Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
File:                     c5debae7-2a94-3092-9d97-9436c58ed0d2.roa (raw, json)
Hash identifier:          xxiiB7Mnfkddi3vvYVpWcLdvs3PdC+pM5+jzSP6M/rk=
Subject key identifier:   05:6E:2A:D2:11:03:21:99:DC:99:99:F5:63:9B:61:09:BC:DE:FD:CA
Certificate issuer:       /CN=084cdd3f-c178-4428-8992-9e1b2922de98
Certificate serial:       010D0C9F4328584B8BE220D2501214461C5C2D00
Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        72.1.32.0/21 maxlen: 21
                          72.1.40.0/22 maxlen: 22
                          72.1.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:20:d2:50:12:14:46:1c:5c:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=267ad9c1-6a5f-49ec-93bd-e23885fa9b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c3:f5:5b:98:53:2d:b0:de:38:ce:9e:71:0a:
                    42:f4:91:27:f5:85:6f:9e:fb:83:74:1f:c4:0b:aa:
                    b4:61:51:e4:c4:0a:d0:0d:3f:a0:66:07:24:91:1e:
                    3c:85:39:79:bc:93:aa:c3:d2:ed:7d:3c:b4:c7:42:
                    12:12:57:f4:5e:b4:e4:c3:94:b2:48:35:10:f2:99:
                    e7:22:95:6a:69:29:6d:e0:1c:43:90:81:14:65:48:
                    10:19:70:67:56:81:57:d4:5d:f4:de:ed:cd:9f:8b:
                    c1:4b:b6:03:cf:88:5c:7f:51:f8:59:a4:4b:98:68:
                    0e:6b:df:41:e8:f1:3b:02:75:2a:e4:c3:de:27:92:
                    c8:e8:bd:f8:a5:ff:1b:ad:0d:95:7c:2f:e7:56:8d:
                    5a:0c:e4:49:68:b0:9f:57:ed:9a:a2:30:bc:21:7d:
                    ae:51:a2:23:8e:eb:d1:3e:b0:d6:eb:4a:18:76:40:
                    48:94:67:0e:d7:7f:aa:0b:9d:10:7f:97:25:2e:e2:
                    a1:c3:13:fa:2f:89:b6:d3:c7:43:35:ca:1b:bb:4d:
                    7d:b7:aa:25:63:57:e5:53:b8:58:7c:34:b4:8f:9b:
                    13:ee:97:93:bb:ac:a4:ab:3a:b0:9b:b8:e4:e5:92:
                    83:79:6f:e5:22:3c:7e:30:ea:5b:e6:8c:83:10:db:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:2A:D2:11:03:21:99:DC:99:99:F5:63:9B:61:09:BC:DE:FD:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.32.0-72.1.45.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:37:a4:55:5c:96:d4:d5:4c:ca:9a:fb:47:a3:9f:3d:3c:44:
         67:73:75:9c:0b:4e:a7:ac:e8:78:09:57:40:1a:62:99:f9:b0:
         68:e6:a0:4c:8f:71:c0:9c:dd:7c:17:47:2a:a0:ee:98:28:af:
         83:96:33:07:4e:b9:2d:54:8f:f9:d3:a2:d8:ac:9d:5d:6f:88:
         1a:0e:8a:45:fc:79:81:6b:31:28:d4:6c:6c:d4:fe:a5:6b:ad:
         87:88:e2:66:50:1f:d7:1c:26:97:80:94:5a:58:13:e0:39:90:
         ee:e7:5c:13:ac:43:5c:e4:e2:f0:80:7b:da:78:45:15:db:9c:
         c2:ce:dc:8a:82:53:f4:2f:f4:46:ab:8f:86:b6:58:51:ec:77:
         31:7a:ba:b5:d2:9c:c0:b2:bf:98:2d:80:1a:74:5a:c4:6a:66:
         00:9b:60:33:37:d3:4b:b4:2d:1a:57:2e:7e:c9:37:1e:34:12:
         52:a5:f0:b1:88:bf:d4:cd:0d:be:d2:b6:13:ad:65:05:86:85:
         73:49:de:ad:64:00:37:ce:9d:1b:a9:9b:0a:81:6e:47:15:b9:
         ff:f5:3d:2d:4f:ab:59:80:af:cd:92:2e:2f:dc:0b:83:36:56:
         4b:8a:ca:fa:33:f2:c6:75:73:c9:b8:93:da:fa:53:79:43:28:
         39:fb:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:44 2025 by rpki-client