Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2a5ebfa3-3532-39a0-91d8-e0c9969eabfd.roa
File:                     2a5ebfa3-3532-39a0-91d8-e0c9969eabfd.roa (raw, json)
Hash identifier:          DO587dd9w6XFM8356kMNfOs61hQmPHG/+AxoQUoZfq8=
Subject key identifier:   1B:69:BF:40:6A:E0:88:6B:92:46:F4:55:ED:97:CC:4B:3E:36:0E:36
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52188F53095F82703EF300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2a5ebfa3-3532-39a0-91d8-e0c9969eabfd.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     20115
IP address blocks:        174.87.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:18:8f:53:09:5f:82:70:3e:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=a1c6e428-2a05-48ad-91b8-b793906adb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:45:f1:7f:ea:18:18:6b:22:7f:30:53:83:5a:
                    15:85:b6:8e:13:77:42:1f:59:78:3e:16:49:44:45:
                    f0:6a:90:05:48:e1:98:d5:6e:5f:4d:c2:c4:ad:43:
                    19:aa:9d:04:1b:27:7f:d8:65:65:67:f6:a4:26:4a:
                    1d:37:1d:9e:a3:04:74:a0:d0:68:05:23:d7:12:57:
                    81:77:96:d0:c7:6e:e4:01:e0:66:00:38:3c:49:c7:
                    d4:27:72:a6:14:31:09:62:2a:73:f2:62:5b:96:15:
                    a6:5b:6d:9d:a1:54:be:6d:ab:27:35:09:53:01:c5:
                    20:24:fe:57:0f:8e:03:42:ac:39:a1:84:8f:95:6c:
                    1a:0e:49:27:6b:b7:28:90:6a:ef:79:52:43:1b:e3:
                    64:fc:f4:a7:ce:d2:bb:93:90:c1:f9:1e:29:11:75:
                    66:7d:7d:71:b4:5d:12:58:0a:5f:04:fb:fe:97:dc:
                    c3:7e:bd:2e:ef:8a:b8:60:4f:6e:91:22:e6:9b:32:
                    86:f4:ac:50:dd:6d:87:cd:51:c0:0a:4c:58:8b:92:
                    c4:70:0d:83:af:89:18:1a:39:b8:90:c1:41:be:6d:
                    e2:06:00:66:2a:77:58:49:17:6a:08:bc:81:76:d0:
                    18:9b:27:6e:2c:c2:c3:3a:2c:79:8d:53:07:17:13:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:BF:40:6A:E0:88:6B:92:46:F4:55:ED:97:CC:4B:3E:36:0E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2a5ebfa3-3532-39a0-91d8-e0c9969eabfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.87.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:12:74:7e:e3:38:55:96:c4:15:b5:d6:72:a5:3d:f2:98:2e:
         9b:99:a0:20:93:b2:a5:56:4a:37:4c:6c:ef:41:db:5d:35:23:
         1e:87:ce:34:e8:0c:ba:bf:e8:cf:b5:d4:fc:e4:ec:36:b4:9c:
         fe:ca:c4:41:a8:88:f3:f4:3f:9e:46:45:e8:bc:c0:cf:78:54:
         34:55:0a:49:36:7b:5b:b9:a0:1f:57:a9:5b:0f:b7:30:d5:70:
         b4:ad:b4:c0:e5:cc:bc:c6:39:c7:01:88:1f:b2:b0:99:5a:48:
         c7:4d:2c:0d:a8:22:a9:ea:ae:aa:cc:65:50:b1:1b:f4:83:96:
         e6:01:86:22:59:5d:40:a8:77:68:c7:e8:30:23:cb:56:13:d0:
         b0:78:da:61:a1:25:70:7f:3d:3a:69:43:25:b6:b1:69:f3:99:
         61:b1:62:48:f8:b2:29:5f:96:8e:3f:d9:ed:4f:fe:e8:8c:22:
         1d:d0:6a:53:bf:e7:7a:66:68:f0:3b:79:1f:42:be:c3:e7:fc:
         3f:c0:13:ac:c2:0b:a4:1e:2a:99:e4:4b:d5:73:9d:ab:43:50:
         8d:8d:e7:91:0b:bc:0d:25:8e:78:ff:59:79:b0:7b:13:eb:e7:
         a5:58:15:df:27:10:b3:03:3a:ad:b2:92:5f:68:bb:b4:9f:3b:
         41:3c:49:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:42:09 2025 by rpki-client