Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f7a9980e-b741-3831-83e0-2fa1f1481867.roa
File:                     f7a9980e-b741-3831-83e0-2fa1f1481867.roa (raw, json)
Hash identifier:          25JTOv8Zi34849NlJN+QbpvznMIbsXubKk4sbNxR9jo=
Subject key identifier:   30:48:40:BA:B8:F9:E6:42:AC:AB:B4:86:D6:F5:B4:13:81:59:D3:95
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B8A945AE378121B6E5B0F8280
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f7a9980e-b741-3831-83e0-2fa1f1481867.roa
Signing time:             Thu 16 Oct 2025 13:48:10 +0000
ROA not before:           Thu 16 Oct 2025 13:48:10 +0000
ROA not after:            Wed 14 Jan 2026 14:48:10 +0000
asID:                     269194
IP address blocks:        198.242.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:94:5a:e3:78:12:1b:6e:5b:0f:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 16 13:48:10 2025 GMT
            Not After : Jan 14 14:48:10 2026 GMT
        Subject: CN=62d221ff-aadd-4195-88e4-e92bdff916cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:23:01:fc:e8:15:36:d2:e8:41:f2:1c:f5:b5:
                    1e:08:06:fa:f0:dd:65:f5:94:a2:c8:4a:35:56:e3:
                    7f:47:0c:9e:33:96:07:97:83:3a:69:a3:61:55:ee:
                    8b:fb:de:47:6e:be:71:cd:fe:c3:47:7f:a3:ad:6a:
                    93:8c:87:11:e2:9a:60:ca:b8:d2:d1:62:40:78:9d:
                    4b:3d:5b:70:e3:8c:53:2a:2a:b3:d4:75:11:15:0b:
                    15:c0:33:d0:00:c9:28:b0:9a:f8:e6:db:c6:62:bb:
                    f8:5c:bd:7a:22:3d:cc:ba:30:dd:22:13:ef:2e:60:
                    b4:52:66:2b:d4:c7:9a:c0:4f:c9:41:80:a0:93:eb:
                    8c:70:89:b4:f6:ff:e0:69:67:87:92:2a:e6:6f:6f:
                    e4:27:00:a3:4d:a8:41:e6:af:3f:8b:6a:93:1a:75:
                    e5:bb:52:0a:2f:40:54:6a:9d:c6:ac:f7:6d:f6:c5:
                    4c:a6:fb:21:e7:7b:1f:38:41:b6:a5:01:0f:82:ff:
                    98:f7:d1:1f:19:02:e9:d0:3e:15:78:ac:84:03:1a:
                    cf:30:81:43:36:1f:e2:be:a8:87:c7:32:5c:30:8e:
                    1c:57:4c:d1:b4:d2:64:8f:c5:27:a5:da:f5:d6:7a:
                    88:e1:53:f2:3a:52:e0:3e:41:2c:4a:41:9b:2b:e1:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:48:40:BA:B8:F9:E6:42:AC:AB:B4:86:D6:F5:B4:13:81:59:D3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f7a9980e-b741-3831-83e0-2fa1f1481867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.242.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:bd:b8:6e:59:13:f9:7b:13:ff:53:ae:b6:f8:43:39:0d:
         20:10:42:f8:fd:8c:fa:c0:d2:fc:6e:42:88:24:14:35:fb:cb:
         7d:e7:f7:24:61:3d:8f:83:14:a8:26:68:f6:27:d2:1c:7d:4f:
         00:0a:5b:79:ce:13:22:43:e6:59:92:76:c7:2a:89:9f:16:27:
         df:7d:f3:e1:04:00:83:8a:a2:fb:74:22:0f:48:47:04:f0:68:
         a1:30:7e:b3:62:94:1e:d1:3c:d3:22:5e:fa:a1:d0:29:03:f9:
         41:04:06:bf:e1:f2:cc:1a:00:05:5c:e7:9a:b4:2f:c4:d7:ce:
         74:f5:b0:75:47:f9:ae:24:27:e4:bc:b0:56:e8:69:b5:7b:0e:
         9d:99:5b:c1:2a:50:8b:36:82:ec:dd:5b:15:f7:97:5c:78:63:
         ad:cd:1e:e5:44:f4:80:74:8b:f3:a3:89:f0:41:a7:d1:79:ef:
         b1:fd:20:91:ce:35:6c:59:38:68:4a:be:13:f2:73:c5:09:70:
         c3:91:05:31:f0:c4:53:54:b5:a1:00:15:34:c6:17:27:24:c3:
         0e:38:77:ec:c5:54:0b:3b:d0:2a:bb:80:23:4b:ff:34:5a:d3:
         de:70:4f:c1:f5:3c:db:52:1a:28:bd:fa:c4:af:57:33:9b:8a:
         b9:16:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:18 2025 by rpki-client