Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/f5c33dcf-97ed-3d15-b519-f4ff0531f815.roa
File:                     f5c33dcf-97ed-3d15-b519-f4ff0531f815.roa (raw, json)
Hash identifier:          0Y+UhWRQ6AyzPKgo4GDMLnTsJoSr75LblNF5xJ5KqIY=
Subject key identifier:   CA:97:92:38:F3:6D:58:E2:DE:18:2A:DC:E8:A8:30:6F:85:FB:3A:87
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584B328C377ECC72101327973460
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/f5c33dcf-97ed-3d15-b519-f4ff0531f815.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     1299
IP address blocks:        204.156.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:37:7e:cc:72:10:13:27:97:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=d00e8069-392e-4f30-80b3-4359cc87234c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:cd:e9:45:a7:d3:0e:a7:d5:d2:04:85:3d:
                    64:eb:a8:66:2e:a2:6d:00:dc:8d:6e:f9:29:72:2c:
                    c5:85:e2:6d:47:ef:73:cc:42:65:4f:a8:4b:15:36:
                    82:cd:7d:32:81:02:4e:17:4b:17:76:6c:29:46:fe:
                    24:08:70:1d:36:e3:5c:65:0f:26:79:b9:a0:b4:78:
                    86:07:81:25:6c:b0:ac:2a:3a:f9:f0:97:11:ea:98:
                    d3:92:5e:ac:e8:bc:96:68:78:e2:6c:76:74:16:c8:
                    92:33:20:a0:88:d5:55:14:2b:74:05:82:f3:42:b1:
                    51:a5:fa:11:17:94:5a:47:a2:2d:0b:26:65:f2:4b:
                    56:0d:66:22:cc:b9:d5:39:c8:09:ed:0a:e1:12:20:
                    8a:9a:e4:8b:82:e4:ff:93:df:31:09:70:b1:12:5a:
                    80:64:1c:5d:ba:b2:c0:a5:f5:33:d4:8a:48:81:01:
                    05:cc:3c:c0:40:7e:40:7f:6f:11:05:27:e8:63:05:
                    e3:73:20:62:ed:f1:53:da:41:f5:49:03:30:7e:db:
                    34:7f:8f:e9:11:fd:73:a3:a4:ef:5b:ab:1e:dc:85:
                    d7:00:0f:28:cb:e1:b3:fe:85:e2:6d:0d:86:95:ce:
                    ab:d9:de:f7:b7:c1:eb:c8:d0:20:57:89:73:2e:12:
                    68:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:97:92:38:F3:6D:58:E2:DE:18:2A:DC:E8:A8:30:6F:85:FB:3A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/f5c33dcf-97ed-3d15-b519-f4ff0531f815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:52:86:d0:58:9e:5d:41:9d:1a:d3:86:58:28:8d:93:cc:13:
         c8:95:98:47:13:d7:ed:22:ca:eb:55:eb:e8:89:3a:80:30:ef:
         e5:4d:82:0f:99:48:ec:6c:1f:65:bb:0f:db:62:9c:dd:3c:37:
         d1:7f:ad:6a:dc:6e:dc:89:0d:8a:99:18:5e:e8:17:b0:3a:09:
         96:91:05:a9:cf:7e:85:a3:c9:53:2d:d5:33:62:1c:e7:96:5f:
         5e:0a:c2:85:cb:d1:6c:c0:17:dc:4a:3e:0b:25:1a:e5:ad:28:
         1f:1a:0d:ce:c5:af:08:36:74:85:5b:c9:af:9c:3e:66:5d:94:
         2b:ad:83:50:0f:ea:22:df:6e:12:b1:90:54:22:e8:ec:6e:f9:
         85:f0:49:b9:d8:c5:54:04:bd:e3:86:e2:c9:d6:a5:b4:d6:ee:
         e8:25:82:e7:6d:e6:bf:c1:fc:0f:14:ea:42:2b:e8:21:38:7f:
         17:e1:79:b4:6b:60:c1:e8:b5:20:99:ea:f6:a2:10:7a:e6:41:
         f0:0e:01:d9:7a:8d:03:02:2f:f4:3e:42:2a:5a:38:40:ae:0c:
         3b:64:38:0e:f5:25:1e:1e:4a:5a:e1:14:0b:31:77:36:8a:4a:
         1d:0c:bf:70:9e:27:89:54:c2:f4:84:a3:fb:59:4e:e0:67:2c:
         d8:be:21:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:23:51 2025 by rpki-client