Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa
File:                     8cae9a02-39b3-3c4a-b824-865da368ac0e.roa (raw, json)
Hash identifier:          9LeSnAFoK32nluNKdJXEIhjTVobPq0yMJQsbUii3USs=
Subject key identifier:   14:8D:D5:3D:A3:29:E4:24:C2:E1:8E:04:60:87:F1:22:78:53:33:4B
Certificate issuer:       /CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
Certificate serial:       010D0C9F4328584B398716ACD195A04DAE2FA600
Authority key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     1226
IP address blocks:        204.235.48.0/21 maxlen: 21
                          204.235.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:16:ac:d1:95:a0:4d:ae:2f:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=3c38cf92-a2e1-4494-9489-499666903793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:c5:67:87:19:a5:c9:84:79:7c:f0:70:f3:
                    16:9f:37:98:8c:c3:ec:34:e0:25:7f:5f:5f:56:dd:
                    d8:4c:8e:2a:1e:87:a4:df:4b:0b:cf:51:71:be:d3:
                    32:fd:83:e3:0d:21:be:96:c4:a3:f1:86:7a:b9:01:
                    73:1d:00:90:36:ed:40:20:4a:6f:8f:f0:66:91:6e:
                    a1:c6:48:fd:cd:ec:8c:df:f6:ae:0d:4a:da:79:2b:
                    80:0e:e7:4a:76:2b:11:a7:ee:f4:61:f3:94:87:58:
                    0f:d2:0f:36:8d:93:8c:5b:df:dd:e0:46:d3:5f:b8:
                    25:9d:3b:9a:30:a5:35:86:e2:ea:ed:e7:a1:3a:b9:
                    27:4c:aa:ed:b3:a8:38:94:f1:e7:4b:e6:ac:d8:0b:
                    6e:4c:ba:a5:50:b6:8d:10:1c:98:ed:de:21:b4:36:
                    02:55:89:a0:af:ed:07:41:21:a6:f8:6d:5c:29:2d:
                    29:c5:6a:b6:96:b4:6c:64:e6:b4:f3:1e:61:76:97:
                    1e:c3:12:d0:49:58:27:ca:f4:f1:4f:77:f9:0b:8c:
                    b3:21:7a:cf:06:6f:2b:f4:97:6e:ea:26:7b:f1:98:
                    f7:17:d8:1f:ee:2d:96:ea:8c:ca:38:e4:4f:58:e5:
                    fe:67:30:39:20:5b:a0:ee:8f:17:3c:7a:13:06:16:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8D:D5:3D:A3:29:E4:24:C2:E1:8E:04:60:87:F1:22:78:53:33:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/8cae9a02-39b3-3c4a-b824-865da368ac0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl

            X509v3 Authority Key Identifier:
                keyid:49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.48.0-204.235.59.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:17:d9:2e:d1:84:bf:e4:81:67:97:ca:4a:c0:98:78:68:2e:
         b7:b2:2e:62:fa:af:e1:cc:b6:fa:42:7d:c2:e4:34:64:0e:38:
         3b:c4:2b:70:33:d5:ba:8b:e4:b7:2a:1d:e6:0c:36:3e:06:d1:
         d6:0a:7b:d7:3c:2b:ef:06:5f:b5:46:27:e5:34:78:90:bd:2f:
         ab:83:8e:c3:c0:84:8f:35:ae:6c:c8:28:e5:94:df:fa:b5:bb:
         c1:48:e5:71:c9:40:8c:97:b1:7f:46:6d:0b:76:a3:4d:ae:6f:
         c0:de:ad:e2:3d:ec:d7:53:45:ce:9c:a8:db:30:ea:ea:4c:9c:
         b2:3f:bf:e4:b5:76:d8:c5:4a:c9:01:85:c2:4c:7f:6d:5b:c9:
         37:de:da:e2:18:12:09:e7:2d:ef:e6:97:dd:c8:fb:4c:a9:6a:
         ab:5c:1f:70:7a:14:8b:2e:05:3d:78:00:f9:4d:77:2b:31:10:
         ba:e9:35:24:1f:43:e4:cc:85:c0:0e:1a:c6:32:cf:9a:1e:af:
         d6:5b:b2:58:54:16:68:1c:7b:89:4b:b2:82:5a:67:4e:33:61:
         65:20:85:2f:e7:b4:46:a2:8d:99:2b:64:c7:4a:c4:bc:4d:19:
         1d:43:56:0a:81:d3:94:9f:90:af:44:ea:6f:e4:45:9c:84:b1:
         fb:3d:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:54 2025 by rpki-client