Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/8a8e24bb-1625-3cea-badd-63b695b869b5.roa
File:                     8a8e24bb-1625-3cea-badd-63b695b869b5.roa (raw, json)
Hash identifier:          bXU8D5K3QWzzdd7P2Okrr+ywqnj/hcPQ4csrkOTOuNE=
Subject key identifier:   58:AA:AD:E3:F4:F8:96:03:93:DF:4F:04:4E:00:20:CD:24:8F:E0:56
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F4328584B7C8763C04D66FBCBA010C4C0
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/8a8e24bb-1625-3cea-badd-63b695b869b5.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     397913
IP address blocks:        206.225.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:63:c0:4d:66:fb:cb:a0:10:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=70955f32-21e1-4cd1-b8e3-a74c48eec11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:6b:9d:11:2e:90:90:0e:56:a0:0c:49:45:
                    f1:65:d9:64:9d:6c:48:60:9a:d6:18:d8:ec:1b:fe:
                    c1:0f:85:93:30:db:7b:36:e8:fb:ec:36:74:2d:06:
                    8a:14:6c:07:bd:17:5a:f7:72:f2:fa:44:f3:e7:86:
                    b0:6e:e7:95:73:f8:5a:14:c4:79:68:37:1f:00:44:
                    0e:5a:1d:dc:c4:aa:fb:bc:d9:b5:91:7a:6e:ee:b1:
                    46:b7:29:b9:a8:d5:14:06:dc:86:d7:52:32:88:5f:
                    31:86:f8:b3:e7:42:48:11:9f:e0:a0:20:63:43:18:
                    cc:8f:f7:24:80:77:53:a2:22:b3:6e:64:f8:7f:47:
                    30:a9:e1:e3:2c:08:e0:62:36:29:0a:87:6f:96:05:
                    36:7e:34:1e:91:f0:4f:b4:ca:b8:3c:2b:9b:ff:2f:
                    fc:c9:c4:b1:71:79:3d:11:2d:9c:8e:77:73:4b:ca:
                    5d:87:89:67:95:9a:ff:6f:1b:50:9a:96:51:a6:ce:
                    2b:da:a9:f8:d9:f9:17:96:c2:e5:f3:d5:ab:1b:84:
                    d6:56:c0:bc:74:6e:36:43:52:0f:fb:18:28:d8:dd:
                    7e:b3:66:c0:ea:8e:68:f7:08:aa:fb:98:59:f7:5f:
                    87:88:89:46:ac:4a:d0:71:f0:ea:2d:ff:56:c9:79:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AA:AD:E3:F4:F8:96:03:93:DF:4F:04:4E:00:20:CD:24:8F:E0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/8a8e24bb-1625-3cea-badd-63b695b869b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:f0:63:e7:56:b2:5a:7d:ec:97:01:e3:a2:aa:1a:aa:55:
         df:8d:6b:d7:9f:5c:57:8c:f3:5d:6e:f9:1a:6d:3d:06:4d:0c:
         46:ec:85:ea:94:f2:c2:5b:e8:bf:82:60:db:2c:d2:8e:88:ca:
         1b:49:97:64:fb:53:27:c8:45:6a:e9:0f:a4:8a:75:49:4d:f7:
         71:e7:a5:f6:46:fc:5c:70:0f:91:3b:67:89:71:be:40:93:9f:
         dc:ff:3e:52:f9:ed:d6:09:e8:b9:d4:18:cc:d4:db:f5:f1:d4:
         e7:f2:f9:84:3b:48:16:d4:b1:1d:08:f8:f4:1e:df:69:bf:02:
         d5:03:e8:4f:f4:c5:b9:92:82:8d:3f:82:01:3b:13:dd:38:b3:
         3e:a3:85:99:1b:b2:a5:e8:b4:3d:5d:ed:76:55:26:a0:31:e1:
         ba:97:73:81:a1:4c:a2:84:93:ff:0a:5a:87:fb:4b:9b:16:ba:
         46:41:02:44:f9:46:3c:66:20:fb:a3:95:f0:19:e9:3b:09:59:
         b8:6b:53:0f:8a:55:1b:18:d2:b0:69:b6:a6:cd:0f:a1:e0:c6:
         d8:62:ff:9a:36:30:f9:10:40:74:cb:ac:f3:d1:f2:15:83:74:
         3e:73:43:2a:49:9c:23:68:07:e4:d8:40:a7:d4:6e:3e:f1:19:
         3b:79:eb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:09 2025 by rpki-client