80ddc6a707fc.roa (raw, json)
Hash identifier:          4N+HerQ6Cqpaf6AwIZFEAwJRo+M00njvNlJ5uf0KurM=
Subject key identifier:   9E:5E:CD:F1:72:E5:7C:4E:F6:1E:97:B6:FD:BB:2B:26:6E:0C:A5:10
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584B99EA857B6758EA89CB8C1780
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/da18f8a3-d863-321b-b845-80ddc6a707fc.roa
Signing time:             Wed 22 Oct 2025 01:38:55 +0000
ROA not before:           Wed 22 Oct 2025 01:38:55 +0000
ROA not after:            Tue 20 Jan 2026 02:38:55 +0000
asID:                     30041
IP address blocks:        64.110.48.0/23 maxlen: 24
                          209.237.132.0/23 maxlen: 24
                          216.71.108.0/22 maxlen: 24
                          2602:fd41::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:ea:85:7b:67:58:ea:89:cb:8c:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Oct 22 01:38:55 2025 GMT
            Not After : Jan 20 02:38:55 2026 GMT
        Subject: CN=e608a7f2-8fe1-4f61-bf49-3d9fc22dbc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:d8:19:c0:74:b0:ea:14:ce:8a:e6:d1:87:
                    b9:db:cb:98:29:98:32:4e:d3:88:52:26:fc:42:1a:
                    a5:15:82:4e:f3:df:93:b6:4c:20:40:90:ef:10:1d:
                    8a:70:da:51:74:6d:5f:aa:7f:47:fe:bf:1d:c4:00:
                    1f:d6:bf:82:da:82:9a:95:99:be:9a:99:df:9b:e5:
                    d1:65:6a:c5:df:ed:3d:9c:6d:c3:ba:74:23:93:8b:
                    80:96:ee:c4:e5:aa:1e:fc:c1:08:4d:d4:07:d2:92:
                    58:d6:c8:7f:11:5e:d6:1c:c8:e2:66:f5:a1:4c:a4:
                    6c:6f:46:e8:65:62:09:c2:e9:3c:60:f8:44:53:20:
                    bd:b8:f2:a2:af:c7:fa:8f:72:0c:07:15:10:be:df:
                    db:aa:fa:c2:ec:c7:29:8f:8d:19:1b:5d:f5:e3:8e:
                    07:86:39:17:f2:46:35:c3:7a:e5:11:40:8a:8b:72:
                    96:5a:bb:34:30:14:e5:5e:9a:aa:ab:39:e0:dc:db:
                    07:66:65:33:2c:ad:5f:75:07:21:1f:5b:aa:a5:f9:
                    3d:a6:39:28:95:a0:a7:36:92:67:31:85:47:3d:ab:
                    7e:c9:64:18:f7:04:61:94:17:4e:96:24:c1:5e:a1:
                    b4:4a:f2:ff:2a:05:be:31:c2:5b:3b:22:2a:d5:de:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5E:CD:F1:72:E5:7C:4E:F6:1E:97:B6:FD:BB:2B:26:6E:0C:A5:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/da18f8a3-d863-321b-b845-80ddc6a707fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.48.0/23
                  209.237.132.0/23
                  216.71.108.0/22
                IPv6:
                  2602:fd41::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6e:ad:8a:6c:05:10:89:c1:8e:7e:c7:5c:5c:91:47:d5:5b:
         93:68:60:98:53:bb:4d:8e:e6:7a:1a:f1:09:48:f6:34:ea:50:
         85:d4:1e:95:fb:dd:52:6f:cc:f2:84:0a:d8:60:1a:6b:a1:12:
         ce:86:1d:db:e5:d2:27:3f:11:58:88:af:e4:7c:8e:e5:40:53:
         97:34:f7:1f:aa:3b:34:48:cb:49:90:80:4a:0b:8e:35:95:2c:
         e4:58:26:f2:ce:55:ec:45:61:2e:4b:d9:d7:61:ec:d5:6b:27:
         d1:c4:9d:16:ab:db:32:bc:6c:89:f5:ed:d4:ba:16:fd:99:6a:
         78:f5:2b:5d:a2:cf:c4:97:c3:d3:22:56:63:c5:c3:16:1f:c0:
         8e:71:8b:e8:f2:35:7d:17:3b:48:45:6b:18:8e:2c:2e:40:ac:
         0e:03:07:63:c3:e9:d7:3a:89:a9:73:c0:b8:73:e4:3b:7c:c9:
         b6:fc:c1:3f:d5:d7:67:65:f6:ff:cc:dd:58:2b:ab:0c:f9:cc:
         41:1c:c7:5f:cd:c4:fa:63:4d:fa:be:c7:1f:6c:36:4a:52:30:
         cf:be:cc:3a:5a:84:fc:4b:02:ca:82:ae:e9:77:fe:69:c9:2d:
         06:9f:6c:c5:2b:d0:e0:d4:40:14:2f:5e:aa:73:6c:e0:10:92:
         ba:da:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 13:22:35 2025 by rpki-client