Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa
File:                     f5c6de41-323b-3b99-9404-398b289b5319.roa (raw, json)
Hash identifier:          G7edspD4dTRVT4ay+HgTgBHpfW66bUlYqIRsVDXqT64=
Subject key identifier:   E9:51:DD:97:6A:B9:B5:37:EA:10:6E:B3:51:9D:07:72:64:CF:DF:E4
Certificate issuer:       /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial:       010D0C9F4328584B609C91341DEA0972B32AC680
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     397803
IP address blocks:        66.102.48.0/20 maxlen: 20
                          167.100.32.0/19 maxlen: 19
                          209.105.180.0/22 maxlen: 22
                          209.105.184.0/22 maxlen: 22
                          216.227.40.0/21 maxlen: 21
                          216.227.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:91:34:1d:ea:09:72:b3:2a:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=974d8e54-08b5-4957-a859-fdcac42c3a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d6:f0:1a:4d:3d:b1:2f:f3:ec:65:44:48:99:
                    e7:2e:45:74:eb:f4:53:c6:92:12:88:29:97:8d:8e:
                    43:8f:8e:f0:5e:03:8a:8e:fb:32:06:9f:d5:d3:07:
                    97:38:4a:2a:42:d0:ba:06:b3:0c:07:34:a1:02:08:
                    35:d7:78:12:5f:a0:1a:1a:8c:fa:57:5f:0e:c7:43:
                    8b:f1:1c:d8:6a:df:35:22:b6:69:11:10:fd:e7:34:
                    a3:44:d9:e5:09:a6:25:81:49:2d:b0:45:07:b5:3d:
                    92:18:07:a7:bb:97:c1:b2:d3:93:78:7f:3a:e9:7c:
                    26:e2:5f:35:0e:96:25:f8:65:e1:4d:49:58:6d:3a:
                    f1:67:87:11:35:bd:3e:b8:8e:76:c6:56:d3:7a:d6:
                    7b:a9:67:6a:e8:42:bc:0f:90:ee:ee:a0:fb:5b:ac:
                    30:e2:b0:11:35:62:76:b5:7d:a8:01:38:7a:99:f3:
                    3f:91:50:b5:6b:e4:5b:f4:03:1a:eb:45:44:62:f7:
                    f5:e0:26:87:c0:97:86:ef:f7:3b:4c:fd:93:b1:ee:
                    85:cb:b6:d2:90:f0:0b:79:0b:c0:15:b4:0d:96:37:
                    4d:80:38:83:35:6e:0a:19:e6:d3:6f:9c:fc:72:d5:
                    61:05:88:4a:ce:f9:68:54:42:ae:28:0c:73:b9:d8:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:DD:97:6A:B9:B5:37:EA:10:6E:B3:51:9D:07:72:64:CF:DF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.48.0/20
                  167.100.32.0/19
                  209.105.180.0-209.105.187.255
                  216.227.40.0-216.227.51.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d7:52:d9:ce:e4:cf:5c:5b:b9:13:de:33:35:a6:61:d9:f7:
         9d:b3:6c:cf:eb:83:25:d0:64:d2:7f:57:83:ca:f9:21:3a:e9:
         2e:5a:7e:a7:f9:97:39:08:ed:2a:e0:ff:8d:85:c7:3e:49:b1:
         f5:3e:67:3c:9f:35:58:1b:94:c3:b8:f8:5b:a5:de:8e:5b:df:
         3f:c9:40:7f:70:88:d0:ff:e2:d9:b7:f6:29:61:ee:c8:c8:da:
         7b:3b:67:88:b2:f7:fe:82:1a:f7:e8:d1:c0:51:7e:e1:49:2f:
         ac:1e:d5:33:67:36:df:20:6b:9a:3f:81:14:49:f2:2a:a6:2f:
         56:b0:76:1b:64:ab:27:59:8a:c9:64:4c:86:e7:74:95:f0:0b:
         79:57:2e:4e:1a:0a:c8:a9:28:e3:b6:28:b1:11:83:8d:6f:3d:
         4b:ef:37:99:ce:26:58:64:2c:75:c9:28:41:7f:7c:4e:0b:37:
         80:b2:44:26:66:e0:e5:1e:d8:60:d4:31:4b:f4:9e:6b:86:5f:
         a9:6a:39:60:06:bc:15:7e:6c:2f:be:f4:c6:f5:64:ce:08:ce:
         5a:df:96:00:25:5a:8c:7b:87:94:34:f9:59:b5:13:d3:99:4c:
         64:45:62:18:9e:ca:99:50:04:4d:7d:06:3b:f5:1a:35:cf:69:
         2a:b6:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:01:39 2025 by rpki-client