Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
File:                     7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa (raw, json)
Hash identifier:          gJmd+9CmkC+ymRDRrrSLjkGGuKj7+4/JbDFo04XPhQs=
Subject key identifier:   0F:DA:AA:B3:B7:8C:11:FC:0B:98:43:F0:A0:A7:5E:10:CF:18:4A:FB
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F4328584B8BE2200B58BBE3ACC9CB4280
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     62728
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:20:0b:58:bb:e3:ac:c9:cb:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=5a4d53de-97e9-4b5b-93ef-67e3e0e01587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7a:8f:99:96:f0:d3:58:95:f4:0c:a4:5e:db:
                    7d:3a:22:92:f0:56:4e:2a:73:d0:fc:1a:e6:ca:a9:
                    91:6d:f8:cc:74:91:2c:0f:5f:20:f9:db:08:c1:46:
                    fe:ff:32:d0:14:72:99:4e:cd:f5:8e:1c:9d:3f:21:
                    d7:86:fd:e7:53:88:87:0b:55:64:c0:4d:9a:15:92:
                    11:23:9a:d6:0e:c7:95:a6:6a:92:40:c5:15:7b:d0:
                    f4:c4:3a:19:3a:24:3d:ae:d2:44:f9:27:c9:a3:2a:
                    79:61:71:7b:6a:8e:2b:2e:cd:b9:9a:5b:14:9a:30:
                    44:e5:58:0a:ef:c0:7e:7a:0a:99:08:61:ff:c7:20:
                    a1:e0:12:93:67:17:00:cc:60:af:a8:1f:2e:1d:98:
                    34:7a:8d:4d:f6:6d:d2:69:bc:c5:de:f9:c8:89:f2:
                    cd:92:d0:3d:da:11:4c:13:62:9f:eb:fd:76:94:75:
                    23:24:24:34:ee:73:1a:d1:75:64:41:66:96:3c:60:
                    70:2a:7f:6a:c2:8f:b6:11:6b:a2:d0:e0:12:eb:14:
                    e8:44:9c:e5:5d:f2:34:35:75:58:ca:17:03:6c:93:
                    0e:4d:0e:50:c3:b9:87:a5:bb:eb:98:c8:2c:2e:5b:
                    d6:d5:a2:77:9e:4f:bd:5c:83:93:94:e1:34:ff:da:
                    02:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DA:AA:B3:B7:8C:11:FC:0B:98:43:F0:A0:A7:5E:10:CF:18:4A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/7c290f4d-05e2-3e2f-9bde-fcfac0c9fc57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:19:c7:0a:bb:af:06:26:52:af:d8:bf:80:36:0d:5d:7d:67:
         03:d1:54:32:62:2d:38:3c:34:25:18:19:f0:a6:37:72:00:a4:
         67:0d:08:ec:37:85:e0:92:fa:aa:ba:75:16:9a:d0:2a:ae:0d:
         97:3a:de:9c:e1:e5:21:0f:ea:ef:01:aa:e0:ad:d2:55:41:01:
         c5:24:10:61:4b:fc:53:fc:a5:c7:70:3c:42:4d:44:c5:ac:a4:
         d0:d8:6b:19:f3:0f:86:e5:28:c2:0e:f4:48:84:43:98:2c:b0:
         3b:04:ff:00:6a:7e:a9:47:fc:82:31:9e:d6:c0:83:e1:63:30:
         e0:62:28:07:f1:7d:4e:fa:08:22:c5:09:5f:a6:0a:4a:a2:64:
         f8:40:a5:a2:48:60:73:34:3a:fd:22:9e:93:6e:5b:23:f2:97:
         9f:cf:db:18:ba:c7:76:3a:7e:73:de:d1:04:ca:31:a7:7d:ab:
         d2:96:0f:61:35:20:81:bb:32:7f:5e:a9:a3:a5:d4:5e:a5:ea:
         11:c4:a6:21:8f:84:fe:84:81:fc:43:7c:fc:09:9a:4a:b1:20:
         35:0a:02:20:db:0e:a2:1e:e7:08:ec:75:cf:f2:00:0c:e1:a2:
         8e:2a:37:1e:da:f2:cb:56:b6:3a:f5:54:82:51:b6:ce:80:d4:
         c2:ec:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:50:27 2025 by rpki-client