Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6167686f-0f35-37b2-9fb1-7ce435771520.roa
File:                     6167686f-0f35-37b2-9fb1-7ce435771520.roa (raw, json)
Hash identifier:          m/07+dn8Nfcv1BQqg58yqqyRHGfGL/KWzthNTMfVwXg=
Subject key identifier:   EF:3C:23:D1:38:B4:6C:35:45:10:4E:8C:B1:7B:07:8F:D7:9E:75:B7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B8D51EDDE2CA9715358338700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6167686f-0f35-37b2-9fb1-7ce435771520.roa
Signing time:             Fri 17 Oct 2025 13:21:45 +0000
ROA not before:           Fri 17 Oct 2025 13:21:45 +0000
ROA not after:            Thu 15 Jan 2026 14:21:45 +0000
asID:                     208185
IP address blocks:        209.101.48.0/24 maxlen: 24
                          209.101.49.0/24 maxlen: 24
                          209.101.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:51:ed:de:2c:a9:71:53:58:33:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 17 13:21:45 2025 GMT
            Not After : Jan 15 14:21:45 2026 GMT
        Subject: CN=2f418989-12d0-4d47-89dc-f3172bd6804f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:5e:65:80:e9:e4:e7:87:1c:b8:38:93:6d:
                    e3:e6:36:b6:ee:c4:54:99:25:be:5a:69:8a:3b:8c:
                    89:4e:cb:5d:b1:7d:a1:f2:d2:cf:b1:de:51:d9:df:
                    a2:d5:ef:a3:e5:3f:b8:f5:f9:0b:8f:93:39:c2:9a:
                    07:cb:21:6c:27:8c:67:3f:6e:c6:44:dd:ba:28:bb:
                    2f:1d:d0:1f:5d:dd:72:65:a5:09:59:c4:00:d2:37:
                    0a:58:2c:61:85:74:02:8e:69:24:7d:8e:7b:f2:07:
                    02:02:58:f6:59:2c:ba:18:13:db:1c:dd:cc:ec:39:
                    5c:6b:9a:c9:00:a4:6e:32:bd:3f:b3:82:de:03:41:
                    4a:5c:69:b0:29:a8:39:1f:69:9f:33:93:54:ff:31:
                    3b:40:88:c1:f8:a1:d8:ea:75:f4:4a:77:ab:da:e0:
                    bb:c5:e0:42:eb:bb:89:7e:1e:08:db:4a:14:13:7e:
                    f6:58:a4:59:d7:f3:38:a9:9f:93:2a:dc:e2:bd:56:
                    14:f2:1a:bc:89:0d:ca:a7:8f:15:5a:c9:63:6a:a2:
                    51:ee:4c:85:89:e5:e5:82:5e:0a:05:12:91:ba:14:
                    63:10:bc:ae:e9:d2:29:62:2a:c9:1f:0d:5b:ba:55:
                    ce:e1:22:5c:89:8f:1a:0f:93:8d:61:80:e4:74:ae:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3C:23:D1:38:B4:6C:35:45:10:4E:8C:B1:7B:07:8F:D7:9E:75:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6167686f-0f35-37b2-9fb1-7ce435771520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.48.0/23
                  209.101.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6c:d0:53:68:b4:75:f3:cf:d3:61:24:11:4f:69:f9:91:ab:
         70:bd:35:5b:b1:32:1a:e0:6a:aa:8a:2a:21:7e:61:5e:f0:c7:
         ad:61:40:b3:b1:75:31:9b:ab:d9:67:42:91:f2:a2:93:f4:05:
         a2:cb:89:68:bd:99:b2:93:d9:1f:d4:0a:53:28:54:81:23:08:
         84:5b:41:94:72:70:2c:38:f9:85:78:f2:a4:28:c2:55:db:d9:
         d7:51:a3:92:ea:70:67:19:04:c8:29:b2:38:f0:af:fb:1c:0f:
         07:84:fa:c7:92:93:c1:48:42:3c:41:84:5d:bc:ff:34:49:a2:
         82:12:38:86:81:0e:1c:29:fd:95:d6:e2:29:eb:99:f0:a3:a0:
         60:c8:78:fc:f7:83:48:be:be:17:8a:f3:03:68:83:76:d7:29:
         47:17:cd:4d:5b:92:6e:42:1f:21:ca:96:41:0d:01:2e:17:6f:
         7d:6f:27:61:60:d9:1a:07:fd:73:7b:6e:ae:d2:e3:c2:cc:d2:
         80:f7:e5:6e:a7:88:81:76:2f:63:e9:70:dd:b4:cf:45:08:87:
         d4:ba:36:5c:96:85:4c:83:cb:49:01:40:b6:9f:f9:a8:5f:e6:
         4a:fd:b1:01:4f:4e:83:5a:4d:0a:bd:69:46:21:24:7d:f5:bc:
         5d:14:eb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:11 2025 by rpki-client