Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/61c36f2d-9b10-32ab-b83f-63c32570908d.roa
File:                     61c36f2d-9b10-32ab-b83f-63c32570908d.roa (raw, json)
Hash identifier:          8h358Oq3/hDHnfvozem8HfV8O+uHWSpmBQsRWbyM/kk=
Subject key identifier:   7A:E6:A4:21:A9:96:F9:A6:A7:4C:64:DE:25:C6:58:E4:39:8D:ED:C6
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584B328C37C2957B0DACB6D08980
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/61c36f2d-9b10-32ab-b83f-63c32570908d.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     35950
IP address blocks:        204.156.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:37:c2:95:7b:0d:ac:b6:d0:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=0e6c5a0f-6377-4ef0-9e9c-4c68d247c556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:a6:cf:d9:87:63:d2:ff:48:b6:0e:75:6e:
                    08:3e:71:dc:59:99:b8:5c:a6:26:97:59:a4:54:33:
                    e9:42:d4:50:29:5c:9a:28:ff:10:8a:a5:cd:21:1e:
                    da:19:24:ab:fb:25:13:47:88:f0:06:7e:89:12:9e:
                    68:86:6a:c6:ea:d8:ce:0b:15:ab:af:ee:0d:d9:01:
                    88:e0:50:da:c5:0c:9e:3c:d2:59:92:62:8d:aa:9c:
                    b2:49:e6:72:e4:37:6c:fd:e7:73:65:40:5b:27:ba:
                    bf:89:bb:68:81:86:de:79:ae:83:a4:d3:f5:f7:33:
                    0a:41:b0:c6:1e:3e:28:b5:6d:3d:81:d6:66:5a:06:
                    f1:bb:fa:ed:99:81:68:40:7f:b4:ac:ef:6b:6b:a5:
                    07:d4:af:fc:a0:73:c7:91:b5:1e:55:83:f8:46:68:
                    92:ac:ca:96:43:7e:b3:65:c0:18:b3:2e:55:cb:6d:
                    44:fb:ae:81:bf:d9:91:83:50:d7:86:a3:df:a2:1d:
                    05:ff:af:50:55:c4:fc:b7:73:41:4e:36:ae:cf:a9:
                    ce:fe:c8:4c:b0:03:75:7c:e6:14:a8:c7:71:50:4f:
                    bb:db:ed:96:e7:54:ab:75:c8:4b:2b:32:e1:9c:86:
                    aa:a5:dd:2b:bf:bc:8a:23:93:68:5e:2e:c5:8f:68:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E6:A4:21:A9:96:F9:A6:A7:4C:64:DE:25:C6:58:E4:39:8D:ED:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/61c36f2d-9b10-32ab-b83f-63c32570908d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:ef:ba:35:b3:a5:f8:9e:f4:48:4f:7c:53:cc:ff:a5:80:
         97:d3:a1:21:99:bf:7e:1b:77:b9:3d:29:60:c6:1b:96:8d:77:
         ac:68:8d:d7:c9:7d:11:cb:1c:5b:a5:53:f0:8e:5b:5d:8a:11:
         45:73:5d:92:9a:20:55:71:e8:70:8c:10:ac:40:2a:27:fc:7b:
         5b:85:b6:71:c8:16:3a:1a:ac:f2:84:50:2d:1a:b7:a0:c9:40:
         51:48:b7:74:6b:52:39:56:74:1d:43:b9:54:26:f3:fe:57:6f:
         28:c7:0b:69:94:9d:a2:b4:5f:7b:b2:74:88:b8:88:fa:95:9e:
         c3:8d:5d:36:f2:64:17:c9:08:81:48:fb:b4:c6:0f:ac:f5:d0:
         6f:68:1f:26:00:17:d2:a7:3e:8d:4d:32:6a:d4:a4:fb:9a:a1:
         21:db:36:44:4d:f6:80:f9:e2:92:db:e3:87:15:43:03:75:37:
         b3:71:2c:01:24:d9:cb:32:f8:cb:47:c7:0b:24:10:a7:a6:37:
         ad:ad:2a:87:c6:29:34:91:b8:76:52:32:a7:07:86:d1:88:bb:
         cb:5a:8a:ea:43:95:c5:a1:21:9d:fb:cd:44:34:01:8f:d1:cd:
         40:16:4c:58:aa:b3:c3:30:05:a9:6a:03:ff:e8:ec:c8:dc:3f:
         37:81:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:36 2025 by rpki-client