Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa
File:                     ee97e258-8632-3ff0-ab06-d0fec008173c.roa (raw, json)
Hash identifier:          4yhNz4t7rxbNy8Dhbd2oOTSTCpbFqUrSNDWK7paee7c=
Subject key identifier:   85:FD:EB:92:C2:BA:43:68:18:29:02:A3:B7:FA:93:03:90:2B:6F:C2
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584B328C30D197BF40757EAE5600
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     35950
IP address blocks:        204.235.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:30:d1:97:bf:40:75:7e:ae:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=3b3ca001-96ab-48b5-b30f-0a78c3c612e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:e7:be:a1:d8:24:19:62:9f:eb:34:a7:0b:
                    99:d0:bd:32:ca:f8:32:58:c1:38:48:77:8e:32:68:
                    8f:f9:91:09:8b:98:2f:65:46:af:eb:c8:5b:85:c3:
                    3f:7a:32:6d:fd:a9:ff:18:b7:16:8e:c4:ce:79:28:
                    52:28:78:3c:84:41:8e:83:41:04:e3:c1:55:34:83:
                    d6:45:2b:1e:fa:2e:0f:8b:2e:2c:01:8f:fc:94:c7:
                    1a:09:8a:57:c5:f3:4d:8e:f3:27:24:19:c7:d3:ac:
                    ec:d5:03:88:3a:70:1d:42:34:dc:01:81:c7:88:a0:
                    0e:48:bd:13:d9:e8:26:5c:10:6f:23:c9:2a:6a:7f:
                    02:30:7a:34:83:b0:70:66:33:d7:42:9a:65:a5:6c:
                    4f:22:bd:de:b9:1d:cf:43:ed:12:f1:f5:a6:bb:30:
                    0b:d5:39:63:f9:d9:57:6e:38:21:39:89:5c:cb:71:
                    ce:7e:c7:fc:8d:6f:e5:97:6e:cc:bb:16:f3:d3:24:
                    46:f2:f1:f7:fb:eb:50:d0:be:9f:02:89:eb:c6:6d:
                    1a:5e:d2:89:31:8c:e1:f6:7b:36:51:b7:9c:cb:1c:
                    8b:b6:2c:1b:ae:ba:66:e1:ca:2c:47:6a:c7:d3:0a:
                    25:bb:a0:31:f7:01:a6:4a:f7:99:11:de:2a:64:57:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FD:EB:92:C2:BA:43:68:18:29:02:A3:B7:FA:93:03:90:2B:6F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bd:b8:08:fd:26:4f:59:d9:a4:4a:0d:51:c2:83:c1:ef:1a:
         03:4c:e7:c7:15:9d:41:a4:28:c7:2d:8f:73:88:cc:d7:ba:72:
         7b:98:47:9a:e5:1d:88:e8:0b:43:49:85:be:3d:7b:3b:74:93:
         3f:03:3d:b3:a1:b4:56:bc:5f:c2:e7:e3:4d:f1:4b:01:0f:d1:
         ff:7b:d0:74:89:b2:ce:a3:89:90:75:64:f4:6a:81:35:58:17:
         b6:fc:57:fe:91:6b:dd:5c:54:38:63:e6:64:98:6a:25:2d:13:
         50:cb:28:f6:6c:a3:db:13:9d:e2:02:24:de:59:d5:38:68:9b:
         97:69:cf:1e:2e:87:e9:5a:47:2a:43:8a:d3:1e:6f:8f:a8:52:
         64:16:da:6c:23:9d:60:3d:75:a5:57:87:bb:e5:63:5b:89:a4:
         1d:52:f5:eb:eb:d5:2e:1e:13:f6:fe:74:fa:e3:83:3d:43:67:
         42:80:a0:0b:76:92:12:53:a1:37:19:5e:34:c0:4d:39:4a:54:
         5e:44:75:bd:57:30:b3:83:28:e4:65:8c:60:a8:ed:40:82:ee:
         9a:64:d6:a8:35:87:01:cc:49:da:fa:8f:6a:0e:31:69:aa:52:
         21:6b:37:52:5b:58:38:d2:94:79:88:73:90:44:b5:c7:70:7f:
         32:58:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:13 2025 by rpki-client