Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e9118524-ea78-3d58-a7f1-bb0892a23904.roa
File:                     e9118524-ea78-3d58-a7f1-bb0892a23904.roa (raw, json)
Hash identifier:          oy2KouZnSQGL4CpCdZ9OmLrLeTalyjb2GSbqnMc5ls4=
Subject key identifier:   61:04:10:93:42:DE:1D:AB:3C:1C:1D:16:6B:6C:D5:9C:DA:FC:EA:75
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584B0FA6B647A12243FAFF5D2D80
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e9118524-ea78-3d58-a7f1-bb0892a23904.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     21947
IP address blocks:        69.165.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:b6:47:a1:22:43:fa:ff:5d:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=40780fef-5235-4cf5-9575-62ab8071bf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:7c:8e:da:b2:ba:ec:5a:e6:42:76:97:42:
                    80:17:de:72:bc:71:f9:67:fc:50:6c:6a:74:63:67:
                    cd:a4:a0:5e:de:89:14:e5:eb:d6:21:34:64:88:95:
                    b6:2d:e9:90:e6:0b:06:2f:93:b0:b0:8d:f4:52:73:
                    03:98:3d:58:cc:93:6f:4d:21:2c:5b:e3:91:28:07:
                    37:4c:6d:c9:ce:b7:c6:b5:79:f9:87:43:c3:b9:a5:
                    5b:1f:a9:b1:ee:b6:11:30:8d:40:f4:e9:8d:05:e8:
                    75:29:3d:f2:a4:86:d2:b5:b6:3b:4a:8b:da:34:c3:
                    da:0d:e7:39:e7:a8:4c:c8:ad:7a:83:34:3a:6f:5f:
                    fe:b8:a2:a6:4c:97:fd:c1:25:cd:21:a3:ae:9b:09:
                    85:a4:9d:b8:42:18:c3:06:2b:75:83:9f:ea:ca:a6:
                    75:69:89:80:05:10:d7:9c:ad:1f:1e:77:1d:ce:21:
                    8e:0c:73:21:85:74:3e:80:0f:50:1d:72:a5:9d:bf:
                    a2:5c:d6:31:f1:41:ee:bc:74:c3:f9:0e:15:d7:d3:
                    ec:51:15:07:0c:b2:a7:3b:cb:49:ff:e4:fc:48:58:
                    fc:3b:9d:bf:ba:68:e1:4b:b6:cc:74:06:9e:3e:e1:
                    ea:bb:8b:f6:6b:63:1b:f7:f3:14:95:85:ed:7c:5c:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:04:10:93:42:DE:1D:AB:3C:1C:1D:16:6B:6C:D5:9C:DA:FC:EA:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e9118524-ea78-3d58-a7f1-bb0892a23904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:43:66:3f:83:db:11:e9:0c:fa:95:bc:11:d4:e2:a1:89:5c:
         c9:0d:d8:32:22:f8:cd:0c:2e:44:1f:1e:e2:cc:cc:e2:05:ca:
         79:c4:69:b2:c2:1f:84:cb:c4:a3:6c:7c:ea:c1:d6:89:39:19:
         25:d4:28:33:b3:9d:68:84:40:0d:87:ef:8e:9d:69:0e:1d:be:
         2a:7e:d5:44:b2:98:e0:da:8d:f5:6c:56:ab:95:1c:d0:97:8e:
         e3:fc:21:ef:2d:bb:47:f4:c1:ac:82:51:80:59:21:00:28:04:
         5c:12:03:b6:53:0a:4e:62:5d:b3:3d:76:82:ae:99:79:67:36:
         93:29:72:68:35:a1:a3:0d:07:38:3a:e8:65:d4:55:b1:e0:9a:
         9c:7a:d1:93:a7:3e:33:1b:70:69:71:df:20:c4:62:ba:a9:3a:
         eb:36:d4:a8:2f:d1:62:6c:0c:c8:d9:fe:cf:84:88:f6:4a:c4:
         9b:1a:99:a7:83:62:b9:26:d9:11:fb:ad:9d:ee:76:0b:7a:76:
         96:12:08:58:84:95:5b:cf:da:da:14:90:64:11:bc:a9:0b:7f:
         f3:e5:bf:de:02:0c:06:f9:31:08:75:98:8d:f6:fa:6b:1a:59:
         b5:d2:78:86:bd:41:bd:aa:5c:3a:69:12:ce:68:fe:e0:6f:c9:
         8b:cb:ed:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:23 2025 by rpki-client