Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
File:                     6ac34efc-b417-35c3-8e9e-422402db22ca.roa (raw, json)
Hash identifier:          r5+UHzejsf0SEu2cZmtultydsbp/DB1aaKyTa0BUss4=
Subject key identifier:   CC:70:AC:8B:0A:17:E7:72:B8:F3:AE:E2:9F:8E:CB:B7:22:90:BB:0C
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584B7DECA7573B6C7C8D51E38380
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     138699
IP address blocks:        71.18.227.0/24 maxlen: 24
                          101.45.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a7:57:3b:6c:7c:8d:51:e3:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=7feec76f-a436-4392-bd7c-e078e013c668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:85:21:eb:4b:c8:eb:b4:3c:41:ee:cb:83:
                    7d:5b:4a:ec:94:9b:f5:0d:86:ca:9f:fd:d7:2f:1e:
                    cb:86:e2:33:2e:cc:00:31:13:ae:ef:79:0c:ff:ac:
                    87:55:20:09:d9:9c:2a:c2:b0:44:50:d6:a2:52:5f:
                    1e:40:b0:a9:93:cf:a0:06:41:d9:1a:b5:c2:9c:13:
                    44:7b:7a:aa:33:c4:02:52:55:a6:ba:ec:c3:1e:c0:
                    fa:4f:2c:3b:73:d1:42:91:4e:a3:96:3f:d9:1e:dc:
                    59:f1:2e:a2:1b:8d:08:cc:d1:51:e3:b2:03:0a:fd:
                    51:d4:53:63:c2:e0:56:d1:d7:79:b2:ce:c3:37:a4:
                    a0:22:62:88:f0:60:1d:95:11:c7:61:54:e4:c7:32:
                    2d:f5:0b:37:b4:b5:82:72:6f:99:e3:2a:a7:4b:35:
                    a0:64:77:de:3a:36:28:d3:b0:07:ae:9d:c3:b7:05:
                    3f:86:bb:6b:e9:ac:55:47:34:04:8c:15:41:be:15:
                    3b:9d:95:fa:0f:98:61:bf:a2:b5:a2:dc:b2:a0:bb:
                    b6:24:be:a9:86:fc:d1:9d:dc:57:00:e5:7e:0b:50:
                    b1:53:6a:1b:c2:a5:90:01:b0:8b:cd:c9:d9:d3:d2:
                    dd:9a:21:7b:45:8b:a7:40:7f:88:ba:21:7b:88:21:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:70:AC:8B:0A:17:E7:72:B8:F3:AE:E2:9F:8E:CB:B7:22:90:BB:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.227.0/24
                  101.45.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:ad:64:4f:e3:6b:31:60:2e:39:e4:3e:f3:d1:39:9f:db:
         a0:05:e2:37:a8:9b:aa:ca:6e:4f:e5:9a:b8:e6:bf:01:55:36:
         52:15:48:99:93:cd:a9:25:72:ba:70:15:e8:37:31:8e:02:c1:
         96:73:8d:90:25:47:05:aa:26:57:1c:93:81:2e:14:54:c6:c6:
         0d:26:f0:17:78:28:99:0d:78:4c:b6:26:cb:17:a0:28:e8:91:
         d4:cc:ce:de:6a:3a:b1:43:dc:84:fa:2f:d1:bf:c2:99:a9:6d:
         fe:57:76:b2:22:32:32:38:c8:e0:cd:75:e5:b9:e8:32:82:20:
         1a:86:7a:91:4e:b4:3c:0b:b3:5b:10:dd:58:ce:92:9d:f7:89:
         de:61:98:0d:46:4b:41:9d:ce:23:19:cf:9f:b4:70:64:16:a3:
         5a:65:ee:ac:49:f2:a8:1d:d3:cb:3d:9d:1b:b4:d7:cf:44:e9:
         23:1b:b9:4d:d9:20:07:43:a2:27:19:9d:c0:68:f5:3a:bb:1f:
         d4:23:34:81:85:10:89:79:c9:36:6c:11:b7:bb:3b:31:d5:5d:
         74:8b:63:73:5d:9b:eb:1c:b1:f2:35:41:9d:c4:17:7a:33:01:
         f6:28:dc:47:3c:df:ed:5b:fd:55:fe:64:6d:68:52:df:94:c3:
         c3:4d:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:44 2025 by rpki-client