Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/7ec910f1-7279-3a74-804e-e55136f8ec00.roa
File:                     7ec910f1-7279-3a74-804e-e55136f8ec00.roa (raw, json)
Hash identifier:          kA1QQsSuObdKPQdnzj67nWIRA+TwlFbdM3tdFe1J+L4=
Subject key identifier:   EA:BA:C9:92:76:13:E8:93:75:DE:B5:B3:23:9D:D6:26:DA:32:53:0B
Certificate issuer:       /CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a
Certificate serial:       010D0C9F4328584B95A7954653DA506164FA0300
Authority key identifier: DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/7ec910f1-7279-3a74-804e-e55136f8ec00.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     36375
IP address blocks:        141.211.0.0/16 maxlen: 16
                          141.212.0.0/16 maxlen: 16
                          141.213.0.0/16 maxlen: 16
                          192.12.80.0/24 maxlen: 24
                          192.231.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:95:46:53:da:50:61:64:fa:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=ad1132b9-5f70-45c6-8482-2de5fea0cd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:21:09:e6:dd:89:0b:35:cf:ae:38:5d:fb:b6:
                    44:79:4d:67:40:01:83:74:96:5a:05:53:bd:07:cb:
                    85:62:96:36:22:94:e0:b3:9e:e5:f0:5f:9c:06:45:
                    f3:ac:b5:82:a2:ef:c2:79:d1:de:cc:1a:3c:5f:8b:
                    33:f0:9d:5a:57:06:d1:f8:71:47:cf:9e:90:10:62:
                    f1:c6:81:e8:93:98:fd:ba:04:ff:85:b3:4e:16:14:
                    1c:c2:61:95:03:4c:80:1a:5f:a2:84:a4:f9:f9:8a:
                    f7:36:5b:11:9c:05:47:a4:2e:fe:e2:a1:7a:3c:42:
                    53:47:31:48:2a:14:a8:c6:b8:8d:af:6b:03:e8:fe:
                    c1:cf:f2:76:3b:4f:02:24:f7:eb:45:d9:1f:c6:60:
                    43:16:6e:4a:7a:cd:f0:c4:31:2b:74:9c:37:58:eb:
                    b7:19:cb:52:b7:df:56:93:4d:79:b8:a2:b6:87:c3:
                    30:13:45:e1:1e:3a:68:86:70:da:62:9c:62:37:9c:
                    e9:fa:d7:49:01:27:e4:7f:af:75:7c:44:d6:9b:b6:
                    95:04:bf:cc:69:04:ac:b5:a6:85:b3:d6:d2:d3:f0:
                    37:8d:78:13:3b:fb:a4:2d:f2:c8:d2:80:27:a4:af:
                    a8:c8:d7:27:0e:2f:db:5e:8a:6c:94:c6:88:e6:6e:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BA:C9:92:76:13:E8:93:75:DE:B5:B3:23:9D:D6:26:DA:32:53:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/7ec910f1-7279-3a74-804e-e55136f8ec00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.211.0.0-141.213.255.255
                  192.12.80.0/24
                  192.231.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:5a:ac:c7:f2:03:ec:f0:5f:d9:d5:7f:9f:09:75:2b:48:
         6f:a6:d0:0e:37:ed:10:f3:81:e0:2e:1a:7a:77:57:d7:c0:44:
         14:52:40:d6:1b:0b:8f:eb:9b:f2:d9:a8:07:e3:54:f2:9f:e8:
         37:ba:db:f8:49:50:bb:a3:76:c0:30:0d:5c:7d:56:81:8f:56:
         21:81:28:6f:bc:95:29:f3:38:7c:f2:06:e3:2e:34:f0:ce:3b:
         ad:7e:df:fb:42:89:53:c1:07:c9:99:40:a6:fe:91:dc:4d:df:
         43:a8:b1:e5:ef:15:d2:0b:79:d6:99:eb:4c:0c:69:73:3d:f7:
         e1:7a:1f:60:8f:26:6b:55:5f:6c:a5:0d:f9:32:38:55:c9:ea:
         f8:b2:6a:1d:56:15:f7:ab:b8:b5:b2:9d:d2:60:73:0c:1a:ec:
         d9:6a:38:69:de:6e:29:79:4d:a7:56:b1:ce:f5:8f:3d:17:87:
         29:5a:37:ac:87:18:ae:72:46:a5:75:cd:45:a2:39:3a:47:52:
         7a:8f:42:81:8f:6e:3f:39:68:0c:35:60:d1:2a:16:03:64:ba:
         16:22:2a:57:86:10:77:48:96:1c:38:3c:a0:51:d5:ca:9f:5d:
         23:37:79:38:77:0f:23:43:ef:e2:95:cc:96:a0:e8:01:8b:7d:
         c4:0d:47:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:22:13 2025 by rpki-client