Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/b97c2b78-25ff-3d05-b10d-49f3b260b7a0.roa
File:                     b97c2b78-25ff-3d05-b10d-49f3b260b7a0.roa (raw, json)
Hash identifier:          RRJeSldwiGvnnr5XJ1wKWVkHeP3DCg9EWo4bGI4zD2Y=
Subject key identifier:   25:5C:48:04:C1:C7:CC:13:06:40:59:8C:AF:A4:85:94:6D:AE:7C:23
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584B4081A737DFF185B0FE8EACC0
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/b97c2b78-25ff-3d05-b10d-49f3b260b7a0.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     10886
IP address blocks:        130.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a7:37:df:f1:85:b0:fe:8e:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=24dad926-9a5a-4548-afaf-f2367220a5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:df:44:45:06:27:2c:15:da:e2:90:7b:8f:
                    c7:11:5e:af:10:99:bd:a4:a4:e9:5f:2a:70:0c:f7:
                    32:17:91:14:79:ed:e1:c1:2a:2f:b0:ec:81:e7:f2:
                    82:2a:f3:2f:61:50:5c:b0:52:9b:c2:16:94:b9:e4:
                    90:10:75:82:05:c8:93:75:cf:51:86:12:41:51:2a:
                    af:55:58:c6:e0:cd:9b:e5:6e:bd:e8:41:65:6f:7e:
                    f1:5c:db:be:b0:b8:53:ab:6d:41:cf:29:8a:66:86:
                    29:78:3a:d5:9a:30:91:7c:36:12:d0:e1:d8:ce:9a:
                    c4:8e:8b:fa:aa:04:02:dc:bc:f3:24:16:54:07:61:
                    a7:d1:ec:9a:0b:9a:bf:09:6a:30:6f:26:c7:07:54:
                    94:10:3f:81:70:0b:ba:08:72:fc:89:43:f2:37:d5:
                    24:d3:67:e7:40:33:2a:b5:c3:0f:69:85:9a:1e:5e:
                    e7:78:d9:52:90:42:98:68:7d:22:70:0a:2b:e4:17:
                    2b:ae:c3:50:4e:a7:55:11:22:61:88:08:5a:86:c1:
                    c1:8e:94:cd:ac:20:88:e7:ea:f2:8f:4f:b8:b3:03:
                    c3:01:17:95:dc:77:d6:9c:ce:64:02:58:ae:c1:20:
                    aa:f6:d8:70:06:0d:7d:7d:ec:40:9a:90:6c:98:d4:
                    b4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:48:04:C1:C7:CC:13:06:40:59:8C:AF:A4:85:94:6D:AE:7C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/b97c2b78-25ff-3d05-b10d-49f3b260b7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9e:bc:52:31:81:26:a2:ff:1d:a9:8c:25:0b:6c:a3:e6:81:
         03:21:20:49:35:8b:ab:1f:73:44:87:d6:67:df:f4:38:77:8a:
         74:10:18:15:74:cf:95:f5:c6:97:42:d1:b1:8c:7c:ed:c6:75:
         f5:d5:48:35:c0:53:68:1a:5f:bb:4e:28:5e:a0:7e:a9:e7:3a:
         ae:5b:1f:e6:dc:06:8c:07:a7:28:12:b0:2e:dc:48:7f:ec:e9:
         83:1d:ed:81:b6:dc:30:2a:3f:00:9a:76:4f:dc:3b:5f:bb:4f:
         c3:d9:7f:81:09:c5:fc:f7:fe:ca:15:3c:37:1a:16:47:53:15:
         c4:29:31:b6:a7:f7:f5:6f:9e:31:48:1f:ef:b4:e1:fb:3e:fd:
         1f:f3:a4:37:82:c6:0f:be:57:58:4a:b6:04:49:f7:49:1a:94:
         d4:13:b1:66:02:95:4b:e5:ee:0c:66:74:96:32:79:56:75:26:
         75:b2:1a:a3:89:38:eb:1c:ab:ef:72:e8:98:5c:98:a6:c1:c3:
         63:72:e5:09:41:5e:53:0d:23:46:48:8a:33:c3:e6:20:7c:d1:
         c1:db:a1:7e:d0:5f:7e:d6:e8:e1:4e:c0:58:95:40:8a:0a:7e:
         50:a3:90:1f:94:a7:29:22:02:ff:30:c4:cd:50:ab:79:9e:c7:
         e8:26:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:08 2025 by rpki-client