Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
File:                     d66d3dcb-2e94-38a7-9549-d369a5770717.roa (raw, json)
Hash identifier:          f7BwR8nYyjuWfveGHMywUObYXGgC7X0HZ+gPRdUpHCY=
Subject key identifier:   52:43:0C:CE:56:DC:66:24:DE:7D:80:3D:59:E0:9E:78:C0:83:D7:90
Certificate issuer:       /CN=325f62aa-b9c8-4315-87d2-409b60e8840d
Certificate serial:       010D0C9F4328584B3AEC55293C7E6C1FB43E5700
Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     400228
IP address blocks:        206.41.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:55:29:3c:7e:6c:1f:b4:3e:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=1a938236-749c-40ca-9b34-3f057e436c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:e8:39:b0:51:36:0d:c7:86:5d:24:a2:ea:
                    94:ed:98:f4:5a:6f:b3:30:65:27:76:37:d6:0e:39:
                    ed:1a:aa:87:71:49:0c:94:82:97:85:4b:a5:af:98:
                    8c:ab:82:55:80:9a:a4:32:5d:59:48:45:06:5f:82:
                    60:e7:18:32:07:20:30:8c:d0:46:d5:0f:bd:85:5e:
                    35:d1:c1:78:76:2b:a0:55:62:34:d6:4e:7a:ec:8f:
                    f3:ad:92:bb:c3:1f:d0:64:eb:d7:1e:b9:bf:9b:23:
                    85:7a:a2:96:d1:3e:0d:80:ca:ca:29:31:9f:f6:b4:
                    5e:79:3a:52:fc:80:f1:32:fc:98:aa:11:36:70:1e:
                    dd:d5:a3:15:e5:28:69:de:38:47:bc:35:db:c8:fb:
                    7a:e1:f1:ee:46:51:ee:e9:e2:33:2c:7b:cf:7b:f5:
                    20:fb:34:89:2c:a4:02:f9:63:92:a5:68:6f:85:d8:
                    24:8f:48:5b:32:70:c5:0a:fa:f5:c3:84:81:e8:b5:
                    57:6d:9d:30:14:8c:c1:62:36:c7:c7:9a:2b:ec:95:
                    cd:51:16:e7:47:ed:00:40:fc:90:81:27:cc:cd:3a:
                    2b:d1:53:88:c0:d2:a1:c2:aa:94:a8:d0:55:08:ce:
                    52:e9:0a:b1:30:bd:20:84:8f:45:65:83:7d:0d:2c:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:43:0C:CE:56:DC:66:24:DE:7D:80:3D:59:E0:9E:78:C0:83:D7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl

            X509v3 Authority Key Identifier:
                keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:40:5c:16:cf:c4:20:a6:e1:74:eb:42:ef:49:48:d1:df:b2:
         09:e2:ca:0d:0d:b1:ba:52:b0:c2:bd:d9:ca:4b:b0:5c:5d:2d:
         37:83:81:ec:2a:01:4a:53:7a:93:c5:0e:c0:07:ff:8f:7b:44:
         b4:6d:f7:9a:29:49:d9:69:f9:8a:e0:4a:c7:27:84:32:b2:9b:
         3a:a6:38:8c:f2:fe:af:4b:af:e5:c5:28:42:a7:87:95:26:70:
         96:0a:2c:98:80:fc:26:c9:04:30:f2:a1:51:f6:b1:af:12:d3:
         10:42:f8:d4:ac:77:f6:8a:70:14:3f:19:54:01:91:d9:dd:b4:
         53:17:dc:7a:48:da:7c:d5:95:75:f7:4c:1d:7d:f4:32:22:2f:
         79:76:9f:87:48:b4:c3:47:39:10:8f:de:59:11:b2:2e:f5:56:
         84:dd:1d:6f:80:e6:e8:0f:c5:f0:7a:71:44:4b:5e:6d:78:5c:
         04:2a:99:5d:24:7d:03:1f:bd:7d:6b:b9:62:3c:3b:b6:6c:e5:
         ce:1a:33:a8:86:24:db:a2:07:cc:24:a8:04:92:e0:5e:47:58:
         49:b9:fe:71:69:01:4b:95:9a:3c:3a:a5:db:ee:dc:4a:3b:e8:
         61:a9:f2:83:be:b8:d9:96:d4:ac:1c:28:1f:6b:8d:5a:bb:61:
         64:06:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:26 2025 by rpki-client