Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa
File:                     84273be5-301a-3d96-8539-4750e24fcce2.roa (raw, json)
Hash identifier:          LD2zhZ/pUK3/bSacKUaJDe24OyUkh5IVQQe9SZBs7yQ=
Subject key identifier:   28:94:F8:48:01:3E:37:FB:58:8E:E6:4D:50:90:E8:FA:D2:9F:59:15
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584B821CB875A219214D2710D540
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     16509
IP address blocks:        69.52.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:b8:75:a2:19:21:4d:27:10:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=b5a97b7d-1c92-4193-aa64-d5c97156c420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:dc:b2:c9:ff:dc:c1:e9:db:71:04:6c:d6:
                    7e:14:84:6d:e7:47:c9:35:f2:1d:c2:57:16:fc:e4:
                    18:87:76:c5:7b:33:26:3e:6d:df:00:29:9b:ca:87:
                    f3:93:bc:05:11:80:5c:7c:80:92:98:59:2a:3d:59:
                    73:82:c3:67:52:3d:87:37:c0:2c:23:ea:89:6b:40:
                    0c:25:f7:a7:3e:dd:d8:13:80:1a:e8:03:c8:d4:b1:
                    8a:bb:26:52:7c:b5:7e:ec:8c:60:99:89:a5:ef:e6:
                    b9:8a:87:63:48:45:cb:7e:55:d7:1b:32:eb:a8:90:
                    ce:df:f7:fb:b7:c3:d1:2b:32:1c:d7:a1:b6:4e:66:
                    7e:3e:2e:8b:7e:2e:88:81:22:6c:3c:ea:c8:09:24:
                    37:54:53:81:d7:73:d9:a8:e7:97:1c:e0:3d:ff:62:
                    34:cb:f7:cb:fa:c9:7c:32:92:5a:b4:f5:77:84:2a:
                    09:43:ab:06:95:77:37:58:ff:a3:7b:dd:20:01:b3:
                    1b:3e:a3:73:9c:dc:bc:88:a9:8e:6d:d4:4c:2f:b7:
                    65:be:19:60:07:85:0b:7d:af:cc:a7:c8:b2:e7:fb:
                    06:19:51:ea:2d:fe:fe:72:ee:03:34:08:b7:36:6a:
                    df:21:14:71:73:c3:fb:85:ef:66:ee:15:2e:de:3e:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:94:F8:48:01:3E:37:FB:58:8E:E6:4D:50:90:E8:FA:D2:9F:59:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:01:59:73:71:d1:50:b8:0c:02:1e:a4:59:d7:39:b6:43:1d:
         83:17:6e:2c:a3:87:23:65:f5:ae:df:ab:fe:f1:17:a0:a9:17:
         d7:3e:85:4e:d2:b1:7a:93:b3:3e:d8:9f:42:32:2e:19:52:6c:
         7b:fd:cf:ed:b1:eb:94:dc:ff:af:0b:4a:fd:8e:2b:60:65:f4:
         21:af:37:cf:7d:f3:ef:66:47:76:89:96:0f:21:d4:e6:e9:33:
         de:05:10:9c:11:ae:b3:ae:a7:23:1e:9f:c8:d2:64:a6:ff:6a:
         0b:0c:94:2d:56:34:d0:3a:02:99:b2:81:a9:4e:24:46:f8:58:
         ba:29:ea:ff:41:21:aa:f1:f2:92:84:10:25:a5:0d:5d:af:11:
         70:e4:48:3b:5f:88:76:47:10:70:b0:5f:aa:42:10:30:71:15:
         a0:3d:2b:f5:a2:b6:8e:09:21:c6:ba:ee:24:6f:26:0a:91:07:
         fe:ff:c1:ac:6e:e9:fe:06:37:1e:fb:ae:d0:38:75:5a:b5:d6:
         73:cd:4f:91:a5:f9:95:53:17:e6:94:6a:07:8c:c0:43:15:8e:
         a0:14:25:df:ea:2d:4e:9e:ce:75:c1:a1:c9:c4:96:22:16:a5:
         d2:b5:fa:e3:55:95:ec:b6:50:6e:a3:dc:66:2f:81:cc:14:8f:
         ce:04:bb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:40:58 2025 by rpki-client