Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/47947b8c-0d15-33e4-8dcf-2ccb10ac333e.roa
File:                     47947b8c-0d15-33e4-8dcf-2ccb10ac333e.roa (raw, json)
Hash identifier:          7MSJl1S0TehdBh4+BYsC24gGUBvFvC2ERXTJ7f+5+RQ=
Subject key identifier:   8E:25:86:58:2E:48:E2:7E:EB:B1:A3:7A:7B:7B:F4:46:63:9D:43:1C
Certificate issuer:       /CN=4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73
Certificate serial:       010D0C9F4328584B74274F412FA559AE6BF95D80
Authority key identifier: 19:94:C6:7E:FD:67:B6:20:09:17:94:97:D8:B5:37:C8:BB:8B:D3:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/47947b8c-0d15-33e4-8dcf-2ccb10ac333e.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     11753
IP address blocks:        204.11.240.0/22 maxlen: 24
                          216.220.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:4f:41:2f:a5:59:ae:6b:f9:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=272196f1-1e78-45be-813e-fddc58119867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:de:d9:17:2a:9e:d1:65:00:04:1c:0d:6a:
                    b9:ea:d1:4c:f5:97:5f:88:3e:e9:fe:51:61:87:15:
                    da:48:ae:9e:b5:72:07:8a:53:40:e3:a3:69:1a:09:
                    c3:52:d6:fd:87:1c:c9:62:62:34:08:21:2f:a0:a8:
                    17:87:5a:34:1e:12:a4:f2:57:8b:b4:0b:2d:5b:02:
                    8b:94:ce:d8:36:67:ac:a8:86:65:50:33:99:d4:cd:
                    69:61:67:f2:fe:b2:86:64:09:29:84:f7:cb:0f:1f:
                    a0:f6:86:e0:98:af:65:ea:54:d1:33:48:7f:6b:ce:
                    5b:2a:86:08:99:ef:78:3c:27:ba:1f:61:ab:6e:67:
                    cc:16:82:7a:00:8a:1b:83:f3:8d:30:f8:41:4b:6e:
                    a0:c2:74:27:b3:69:c7:cb:03:98:7d:3f:75:47:96:
                    dc:d7:72:c9:52:9c:07:37:c8:99:b1:e9:93:9b:e8:
                    31:91:27:2a:d2:46:5e:95:9f:2d:b4:15:6c:a5:b2:
                    b0:c4:22:4c:7f:e5:3c:6b:f7:c9:03:18:c9:21:23:
                    76:71:14:09:b5:91:46:a7:3d:2e:43:b3:cd:0d:e2:
                    20:41:21:a6:e8:f2:a3:2d:cb:38:0e:b9:45:39:f6:
                    f5:95:6b:29:1c:e5:b4:5f:5e:9b:43:19:56:0f:6d:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:25:86:58:2E:48:E2:7E:EB:B1:A3:7A:7B:7B:F4:46:63:9D:43:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/47947b8c-0d15-33e4-8dcf-2ccb10ac333e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.crl

            X509v3 Authority Key Identifier:
                keyid:19:94:C6:7E:FD:67:B6:20:09:17:94:97:D8:B5:37:C8:BB:8B:D3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.240.0/22
                  216.220.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:58:45:3e:02:9f:60:69:d9:29:6e:c1:99:f1:c8:0a:5a:b4:
         f0:de:3a:2f:43:9f:87:05:77:8f:fb:b5:a8:d1:29:85:92:4e:
         68:b5:3f:7d:14:16:0c:d2:0a:38:13:db:d5:c6:31:68:2a:71:
         83:78:71:a4:01:47:29:2c:8d:87:bc:d3:78:68:dc:20:39:89:
         a5:1f:3b:e6:f9:ca:2b:75:7a:19:83:76:b1:39:65:19:c5:61:
         18:dd:81:d3:ad:a1:22:c0:0e:ae:50:26:99:c1:4a:57:93:0e:
         ec:9c:46:12:8f:18:4e:36:7a:cf:ae:bc:4b:a8:c5:57:16:44:
         8f:55:1a:59:d2:ab:33:de:a4:aa:3c:02:9a:9b:b6:07:01:f8:
         d0:3a:ff:45:34:9c:44:12:91:bf:2c:5b:ce:f2:f7:cb:1b:f1:
         86:64:31:2e:b9:14:1c:92:06:a5:82:eb:2e:04:25:60:96:be:
         f3:9f:6a:ee:fe:c1:0d:d4:4f:69:0d:dd:28:35:3f:2b:57:16:
         9a:24:33:9b:12:72:17:2e:b8:4e:3a:ff:60:9b:13:75:70:fc:
         93:79:cd:b7:49:35:88:c9:aa:9b:5e:21:b6:55:cb:67:e4:27:
         56:9a:e7:aa:9b:ef:91:3b:9b:a6:fe:1f:68:87:75:da:cf:f7:
         a7:e1:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:36:51 2025 by rpki-client