Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d470bb35-b32a-3d11-86ea-e760c8f44907.roa
File:                     d470bb35-b32a-3d11-86ea-e760c8f44907.roa (raw, json)
Hash identifier:          3WsShnfKGO18b2Meun58gF5Jeeg9FNM79sJg2fcoRK8=
Subject key identifier:   22:A5:2C:A4:7C:60:DD:9A:93:6A:E8:F4:27:82:94:35:2C:74:9F:90
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584B715CA91CB79DFA4C5A0BA520
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d470bb35-b32a-3d11-86ea-e760c8f44907.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     199527
IP address blocks:        70.39.139.0/24 maxlen: 24
                          70.39.152.0/23 maxlen: 24
                          70.39.160.0/22 maxlen: 24
                          70.39.166.0/24 maxlen: 24
                          70.39.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a9:1c:b7:9d:fa:4c:5a:0b:a5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=22be2517-144c-4a49-aff5-d7cbdd68d4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:6e:fa:d7:2b:1b:49:8f:c2:3f:6b:9d:29:
                    ee:0a:bf:a6:da:90:92:0a:d5:3d:56:ff:5d:09:96:
                    e2:b3:37:d1:bf:f5:e0:b9:b3:a9:18:d3:33:cd:d1:
                    a1:c0:9c:7b:b8:42:56:d2:82:ef:93:58:c7:cc:c9:
                    4f:58:de:ab:7c:d2:69:19:e4:e8:19:85:56:16:63:
                    e3:e8:f9:d7:3e:9f:34:af:ad:0f:0a:00:5e:1b:69:
                    9b:ad:74:31:5d:29:75:b7:df:87:aa:f6:fb:a7:2b:
                    3a:34:fb:14:d3:d0:b0:65:91:a6:66:ad:f8:2c:40:
                    97:72:32:b7:39:e8:18:ae:51:ec:d7:49:86:09:61:
                    e8:44:ed:a7:5c:86:cf:6a:44:f2:78:3e:10:93:c9:
                    02:f5:69:62:5d:9a:f3:54:00:df:e0:27:42:aa:fb:
                    e0:e0:96:4e:bd:a2:0f:36:57:25:b0:b1:de:9d:e2:
                    e3:a2:b4:5a:f9:cc:0b:f0:71:d9:a9:21:41:33:3a:
                    7d:bc:a5:9d:91:07:ac:84:32:79:ac:ef:d5:d5:4e:
                    4e:45:84:10:88:df:ec:0c:ab:84:55:6f:0d:8d:d8:
                    3b:76:54:3e:98:e3:bc:ee:53:af:9d:d0:98:2e:48:
                    57:45:e5:0b:ae:59:d9:77:5d:da:03:83:cb:a8:df:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A5:2C:A4:7C:60:DD:9A:93:6A:E8:F4:27:82:94:35:2C:74:9F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d470bb35-b32a-3d11-86ea-e760c8f44907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.139.0/24
                  70.39.152.0/23
                  70.39.160.0/22
                  70.39.166.0/24
                  70.39.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5b:41:f0:8d:53:34:e3:df:49:40:f5:c7:38:db:d1:f2:4f:
         75:5f:2e:c8:a9:5f:c3:fa:12:51:bc:5a:26:f8:6a:1b:61:67:
         31:e9:83:95:f3:98:12:3b:0d:30:6e:59:23:86:76:33:d7:aa:
         5a:93:85:a3:21:fc:24:fa:67:ee:92:8f:f9:69:7e:36:ae:83:
         ff:fe:54:5a:03:62:43:dd:1c:00:2a:37:f8:a4:61:2e:d6:7d:
         a8:1d:0a:a7:1e:41:14:85:c6:5f:fc:76:f9:c2:ab:72:7e:ae:
         2e:cf:67:ed:c7:70:ff:a5:0f:ac:9f:4e:69:7e:cb:9e:98:b1:
         ba:3c:cb:1d:a3:69:16:0f:a7:9f:1c:16:e0:3f:ef:1b:2a:c0:
         b5:f9:5a:1e:7e:1b:96:e6:8e:b8:12:9a:3c:f7:a1:ca:7a:bf:
         90:97:01:e5:5b:08:f5:02:d4:df:5c:7f:4a:51:fa:1d:b5:9d:
         e8:04:37:1a:d1:13:1c:d6:e2:cb:32:0c:ed:77:b6:ca:77:71:
         f8:99:f2:33:40:d8:d3:2a:c6:95:18:87:50:c9:3f:47:96:c5:
         29:c4:a0:b9:3e:eb:45:54:a4:73:c8:98:85:04:91:b4:24:71:
         71:b9:94:51:e4:d4:5d:4d:65:7d:94:73:a8:69:47:9e:b3:00:
         dc:9b:27:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:04 2025 by rpki-client