Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/48d29f1b-28ce-30ad-a06c-026eb5182a52.roa
File:                     48d29f1b-28ce-30ad-a06c-026eb5182a52.roa (raw, json)
Hash identifier:          3zu8+zkklPS4H2dtpiDhbQxlWxitYjmUYHwfi+8JC8M=
Subject key identifier:   DB:C1:50:65:B3:58:25:5F:FA:57:30:90:22:69:69:D5:C4:90:69:66
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584B8EACED02AA0EDCB2A6FBB000
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/48d29f1b-28ce-30ad-a06c-026eb5182a52.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     10317
IP address blocks:        204.155.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ed:02:aa:0e:dc:b2:a6:fb:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=ba8c0f58-7436-47f0-91f1-25c02f1188f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:81:2e:e2:af:9b:47:b3:e7:77:e3:ae:4e:7c:
                    4f:b0:41:95:df:27:68:a4:13:6e:1d:d1:ab:f6:33:
                    f2:66:db:e1:ea:8d:18:1b:b0:15:2d:b7:55:7f:1c:
                    a8:df:74:e2:96:97:49:6a:aa:a8:f8:2c:8c:47:35:
                    18:f1:db:81:5c:e5:49:0a:61:d4:1a:d2:fd:ff:ab:
                    f2:fe:77:34:d7:64:f1:c0:42:86:fe:55:2c:cb:32:
                    76:c6:66:76:ed:78:68:91:45:7c:ba:bf:e0:29:13:
                    3b:c6:12:c2:f5:a5:0f:b1:68:74:8b:5c:c6:6d:65:
                    84:a8:8d:2c:0f:ae:5e:72:91:f2:49:92:14:10:94:
                    27:78:43:40:2a:63:28:32:e1:99:3b:44:3f:6b:0e:
                    63:16:80:f3:0f:b9:fe:4b:2d:7d:63:9c:a2:f3:36:
                    36:dc:f2:03:c7:57:66:14:7d:98:cf:78:b2:a4:35:
                    4b:47:c7:fb:4a:fb:d8:2d:d8:e3:aa:5c:8a:7f:3b:
                    83:20:f6:4d:0b:d6:21:ec:df:52:8f:e8:45:11:c1:
                    61:b8:ee:c9:44:c4:bd:2f:c2:64:d4:36:67:c5:bf:
                    0b:a6:b2:c2:9a:34:f5:60:96:09:ca:7d:71:fc:ca:
                    bc:53:36:d9:65:f4:b2:f2:d7:d4:aa:6e:02:c2:29:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:50:65:B3:58:25:5F:FA:57:30:90:22:69:69:D5:C4:90:69:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/48d29f1b-28ce-30ad-a06c-026eb5182a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:37:89:ef:24:0a:b2:cb:49:47:18:c0:9a:9c:71:47:2a:9e:
         84:40:a1:e8:07:97:5e:ee:15:94:bd:64:ab:14:3c:b5:d1:65:
         5a:d8:3a:bf:4d:05:18:47:4a:00:6d:d0:b0:df:1c:8e:83:51:
         3c:77:0a:7a:3b:38:35:ac:ab:65:67:c6:84:b9:a4:34:b3:ed:
         a5:c7:e8:3b:8e:a5:5a:85:c3:c9:45:18:73:ba:30:28:96:12:
         4a:de:d5:b7:36:a5:fb:ed:87:53:f8:86:9b:c9:12:eb:ef:0d:
         3c:82:ca:96:38:68:e5:04:eb:57:8a:4c:be:ea:27:06:f8:ff:
         a4:ff:c1:00:26:4e:97:94:e3:5b:44:d5:fc:42:c9:37:37:4c:
         04:a0:51:3b:6e:5c:21:4f:40:06:b7:d3:4e:48:c9:be:5b:c2:
         8e:ad:53:fa:ec:f6:1d:22:a3:4a:69:6e:19:25:c1:d1:65:ef:
         2e:74:9a:2a:1d:5d:33:ce:bd:b5:ac:c7:d7:33:8a:e8:37:3d:
         0a:0b:42:c7:21:c4:3d:c7:0b:35:43:96:bf:9a:31:05:72:fb:
         c2:80:91:39:e5:89:a9:d0:04:9b:82:f7:8a:8a:a0:12:31:64:
         e1:c2:6d:e4:9b:93:c4:46:56:df:49:b0:1e:fa:aa:25:ae:65:
         0d:ea:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:55 2025 by rpki-client