Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/9225d0c1-07de-3b77-b931-edfae476dc1f.roa
File:                     9225d0c1-07de-3b77-b931-edfae476dc1f.roa (raw, json)
Hash identifier:          tspce0WWuN3pN92Fh6zct/sAVNfRGb0F8HDot1txz94=
Subject key identifier:   DE:45:0F:2C:24:2C:57:EE:81:FE:8D:47:27:A7:AE:C1:74:27:26:8E
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584B86717A10F11419B446F3EA80
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/9225d0c1-07de-3b77-b931-edfae476dc1f.roa
Signing time:             Wed 15 Oct 2025 02:14:40 +0000
ROA not before:           Wed 15 Oct 2025 02:14:40 +0000
ROA not after:            Tue 13 Jan 2026 03:14:40 +0000
asID:                     63023
IP address blocks:        216.106.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:71:7a:10:f1:14:19:b4:46:f3:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct 15 02:14:40 2025 GMT
            Not After : Jan 13 03:14:40 2026 GMT
        Subject: CN=873767be-494d-4b25-923d-a88ea90039e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:7e:4e:74:7e:db:eb:3a:ac:51:af:b0:b6:
                    68:d4:ff:7d:6b:21:b1:a4:63:30:c4:67:05:95:54:
                    0f:9e:d7:77:05:cd:8b:78:d4:66:bd:0a:a1:ed:c6:
                    5c:7a:65:0c:5d:c3:0d:9d:4c:f7:ee:bf:a3:b4:0a:
                    95:2b:67:57:57:b3:b6:c4:eb:05:92:52:16:a9:99:
                    24:03:ce:be:09:07:ae:a6:fa:91:34:07:6c:59:ef:
                    e9:2e:a8:26:71:ca:28:30:4c:5b:40:74:09:cb:ee:
                    ba:6b:86:25:47:6f:5f:f4:00:f1:17:73:fb:6b:02:
                    6c:ff:cd:b8:9d:67:7f:3a:94:04:1e:a5:a2:e6:43:
                    27:c7:bf:99:68:df:2c:a3:ca:ec:de:7a:d9:68:dc:
                    2b:9d:8e:ab:8d:17:81:c7:94:40:42:d0:6b:76:48:
                    10:b3:4a:70:2e:ed:81:7e:b6:4b:1e:15:67:ed:86:
                    56:20:99:3c:82:32:76:27:3a:22:20:84:29:df:ca:
                    71:92:a2:40:ac:22:f2:07:13:f7:99:41:62:ed:0e:
                    13:96:d8:00:8f:53:04:4d:3e:0c:13:2f:de:c0:b6:
                    88:f8:60:0f:56:43:b4:80:6b:30:c7:6f:b7:7a:53:
                    12:e3:86:0e:d5:c6:b9:af:9a:ac:64:be:d4:f4:7d:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:45:0F:2C:24:2C:57:EE:81:FE:8D:47:27:A7:AE:C1:74:27:26:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/9225d0c1-07de-3b77-b931-edfae476dc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:70:69:c7:36:52:a5:b7:0f:0e:1d:b5:96:83:b7:70:e4:55:
         a0:fa:98:34:59:9f:4b:a3:e8:30:4b:26:dc:ad:b0:0c:b9:61:
         31:ce:11:c4:df:bd:5d:e3:83:75:9c:6b:8f:ef:62:bc:44:a6:
         b4:90:eb:b3:20:63:16:d3:d5:23:4a:64:60:26:9e:6d:2f:cf:
         64:3d:8f:6c:ad:e8:07:0c:97:38:bb:36:74:51:2d:f6:77:6a:
         3d:fd:3d:ee:d3:a0:ad:47:00:7d:6f:b0:bf:c2:b8:53:54:6a:
         de:4c:fb:64:f8:86:b9:3e:db:9d:20:a6:8b:59:f9:0d:54:9c:
         5e:20:56:ff:4e:e8:15:ba:d9:da:3b:fc:8f:cb:82:1c:02:f3:
         d1:a2:c0:8a:5a:d6:da:d6:f8:fe:18:af:83:c8:32:8e:88:97:
         ba:10:e5:c8:c8:15:53:3e:2b:01:ca:aa:b1:14:ee:fd:c3:9d:
         e4:a9:7a:e2:9f:55:d5:ae:b6:aa:ed:3e:9a:c5:64:44:d8:bb:
         90:0d:38:bc:40:f7:34:19:c7:a8:cc:3d:71:d5:78:ef:61:0e:
         eb:98:43:56:6f:1d:ab:02:ac:e7:9b:75:e4:57:33:ce:9d:a6:
         f5:fc:71:83:b3:f3:fe:e6:83:4b:a6:20:55:58:1c:39:20:8c:
         8c:2e:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:32 2025 by rpki-client