Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8c1b64b8-c175-3d70-b57f-7a59fa54ac5a.roa
File:                     8c1b64b8-c175-3d70-b57f-7a59fa54ac5a.roa (raw, json)
Hash identifier:          SR/ekbKmdlT5yz3EE8rXaq5ullwyNRT9TTcW9XAe93k=
Subject key identifier:   A4:28:F1:5A:0E:50:3B:88:CE:2D:98:F1:AD:2A:C5:60:7A:99:A6:F2
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584B821E220E43A6268780432B20
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8c1b64b8-c175-3d70-b57f-7a59fa54ac5a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     8075
IP address blocks:        69.52.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:22:0e:43:a6:26:87:80:43:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=686327e9-5976-46b3-a0e9-5f3400843c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:e7:b6:ba:54:14:b9:2c:44:29:0b:93:f0:
                    7c:64:91:48:f3:16:a5:90:6a:bf:5a:34:fc:65:bd:
                    2e:1b:08:e6:d2:f0:d0:e1:af:ae:d1:35:e3:5d:0f:
                    31:f9:5c:73:01:c8:98:72:51:36:87:e4:13:28:ae:
                    d3:0b:99:6b:6a:d1:a6:6e:b2:1f:73:67:5d:86:0c:
                    48:9e:9a:4c:34:6d:d2:e2:b3:92:44:3f:24:82:1f:
                    2f:28:e0:c9:71:7f:9c:7a:ae:e7:b7:33:51:ee:fd:
                    b3:ae:7e:46:20:bb:71:92:99:56:bb:6a:ae:e5:a7:
                    b7:53:02:45:05:51:43:b2:71:8d:51:9d:92:4d:a8:
                    07:fe:21:49:03:fe:76:a9:9e:e5:ba:d7:74:79:65:
                    7f:4e:a7:22:9e:f8:2c:3f:25:24:2c:79:f4:e3:65:
                    eb:7f:91:6f:2f:15:82:ae:22:59:59:43:55:92:f5:
                    41:69:a9:29:8e:69:67:9b:b8:3f:a0:13:48:44:5d:
                    16:91:44:49:1d:4b:14:78:3b:01:c1:58:4c:ad:3d:
                    45:bb:3c:4f:26:7a:d7:a9:38:9d:5c:ed:1d:67:c1:
                    e0:03:af:2e:a3:e0:d1:fb:6c:53:8c:cb:62:49:6b:
                    0a:6d:1e:02:86:51:dd:4d:30:ee:5c:11:34:d9:be:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:28:F1:5A:0E:50:3B:88:CE:2D:98:F1:AD:2A:C5:60:7A:99:A6:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8c1b64b8-c175-3d70-b57f-7a59fa54ac5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:68:2f:5a:bd:a0:c5:f9:c6:e8:a0:b5:56:6c:b2:44:fd:75:
         41:e7:dd:f4:f0:0a:83:98:d9:40:75:ef:1d:78:8c:71:6c:d1:
         72:3a:74:cd:f8:58:58:9f:01:f0:f8:33:5e:3c:7a:5f:dd:a2:
         50:ef:3d:9d:aa:6f:f4:19:31:ed:52:32:95:aa:f5:52:39:b4:
         69:2b:f7:09:78:5d:5a:c5:22:11:ee:05:d1:1e:02:ef:55:15:
         df:bb:06:c1:4a:27:b2:0d:6c:c2:1e:2b:99:63:fa:b8:45:a0:
         c6:02:6f:48:a2:4f:6f:30:7d:96:ae:31:45:2f:1e:4a:33:bb:
         50:e2:7b:1b:e3:dd:ef:6b:50:26:8b:f9:d2:d3:f6:6d:d1:c3:
         e6:3d:b9:02:b2:5b:91:4d:5e:f0:c7:86:f0:a4:32:69:a4:51:
         6d:82:bd:c4:91:a5:2e:0d:6f:be:7f:ea:d7:69:be:40:aa:9f:
         0a:cf:2c:b7:31:6c:96:56:5e:ab:67:ea:4d:89:a9:22:a4:76:
         ce:0c:3d:6e:2e:41:97:a2:63:82:a8:c2:e3:71:6a:eb:c7:e5:
         42:c8:e7:c1:30:04:e6:f1:bd:a8:99:16:15:b9:a3:50:b9:75:
         22:be:48:c6:76:8f:30:98:51:5e:26:a3:54:c7:43:05:5c:a1:
         c5:21:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:17 2025 by rpki-client