Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/e91cd75d-5908-3141-8a30-b0040f194b0f.roa
File:                     e91cd75d-5908-3141-8a30-b0040f194b0f.roa (raw, json)
Hash identifier:          YcoIpCqYIAOEirLLjxZ4zG+EGJt0SwsZ3mR3/SeqGCw=
Subject key identifier:   BC:00:FD:07:39:11:D7:DC:23:E8:60:4E:82:B0:E9:79:72:F8:9B:14
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584B4081E229D2D111904BA4E000
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/e91cd75d-5908-3141-8a30-b0040f194b0f.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        69.194.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:e2:29:d2:d1:11:90:4b:a4:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=0629e32c-b44b-4af7-9630-5862240acbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:a8:95:c3:e2:2b:63:54:a6:ca:36:e0:9a:
                    e3:f5:be:97:a4:ae:d2:f8:b1:1d:1a:e0:7d:26:ed:
                    73:5d:dd:ce:49:90:04:fd:0f:0a:12:3d:f4:c3:2a:
                    98:82:ec:39:5a:7f:49:1d:3b:ca:51:d0:f6:5c:c8:
                    68:29:a7:2e:45:14:08:2c:2d:5f:18:cb:14:c8:92:
                    cc:79:ec:74:16:3c:31:47:55:0a:94:40:33:28:4c:
                    45:95:a1:40:ce:56:93:95:93:45:7d:6b:82:6c:aa:
                    bc:ec:19:e8:6c:95:c4:ac:88:55:a2:7e:6b:4b:ac:
                    24:f5:99:1c:37:1c:37:1b:46:23:3a:79:48:80:8c:
                    24:66:32:db:7a:00:b0:f6:df:00:d9:f5:5d:c0:17:
                    16:94:d8:1f:d5:96:46:c5:94:f9:9c:95:b3:a5:92:
                    c2:26:56:c1:22:18:64:bd:bd:d3:f4:bc:b8:29:c6:
                    d7:a6:42:92:31:2d:11:9a:21:08:46:28:ed:a5:a9:
                    a0:cc:bc:51:0e:45:61:a0:bd:d6:09:45:8c:af:7f:
                    87:34:b9:7a:85:9e:4f:2a:1e:9d:ce:30:35:0c:12:
                    7e:d5:9b:39:42:09:68:3b:f1:7b:fd:1f:9e:e4:13:
                    02:79:00:e8:15:8e:1c:bc:e3:e9:06:f7:54:a6:c2:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:00:FD:07:39:11:D7:DC:23:E8:60:4E:82:B0:E9:79:72:F8:9B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/e91cd75d-5908-3141-8a30-b0040f194b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:78:73:a3:3a:4c:89:59:ed:b6:8b:5f:07:03:92:94:8a:
         53:72:92:aa:b1:8b:57:2d:79:73:7f:87:43:9e:a0:27:47:74:
         22:51:09:70:c6:a4:28:9a:d6:de:68:14:61:eb:1b:4e:93:ec:
         5d:8d:9b:9c:4b:10:de:c2:8e:d2:0d:90:bb:b3:94:f0:b1:f8:
         8c:bb:73:72:3c:3e:9d:15:58:37:9a:51:c2:24:12:71:82:99:
         c4:2e:97:17:81:7e:8a:a3:05:58:04:b2:0f:00:94:d6:5a:3b:
         11:cc:04:45:51:88:d3:3b:49:86:88:18:9d:9d:89:d3:4a:0b:
         ff:38:9f:67:df:41:fe:c4:b6:72:48:0a:6d:19:6c:59:b2:cc:
         74:8c:06:7d:25:48:9b:a0:9a:5a:27:48:c5:17:f0:cc:ec:17:
         ab:08:5c:05:26:20:14:04:d9:70:5b:b3:64:7a:ea:65:6d:62:
         3d:8e:e6:7e:c4:9e:bb:d3:9b:b2:52:28:a6:42:28:bc:1f:76:
         63:9c:a9:dd:8f:87:65:1f:eb:c2:c5:b1:6c:c5:f3:5f:a2:e1:
         ec:e4:d1:e6:b4:7b:8a:cb:fe:e6:bd:05:9d:01:f4:64:42:94:
         20:d3:b4:6f:de:62:6f:29:6b:f8:f6:fa:c9:65:ea:fb:8d:f8:
         c9:39:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:22 2025 by rpki-client