Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa
File:                     cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa (raw, json)
Hash identifier:          BJ/SxXf3upms486kJP8HmKSe2z2UkN0FGYG0txtC1RY=
Subject key identifier:   59:A3:C0:72:FC:25:31:B8:EA:62:8B:6D:6D:FA:2D:FB:8D:C1:7B:C1
Certificate issuer:       /CN=adf336cd-e30b-4fd4-a132-8eede3026803
Certificate serial:       010D0C9F4328584B3AEC4130232239EF6A3F9100
Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     46
IP address blocks:        128.6.0.0/16 maxlen: 24
                          130.219.0.0/16 maxlen: 24
                          165.230.0.0/16 maxlen: 24
                          192.12.88.0/24 maxlen: 24
                          198.151.130.0/24 maxlen: 24
                          2620:0:d60::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:41:30:23:22:39:ef:6a:3f:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=7dfc6e50-0d10-49a2-b5f5-5f1a18c5401a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:f1:39:05:76:59:8d:f2:df:5d:f1:d1:73:
                    cf:46:b2:de:ac:c7:47:8e:b9:69:3d:78:86:77:1d:
                    b4:3f:61:2a:84:27:9a:a5:25:2e:24:ac:c6:06:fa:
                    69:75:62:3b:00:f0:af:40:97:49:c0:bc:1e:33:47:
                    86:e5:4b:f3:b5:1a:d2:29:b2:bf:b9:3d:17:15:fc:
                    e1:3c:b9:6c:93:b7:16:3a:bf:45:30:43:28:75:2c:
                    68:73:60:5c:3c:e9:20:24:6d:a2:22:3d:af:83:93:
                    01:ae:d8:18:1f:99:34:ed:73:52:00:fe:7c:d6:8d:
                    14:e4:f4:78:0d:92:1e:e5:51:56:e5:89:6f:96:80:
                    0d:7a:0a:44:19:52:3f:c2:d7:5e:87:0c:df:df:a0:
                    d8:f7:c8:f2:dd:12:10:15:9b:53:fc:fe:91:f9:13:
                    ac:b1:46:56:ef:d9:f5:e0:ab:12:8a:95:99:93:8d:
                    9c:58:b2:09:72:da:23:14:6c:88:fd:50:5a:e3:a0:
                    bc:1e:6e:72:dd:59:14:0f:7f:67:6c:d4:00:cb:d0:
                    28:2e:48:f8:e9:fd:74:6a:f7:ba:40:ce:b2:f3:91:
                    eb:bc:a1:f6:ff:26:44:1b:52:86:e2:8f:a9:55:b2:
                    93:87:a7:77:1a:89:d3:ea:99:a0:7d:69:c2:97:2c:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A3:C0:72:FC:25:31:B8:EA:62:8B:6D:6D:FA:2D:FB:8D:C1:7B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl

            X509v3 Authority Key Identifier:
                keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.6.0.0/16
                  130.219.0.0/16
                  165.230.0.0/16
                  192.12.88.0/24
                  198.151.130.0/24
                IPv6:
                  2620:0:d60::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ee:7d:8a:91:09:90:78:e4:65:ac:97:f3:47:4b:0e:80:2b:
         1e:4f:1a:95:a5:2f:1c:f0:67:f0:c7:7d:94:fd:81:22:65:a4:
         64:69:1b:52:91:9b:49:0e:76:f8:0c:cd:1c:49:d9:10:9d:90:
         db:ac:19:6b:d6:db:69:87:3c:22:de:2f:f0:58:66:dc:88:25:
         03:3a:f8:0a:5f:98:c1:98:a3:60:79:af:12:d3:c6:db:a3:8a:
         37:6f:e0:e5:23:58:aa:f5:c7:83:89:fa:61:c7:44:ce:03:04:
         83:1d:80:04:f1:44:f5:1b:84:50:5b:70:6d:2d:ff:10:56:16:
         58:78:a3:30:5f:76:41:4c:8d:67:a4:11:96:58:a3:61:97:ab:
         54:5c:4d:03:c3:3d:d1:89:2d:0c:ab:8e:50:1f:b4:03:26:db:
         01:24:a7:bf:78:17:fc:af:d3:be:2f:16:57:43:8f:07:b4:c4:
         75:8d:4c:29:1b:28:37:a7:48:72:29:22:64:39:01:4d:99:9b:
         be:10:67:63:19:19:33:a7:aa:c1:74:e2:17:65:e2:3c:07:b1:
         1c:a1:fe:04:01:9e:11:48:e5:de:b4:bd:86:7c:8f:76:26:24:
         ff:7f:0c:c9:99:3f:9b:04:cf:0e:d3:15:57:e6:03:d4:f7:64:
         98:ad:ae:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:35:04 2025 by rpki-client