Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/ed74d40e-3905-3828-8638-66b3d9a53d48.roa
File:                     ed74d40e-3905-3828-8638-66b3d9a53d48.roa (raw, json)
Hash identifier:          bTm7Ufz0suz65cARIRhmZIQbdi/a52YFRdkT19pdTVI=
Subject key identifier:   5C:F9:00:8E:B7:10:50:E8:F4:70:41:56:3E:ED:E0:4B:9F:6B:17:5D
Certificate issuer:       /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Certificate serial:       010D0C9F4328584B48E1B2EC37CA96BFC3195B00
Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/ed74d40e-3905-3828-8638-66b3d9a53d48.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     393581
IP address blocks:        206.57.128.0/20 maxlen: 20
                          206.57.144.0/21 maxlen: 21
                          206.57.168.0/22 maxlen: 22
                          206.57.172.0/22 maxlen: 22
                          206.57.176.0/22 maxlen: 22
                          206.57.180.0/22 maxlen: 22
                          206.57.184.0/22 maxlen: 22
                          206.57.188.0/22 maxlen: 22
                          206.57.192.0/19 maxlen: 19
                          206.57.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b2:ec:37:ca:96:bf:c3:19:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=7ff05e6f-cc01-41c3-a1e7-4d2a8a8fa374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:3f:66:52:43:d7:c0:03:25:93:e8:dc:ce:
                    d6:07:e3:04:20:26:20:b3:67:12:4c:22:75:4e:ea:
                    d5:86:dc:b4:8e:66:ca:a9:94:59:0a:44:a8:8f:f4:
                    48:ac:84:4d:89:94:75:ac:3a:dc:f7:3d:a4:a8:ba:
                    80:59:ae:b6:3a:6e:1b:44:a6:81:27:1e:38:70:44:
                    c9:60:e9:a5:21:41:56:9b:bb:4b:cd:51:20:9a:7d:
                    ed:69:0b:71:df:35:7f:b5:93:a0:d5:ca:84:05:ac:
                    4d:45:d4:e9:5b:5b:c5:64:a9:ca:94:db:ce:4f:84:
                    e3:29:02:15:3e:58:9d:d7:50:37:07:88:de:cc:8c:
                    25:90:35:d8:44:56:99:69:ff:70:56:2b:65:fc:2c:
                    d6:8e:98:0e:c3:86:f3:8c:ca:70:94:53:4a:bf:07:
                    43:03:21:17:c3:09:31:e5:8c:16:0f:e1:23:10:33:
                    43:cd:69:1d:0e:dd:e5:5e:ec:ee:de:67:55:76:ed:
                    cc:1b:11:77:9f:d8:e7:6f:3a:ba:bb:99:07:2f:71:
                    e9:b1:cc:62:43:30:76:7d:f9:35:d6:09:54:56:56:
                    c1:82:3f:4a:cc:c2:c8:86:13:3f:fb:59:01:06:fd:
                    51:13:1b:7c:6d:74:fc:79:2f:31:c4:35:24:04:c7:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F9:00:8E:B7:10:50:E8:F4:70:41:56:3E:ED:E0:4B:9F:6B:17:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/ed74d40e-3905-3828-8638-66b3d9a53d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl

            X509v3 Authority Key Identifier:
                keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.57.128.0-206.57.151.255
                  206.57.168.0-206.57.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:63:33:41:9d:62:61:db:de:cb:29:d0:9d:6d:fe:6a:13:
         6b:59:58:34:82:05:3a:23:a0:6d:66:79:85:13:f9:d5:45:08:
         a6:8b:25:d9:89:5d:1c:4c:95:96:d3:14:fb:00:ce:75:54:4b:
         7e:e4:83:d5:95:0f:01:c1:53:ab:d6:39:a7:29:b3:c9:39:b3:
         23:ab:57:b2:91:53:5b:5b:7a:b4:9c:13:d5:53:c6:9b:48:32:
         dd:8e:25:40:84:5f:3f:b2:e3:fc:9c:3f:17:a1:7b:e8:87:93:
         03:e8:37:87:b9:fb:f4:08:c0:49:43:1b:d4:98:ac:ac:0f:1a:
         40:2a:b9:57:ae:c7:fe:f5:b3:a8:75:e2:31:ad:56:f9:6c:c1:
         39:97:cd:f2:7a:34:7b:28:97:36:9b:8d:34:84:83:7a:3e:e3:
         24:0f:3c:cb:50:c9:10:fd:9d:f2:ce:37:51:ea:9d:28:c8:9b:
         29:31:09:34:78:9e:79:9c:e1:d8:31:1a:00:78:c4:98:d4:ac:
         5d:8d:a7:b4:8b:97:49:fe:53:c1:04:6d:f9:c3:4c:bb:ae:e5:
         8b:2a:51:38:64:3a:c6:d4:a5:78:cc:ac:f6:6f:23:7d:ba:1e:
         cb:4f:d4:33:dd:5f:80:4c:8e:b0:fd:ce:1c:7f:ff:b6:65:e0:
         87:48:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:51:39 2025 by rpki-client