Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f8a149f8-10c8-3ecf-a0be-eaf9f726b68d.roa
File:                     f8a149f8-10c8-3ecf-a0be-eaf9f726b68d.roa (raw, json)
Hash identifier:          V8WkPks9e8HCNFZtxyXscJjDPJIMf41V3O9X9ttktB4=
Subject key identifier:   D4:FE:20:B3:08:70:C7:6B:1B:35:29:A7:67:A9:A1:12:B3:02:45:E4
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B8845237D7B7B31280BF8FDD8
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f8a149f8-10c8-3ecf-a0be-eaf9f726b68d.roa
Signing time:             Wed 15 Oct 2025 17:56:56 +0000
ROA not before:           Wed 15 Oct 2025 17:56:56 +0000
ROA not after:            Tue 13 Jan 2026 18:56:56 +0000
asID:                     272106
IP address blocks:        209.14.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:88:45:23:7d:7b:7b:31:28:0b:f8:fd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 15 17:56:56 2025 GMT
            Not After : Jan 13 18:56:56 2026 GMT
        Subject: CN=d6df8083-8d93-4d05-b060-e6d4c42176af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:84:61:6a:6b:89:f6:3b:63:84:d0:3a:fb:85:
                    b5:a9:71:4a:25:a4:5f:57:6c:8e:08:1e:c2:c7:7e:
                    3c:a5:b1:16:c4:60:96:31:f9:9d:22:d3:b2:7c:61:
                    6c:64:7b:d7:6c:3d:ce:58:2e:6b:d5:6a:b1:ba:a0:
                    44:5f:db:d5:ac:24:87:1f:19:4e:a8:7c:2d:d5:8e:
                    66:04:9d:65:fb:db:f9:82:5a:cb:35:56:5d:73:03:
                    fe:b1:15:fe:07:a0:7c:dd:19:44:d1:70:c0:8c:43:
                    55:b3:77:61:e4:64:33:2a:a7:cc:5e:b1:cb:5e:08:
                    1e:02:d7:38:f6:f1:22:70:da:6e:45:cb:4e:c6:f6:
                    40:e1:d2:cb:ac:a0:f7:dc:d2:0c:28:67:03:63:3e:
                    87:07:86:85:ce:a3:3f:e5:5e:b8:23:93:1b:0d:d9:
                    01:73:07:ce:b6:f9:95:05:cd:7c:01:7d:f8:8e:1f:
                    26:c7:aa:ae:80:2b:1c:b1:12:82:01:cb:39:67:39:
                    76:97:d3:38:c6:5f:56:aa:12:81:ed:eb:4f:0b:7e:
                    f6:ff:ff:ad:f2:3e:d6:ab:45:19:83:5b:e8:a5:b1:
                    f4:68:48:ca:98:94:89:1f:f5:e5:e9:f9:8e:bf:4f:
                    fc:e7:c4:f6:49:1d:19:fb:7b:25:6f:01:62:61:38:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:20:B3:08:70:C7:6B:1B:35:29:A7:67:A9:A1:12:B3:02:45:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f8a149f8-10c8-3ecf-a0be-eaf9f726b68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.14.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:eb:8e:ad:30:aa:1f:f4:c8:08:7c:df:5e:6a:45:6a:c8:86:
         7e:85:06:38:93:48:f4:82:9a:91:8c:b4:f0:81:51:1d:91:a1:
         e5:e9:ce:48:39:e3:0c:d4:38:87:bf:5a:3c:74:a3:dc:05:54:
         ac:90:08:4f:b6:5d:6c:eb:aa:0a:af:f1:7d:5f:ab:bb:95:60:
         40:ea:1c:5e:4f:dd:cb:30:06:a6:e9:17:40:86:46:4a:c2:57:
         8c:31:41:73:f6:ac:4c:f0:d0:09:53:31:c1:1b:fe:84:bb:2f:
         9c:39:de:49:f1:8b:d1:fd:76:09:72:3a:61:65:fe:ef:4f:a6:
         41:b3:e7:c7:3b:02:9b:0f:84:62:fd:5b:c6:1c:3f:9c:13:e5:
         c8:f5:e8:36:88:54:63:20:87:1b:38:ad:be:3b:e4:17:59:4f:
         4d:50:68:50:b5:8d:74:f0:6d:ae:ff:72:7e:2e:d5:a8:ce:71:
         e2:d3:cd:e6:ff:50:fa:f7:7a:54:91:9b:39:85:95:65:f1:ca:
         c4:37:e6:23:71:ba:b3:92:5c:c2:67:0e:f1:07:0a:c2:ce:61:
         be:33:44:f7:15:9f:c5:2a:ca:06:04:bc:85:eb:0b:47:a2:c5:
         a0:dc:c7:9c:75:27:7d:f8:9f:e4:51:84:8d:68:28:35:c4:75:
         9f:2f:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:19 2025 by rpki-client