Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
File:                     17257513-0a31-325d-b71f-a854a1b5e0a5.roa (raw, json)
Hash identifier:          NI/CR8BHWJUeAYd5IZlxV9toYQsfnMjak3ZUWU0nYWM=
Subject key identifier:   4F:0B:F9:52:36:AA:6D:12:28:C5:39:B4:66:1A:43:97:BE:FC:6E:86
Certificate issuer:       /CN=2c480684-ece9-4dd6-8ec6-0437d826102d
Certificate serial:       010D0C9F4328584B7C876418ADFDE7A3A6FBB080
Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     46616
IP address blocks:        208.114.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:64:18:ad:fd:e7:a3:a6:fb:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=91479ea5-9eb0-4241-909a-68cfe24e46f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:ba:fd:00:6a:8e:8a:6e:29:9f:64:f6:85:
                    51:a9:e0:de:fd:8d:b0:a4:fe:85:e4:83:1f:6a:b6:
                    09:e8:78:da:c9:f5:17:3a:ac:67:c0:aa:d1:f4:30:
                    fa:7f:fd:48:c5:4d:a3:e8:ef:21:d5:74:5c:24:d3:
                    ad:90:5c:30:71:80:22:f8:2e:f0:ec:b9:5c:90:16:
                    6d:aa:8e:3a:05:c7:cf:0c:f2:11:c4:eb:ea:1d:83:
                    ea:44:44:2d:06:c6:25:e4:64:11:2a:1a:63:01:19:
                    43:75:25:3b:f5:2e:6e:ff:d7:31:c6:85:b7:f6:dd:
                    e9:6f:9f:5b:89:e5:10:ef:82:8b:5e:8c:89:23:80:
                    7d:7c:85:f4:0f:a4:33:59:80:0d:81:37:ce:3b:e5:
                    e6:09:71:e4:1c:91:36:b9:75:ac:ab:4f:31:de:2c:
                    93:b6:dc:82:46:a6:2c:e0:fb:1e:9f:67:aa:82:c8:
                    71:15:62:1f:73:6a:f2:6c:08:7a:71:4c:ae:7c:15:
                    4a:ce:ab:7a:a8:8a:88:a6:01:86:ee:1d:b1:6f:de:
                    35:82:eb:fd:c9:1e:86:56:8a:db:22:19:9a:1d:89:
                    3e:b4:2c:08:d7:85:c0:14:5f:69:18:46:fe:dc:a4:
                    b9:07:f6:42:9b:32:c5:c9:1a:ab:89:b0:e7:67:6e:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0B:F9:52:36:AA:6D:12:28:C5:39:B4:66:1A:43:97:BE:FC:6E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8a:25:8b:ba:2c:49:39:b8:b9:38:3b:a6:25:c5:93:57:d3:
         19:50:f1:c6:d5:ee:6e:a2:50:b6:8d:b8:5c:a3:33:67:f8:5e:
         e8:b2:43:71:5b:49:d7:1c:c8:b4:d3:bf:8c:37:fe:9e:77:97:
         93:69:0f:5e:1e:71:ab:d3:19:2a:5d:f2:80:cb:82:b8:dc:0a:
         50:68:31:f5:32:ea:7d:38:2f:78:ef:92:87:9c:0e:33:11:ae:
         a3:9d:84:ac:06:44:d4:16:5f:4f:9d:40:a6:24:9d:27:28:43:
         46:03:67:f9:f1:dc:4a:a5:2c:75:28:56:3d:94:62:8a:d4:23:
         c7:26:68:a5:01:1e:8a:88:b0:31:d2:3e:12:1e:8c:78:40:c4:
         8f:6e:67:89:74:7f:71:63:b6:f3:21:d1:8e:15:26:50:fe:c9:
         9f:65:d3:63:3c:66:8a:45:db:d8:19:82:af:a0:67:f8:73:9d:
         8f:dc:f0:c7:19:30:21:b9:48:f6:ea:a1:5d:f8:46:9c:96:ea:
         62:78:0d:4d:c8:2a:15:31:e6:3e:d5:da:31:1b:bd:bf:d0:42:
         84:e3:97:8c:48:36:a0:6e:a8:15:b7:ff:aa:84:09:25:9a:fd:
         36:be:ff:16:69:08:82:da:51:a6:64:6f:98:ac:3a:b7:ff:92:
         40:97:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:07 2025 by rpki-client