Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/0e9769ae-da14-391c-ba1d-159342defe0f.roa
File:                     0e9769ae-da14-391c-ba1d-159342defe0f.roa (raw, json)
Hash identifier:          AABo5Lc7WvHzwLJWLWcB0Q6YGqe/Ctszh/CEV78+DcY=
Subject key identifier:   2C:67:16:47:3F:69:FD:12:4B:9B:13:4D:2E:DA:07:B3:FF:8F:72:36
Certificate issuer:       /CN=6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1
Certificate serial:       010D0C9F4328584B8EACC21528549FEF8C814EC0
Authority key identifier: 08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/0e9769ae-da14-391c-ba1d-159342defe0f.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        205.167.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:c2:15:28:54:9f:ef:8c:81:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=02f44293-2687-4768-ae95-deabffae7bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:5e:42:b4:32:2f:f0:7e:43:ab:3e:46:61:
                    50:79:0a:f8:03:e4:92:4f:a8:59:9e:d3:d0:d3:9f:
                    16:76:2b:b1:ae:86:d0:d7:b3:e1:cc:e9:c3:c1:83:
                    80:99:48:ec:29:47:38:bb:03:b9:b2:37:13:a6:04:
                    af:02:9e:bb:f9:db:63:b3:3d:23:ac:7f:3d:0d:6e:
                    42:c7:fc:fa:99:28:b7:cc:46:7c:68:a0:26:b2:bf:
                    25:32:76:28:d1:6f:cb:72:09:bb:c0:ac:16:ad:2e:
                    cc:d7:74:5c:f5:27:8c:28:78:01:f4:f2:4a:1e:cf:
                    6b:da:9c:70:82:04:e9:52:b2:a5:ac:5a:a6:8a:6a:
                    b6:a4:d5:b4:3b:92:5e:cf:e8:ff:90:98:e3:1f:14:
                    37:49:e6:b2:fa:0d:7c:d6:c3:49:c8:c3:41:d7:6e:
                    fe:56:86:c6:dc:4c:16:b0:a1:3d:32:63:d4:aa:a4:
                    81:1d:a4:83:3c:3c:7e:77:01:52:04:66:25:bd:4e:
                    9c:13:96:51:a4:79:fd:13:79:8e:30:a3:60:9d:22:
                    37:a3:b7:5b:93:b7:e5:fe:29:63:98:a3:d2:16:42:
                    ab:36:ba:bc:47:aa:c2:f9:16:8c:4a:5c:26:38:6c:
                    39:c2:69:b8:c1:3d:68:e0:5f:3b:27:a1:e5:48:11:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:67:16:47:3F:69:FD:12:4B:9B:13:4D:2E:DA:07:B3:FF:8F:72:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/0e9769ae-da14-391c-ba1d-159342defe0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.crl

            X509v3 Authority Key Identifier:
                keyid:08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.167.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:29:9d:74:d0:32:e1:f1:ee:cb:84:9f:1c:32:8b:e5:08:
         ba:ea:a3:ec:62:5c:b6:c8:bc:d9:a5:25:a0:8a:25:71:03:7c:
         54:f6:38:7e:c1:3d:ac:cd:03:e4:81:78:ef:97:eb:ab:35:19:
         7a:4f:4f:19:68:53:e9:b2:e3:99:4e:ba:fe:df:5b:7e:70:c6:
         64:4a:a9:d0:af:2b:44:af:72:49:20:98:b3:c0:d1:6d:e4:cc:
         ce:ac:12:2e:a0:a4:95:4c:0b:b3:59:53:10:60:6e:e1:c0:f4:
         c3:0b:a7:85:53:00:02:69:06:95:82:d0:3d:ea:af:27:49:c9:
         64:66:5a:87:8b:4a:f2:bc:b3:dc:4c:59:51:e0:6d:a3:62:d2:
         8c:e8:b2:95:21:c8:1f:f2:4f:b1:d8:a9:96:ec:2f:35:bc:77:
         7f:c9:de:83:5c:4b:6b:61:b6:9e:ef:31:28:85:89:e3:40:37:
         3b:51:6a:ec:3c:da:95:48:36:18:6d:97:96:aa:29:b2:09:28:
         39:4b:9d:90:f1:a7:b2:81:0f:d3:e8:8c:91:55:34:b3:c0:d3:
         6a:56:1d:93:b7:a8:a4:d3:7b:89:95:21:9f:0f:4b:e2:a7:3a:
         99:0e:84:b1:db:ca:07:86:65:84:ac:d7:94:ed:60:31:d1:f8:
         52:74:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:14 2025 by rpki-client