Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/20cae094-9392-3adc-8e5e-50d8acca91d7.roa
File:                     20cae094-9392-3adc-8e5e-50d8acca91d7.roa (raw, json)
Hash identifier:          C/5ifFkpWL6H/BDWD/Yz1KgszpnQGOE+0ydkOLJ5LV0=
Subject key identifier:   B9:2C:C2:3E:C4:F1:34:21:8C:E0:85:40:AB:62:20:55:F6:A7:B8:8F
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584B86737413CACA35172D7ED080
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/20cae094-9392-3adc-8e5e-50d8acca91d7.roa
Signing time:             Wed 15 Oct 2025 02:18:39 +0000
ROA not before:           Wed 15 Oct 2025 02:18:39 +0000
ROA not after:            Tue 13 Jan 2026 03:18:39 +0000
asID:                     63023
IP address blocks:        216.106.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:73:74:13:ca:ca:35:17:2d:7e:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct 15 02:18:39 2025 GMT
            Not After : Jan 13 03:18:39 2026 GMT
        Subject: CN=71ac5024-4ac0-4fe3-ae91-4e014147e3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:65:67:04:76:14:08:d4:c8:e8:eb:5e:05:cf:
                    ff:9a:99:5e:16:a9:4b:87:26:22:06:77:f0:ba:bb:
                    a0:63:30:fb:0a:4b:ec:28:f0:f6:32:6a:a7:f5:f5:
                    11:b7:8e:e4:50:18:78:9e:67:ec:fc:8b:83:61:5b:
                    2c:9c:6a:11:cd:79:4b:d6:74:05:bb:ce:5e:d0:8c:
                    f9:78:ac:80:65:fa:c8:4a:47:48:f0:4e:1d:64:d9:
                    9f:06:1a:19:ad:7d:25:1b:7d:f6:0a:c5:bd:5a:8d:
                    ad:a3:12:96:32:83:d7:31:de:70:17:63:59:26:70:
                    1b:82:e6:cb:be:36:51:2d:7e:1d:0d:1e:4d:30:7d:
                    4b:bb:95:1d:91:37:63:75:50:08:f3:e9:30:dc:95:
                    bf:5c:60:75:d7:a1:ca:4d:be:f0:83:fd:ea:26:48:
                    52:31:7d:87:bd:d6:00:34:d4:f2:8f:9c:5c:3e:b0:
                    70:15:f0:d5:b4:72:d5:08:c1:be:07:53:e7:01:db:
                    a3:dc:96:df:d5:2b:0f:bc:5a:2e:fb:03:d6:ea:8d:
                    e2:68:17:2c:c5:d8:38:25:96:3d:25:b4:17:81:90:
                    6b:ac:d5:ca:db:67:63:03:6e:74:ba:9d:6e:ae:35:
                    03:c9:0e:3f:3c:74:f4:bb:64:d7:86:2c:9b:44:ce:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2C:C2:3E:C4:F1:34:21:8C:E0:85:40:AB:62:20:55:F6:A7:B8:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/20cae094-9392-3adc-8e5e-50d8acca91d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:69:3e:4e:bf:b7:1f:4a:34:46:20:f3:8e:3e:a9:9e:64:
         7f:83:85:bb:6b:be:7e:9d:d1:43:e5:f4:73:36:d8:c8:22:d8:
         20:ac:7d:1a:70:f5:eb:e6:8f:99:62:28:60:6d:43:fc:99:1f:
         ff:7b:86:4d:bb:e4:b8:05:c0:b0:84:47:d0:e0:37:cd:62:de:
         2a:79:4e:9e:14:27:6d:07:ac:87:b2:69:19:34:19:55:b3:c1:
         8e:65:21:36:bf:7f:ba:c9:6f:3c:ae:1c:7e:67:5a:f1:75:24:
         10:0d:f3:e9:d4:ab:84:46:50:f3:58:a5:b8:e5:17:ee:96:15:
         eb:3e:9b:74:36:79:72:fa:de:96:97:c1:a6:f5:b8:a1:80:9a:
         77:51:97:50:a1:41:ff:63:da:22:42:0b:4b:a0:69:d4:79:fd:
         cd:8e:b7:60:2a:05:72:d6:22:66:b3:b4:df:01:71:d1:f8:61:
         5d:1f:1d:32:0f:5d:c2:5a:3e:fc:11:72:a6:a5:69:c6:5a:b8:
         82:f5:fc:65:bd:d8:e4:3c:f1:07:d7:9d:a0:60:3c:55:c8:b8:
         84:ab:c4:b3:02:23:be:fc:3b:c8:20:a8:5b:3e:77:21:51:0c:
         62:11:81:8f:d7:15:7f:6f:ad:b9:d1:c2:8f:80:10:95:8a:a3:
         56:01:8b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:44 2025 by rpki-client