Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/971182dd-1422-30d6-98cf-97e0afc19304.roa
File:                     971182dd-1422-30d6-98cf-97e0afc19304.roa (raw, json)
Hash identifier:          G4gxTgXeZcMFK/3ebddcrujE8BznHEdzsiGBa0BxCWo=
Subject key identifier:   A3:4D:29:B7:14:A3:46:50:2C:B1:59:91:44:68:32:39:6B:B8:12:11
Certificate issuer:       /CN=e3aefa7a-1469-41b1-a14f-6fc251b55823
Certificate serial:       010D0C9F4328584B6BC74A2009364EFBD9200100
Authority key identifier: 23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/971182dd-1422-30d6-98cf-97e0afc19304.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     15280
IP address blocks:        205.166.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:4a:20:09:36:4e:fb:d9:20:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3aefa7a-1469-41b1-a14f-6fc251b55823
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=63b72011-f55d-45eb-abf9-f24ba62338f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7d:a6:7c:8d:3a:0b:85:9d:25:01:16:ff:b0:
                    df:09:f9:12:7c:27:32:29:6d:df:51:3a:5e:84:ef:
                    4b:0c:c3:3e:09:3b:29:95:5d:e5:f7:52:7c:37:63:
                    ea:55:e2:34:76:a1:e5:0d:62:3c:86:18:71:13:d3:
                    bd:18:68:d9:b4:8c:26:1a:03:5a:31:b7:fc:ef:65:
                    de:bb:66:c5:a5:22:f2:46:6a:99:c1:e2:89:36:c1:
                    0d:0e:7f:f3:e4:d8:f1:4e:0b:57:0d:93:65:ae:0a:
                    d6:61:28:01:af:21:15:6f:ae:70:90:ee:af:cf:37:
                    c9:af:8b:a0:bc:8b:3b:9d:e0:b8:c3:f7:f7:bf:09:
                    69:28:80:cb:60:c4:49:ed:56:e7:17:8e:ed:cd:0a:
                    ec:71:69:40:75:93:16:7d:92:64:bb:30:05:79:26:
                    28:c8:d2:a2:b8:61:3b:7c:3d:70:d3:e5:06:47:06:
                    31:ac:b2:eb:34:91:f3:ce:a9:65:f2:41:29:b8:f0:
                    ea:09:d0:ea:16:1f:46:df:03:9a:c2:b8:54:35:34:
                    38:e3:8a:63:6b:d3:38:c7:d3:d3:54:30:6f:22:e3:
                    54:6b:9a:6c:c9:fb:e4:b3:9f:39:15:69:08:85:b2:
                    e2:80:17:cf:59:0d:1d:e2:42:8b:ca:89:66:17:c5:
                    6f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4D:29:B7:14:A3:46:50:2C:B1:59:91:44:68:32:39:6B:B8:12:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/971182dd-1422-30d6-98cf-97e0afc19304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.crl

            X509v3 Authority Key Identifier:
                keyid:23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:d3:29:75:8b:e5:ba:c0:5e:7f:99:2b:1d:19:85:ca:4c:
         a8:0c:8b:f1:0d:40:81:9b:91:20:18:e4:72:7a:a4:02:bd:7b:
         73:38:85:73:ba:49:8e:fc:d4:df:fc:c7:f7:9e:cf:bd:3e:ce:
         ad:77:bb:bf:22:1f:d6:ba:55:e4:92:36:b1:ec:b8:4b:d5:12:
         32:0e:b9:62:94:64:1d:84:c5:6e:50:aa:52:95:2d:f1:37:64:
         ae:d9:ef:78:36:e8:70:c3:eb:73:86:6a:21:49:a0:d9:f5:22:
         59:b7:89:5f:21:f4:11:e8:81:7a:6d:db:d0:49:02:77:a1:86:
         9c:6d:13:e7:3b:a4:65:d7:ce:42:af:76:a8:6c:b2:05:eb:0e:
         e8:9e:22:21:e7:94:b8:c8:ad:05:45:cb:be:5d:33:7a:64:8d:
         7b:e6:da:e6:ed:8e:94:d6:fd:35:18:b5:12:61:d7:29:7f:de:
         43:75:29:96:93:6e:84:c6:24:71:16:a9:c6:99:2c:ba:b8:69:
         3a:bc:89:31:ed:24:61:57:61:e4:77:1e:62:f5:57:9f:af:8d:
         5a:9d:80:c7:46:f9:44:69:4e:f8:e5:81:ea:45:ba:1b:e7:f5:
         97:b3:e1:23:c2:8a:88:93:91:c1:e8:38:fb:04:14:41:95:63:
         06:3b:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:33:17 2025 by rpki-client