Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/6b214c14-fbcd-3363-94e7-0375a83b95b3.roa
File:                     6b214c14-fbcd-3363-94e7-0375a83b95b3.roa (raw, json)
Hash identifier:          emOmzLaL8QvjeR1gCEps6WHPmh62R9Yxo0HJs3fBji8=
Subject key identifier:   81:2F:45:0B:4B:59:7E:66:A1:68:8D:45:7B:D7:23:A5:DB:85:FF:00
Certificate issuer:       /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
Certificate serial:       010D0C9F4328584AFC1C00B976EC377503FA6010
Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/6b214c14-fbcd-3363-94e7-0375a83b95b3.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     397263
IP address blocks:        200.12.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:00:b9:76:ec:37:75:03:fa:60:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=661cd2ea-7a41-4bd2-9e63-e3496e007d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:95:a4:e2:3b:6f:5a:50:57:4f:d7:79:6e:
                    e3:65:a5:68:36:28:47:ec:08:a9:09:33:b5:87:50:
                    eb:5f:4f:66:ab:8d:4a:d8:ea:1a:e9:de:24:39:1d:
                    08:c1:80:8d:c2:3a:74:25:34:be:e2:21:51:f4:d0:
                    4b:08:5a:c1:5d:e1:aa:ce:18:2c:fd:24:cc:97:63:
                    50:89:fb:31:dc:6c:6a:fa:38:d5:a7:9d:9e:da:a3:
                    80:ed:a7:be:09:2e:44:fe:3c:42:3d:0f:86:72:9a:
                    fe:34:95:bb:3b:68:49:29:c3:09:23:78:dc:1d:24:
                    1b:8a:f4:86:09:b5:0f:71:84:da:df:d5:34:5b:6f:
                    db:05:7a:c6:ef:a2:49:71:e5:93:c2:93:c1:de:55:
                    db:12:d4:53:7a:5e:c9:59:ea:f4:3c:1c:93:1e:14:
                    9c:df:2c:d0:9b:94:95:9c:26:e5:42:b7:71:21:6e:
                    10:64:8c:6c:b9:13:22:51:c6:5f:a7:88:fa:69:f9:
                    0a:7c:5d:8b:58:74:fe:41:6a:e5:62:00:aa:bd:32:
                    fd:be:5b:ef:a6:71:75:42:6e:3c:63:68:22:ba:68:
                    d6:0e:3a:fd:79:cc:41:08:f2:bc:c1:21:92:a7:25:
                    8c:52:41:ca:b3:19:5f:5b:7e:00:47:0a:6a:68:94:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2F:45:0B:4B:59:7E:66:A1:68:8D:45:7B:D7:23:A5:DB:85:FF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/6b214c14-fbcd-3363-94e7-0375a83b95b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:8d:b7:8f:b6:0c:86:8e:84:1c:90:ee:a6:a7:be:d0:c5:
         01:a8:e6:5b:14:70:43:61:9f:fb:5f:4b:54:f0:66:82:77:6a:
         8d:b6:75:83:bc:4c:03:44:ec:c1:9c:3d:df:00:47:fa:47:58:
         d0:66:e2:bf:c1:da:fe:a8:ff:a7:04:f6:fd:88:bf:f6:06:93:
         03:0e:21:d0:a9:c3:f0:55:ee:28:f5:ee:d5:24:61:bb:eb:7f:
         26:d7:a9:43:96:e8:01:c9:cd:86:20:38:d3:22:a8:d7:f5:05:
         ee:3d:72:d2:10:e6:0f:d9:0b:ea:5b:6d:0f:15:0b:27:d3:8b:
         96:88:d0:98:62:54:21:cf:aa:52:b4:b2:9f:bf:1d:8b:50:a9:
         2e:0f:13:e8:b5:65:67:91:e4:5b:d7:f9:3e:00:97:1d:4c:bc:
         bf:08:3d:b5:8c:f8:5f:42:59:af:14:b7:0d:1c:6a:36:88:de:
         0f:86:61:79:4b:2f:46:f3:72:a9:b6:bf:65:db:a1:86:87:63:
         b5:cf:69:3f:89:61:ac:b3:ed:69:c9:7b:9c:aa:b4:29:a9:eb:
         bb:b9:eb:31:33:c4:be:1d:ae:51:e6:07:c4:d8:c2:d6:91:81:
         f6:97:10:74:5d:86:a5:cd:35:eb:99:ea:17:30:c5:bd:69:70:
         87:4e:47:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:24:37 2025 by rpki-client