Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa
File:                     241f1b53-63a6-328e-a841-25d97fa28860.roa (raw, json)
Hash identifier:          HKd4/xJDYWsq7HfG3l5ZSSuhWzhtbNKlxP1D0k4rpfQ=
Subject key identifier:   D6:5A:2B:65:0A:38:C0:E1:0F:FC:94:4B:6A:3A:5F:C6:E5:E6:E9:22
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584B8BE21BE8A31561D458CDD380
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     3807
IP address blocks:        207.196.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:1b:e8:a3:15:61:d4:58:cd:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=08c9f39d-d3f8-4871-93a2-064876f406ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6a:74:ea:3f:a0:df:7a:78:7a:36:26:4b:e2:
                    86:d7:7e:bd:7a:74:52:cd:cc:e2:7b:62:f0:30:f0:
                    96:d6:16:b1:c0:08:36:60:23:ae:6a:05:74:c0:56:
                    29:2c:13:16:e5:f0:a7:f5:1f:5c:9d:3b:20:33:64:
                    1f:f5:df:da:34:b4:c9:39:51:2d:0b:e6:09:90:40:
                    db:16:82:11:a5:a2:19:c0:73:3c:4a:db:95:65:06:
                    2a:c0:8f:f9:21:7b:7c:c3:c6:50:43:41:da:cb:eb:
                    df:e7:1b:b6:31:0a:88:4b:f7:7e:c3:f2:b6:79:41:
                    ee:a1:18:6e:a8:4d:0c:4c:4c:ee:a0:4b:99:3a:02:
                    eb:c1:1b:8e:ea:ed:4f:76:ca:c6:7f:76:87:32:8b:
                    86:99:e8:00:60:48:e8:bf:33:8d:50:e7:41:9c:1b:
                    34:2a:c6:e6:f2:a9:61:5e:36:b5:4a:f1:0a:eb:5f:
                    f2:3c:f2:eb:6b:63:ab:9b:79:be:5d:45:bd:d3:ca:
                    20:61:1d:ec:55:0f:9c:e4:bb:6c:dd:63:ab:0a:15:
                    d8:4f:45:db:68:b5:61:78:06:bf:07:1a:18:d3:6b:
                    06:f6:7d:13:41:61:31:2a:2f:69:ab:6b:60:36:5b:
                    73:85:9b:5d:ed:b7:25:2f:99:25:d0:17:a7:61:c4:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5A:2B:65:0A:38:C0:E1:0F:FC:94:4B:6A:3A:5F:C6:E5:E6:E9:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/241f1b53-63a6-328e-a841-25d97fa28860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:33:6a:2f:e2:f1:ea:ed:8c:6a:03:22:9a:69:f5:94:6f:9d:
         77:a9:55:42:7e:ad:fd:92:e6:25:67:5f:fb:62:96:d6:76:c1:
         49:f6:71:01:cb:54:91:d1:55:76:b5:ab:2a:ca:89:08:9e:d2:
         cc:95:44:01:b6:e6:b2:72:b5:88:b0:8f:07:52:e5:fc:bb:ad:
         85:4f:f8:57:cb:03:e4:43:00:14:ef:c0:b6:44:e8:9c:18:ef:
         7f:8e:8a:1b:35:9f:d9:19:e3:26:75:ec:f8:41:d0:c4:27:9f:
         2e:f3:75:3a:0e:61:82:0d:c8:fa:e4:98:4b:86:8d:a0:2b:63:
         0f:a5:a2:5c:7c:a3:3d:e0:9e:f3:05:9f:ee:2a:e2:40:07:b4:
         a6:8c:a1:d8:52:3d:f6:7a:30:59:5d:99:22:dd:0d:d0:08:a2:
         8d:e5:29:7d:24:5f:5e:0e:2c:6f:aa:f9:50:a3:d1:3d:28:c2:
         f5:cf:a6:24:0f:37:56:3c:df:ab:cc:b5:87:82:af:54:8a:e0:
         a6:9e:e8:ca:a9:d0:7f:16:28:00:c0:0e:8f:3d:09:b6:21:0b:
         38:97:4e:dc:01:bc:ce:9e:13:ed:34:58:19:33:84:fd:c7:8a:
         b8:7d:56:45:4c:de:4b:0c:6c:0a:95:65:74:a4:88:77:ce:54:
         33:de:79:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:28 2025 by rpki-client