Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa
File:                     b22085cf-e389-3e14-9173-666e83976274.roa (raw, json)
Hash identifier:          XtPWkiKf1oGDNOdslnP79O/HEBsnTvfNDbXx07xS+l0=
Subject key identifier:   56:65:26:E4:14:45:63:08:C0:40:76:F4:39:EE:39:45:21:C9:55:04
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F4328584B8BE2148F8CC1CE81968AAF00
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     62700
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:14:8f:8c:c1:ce:81:96:8a:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=2da43a51-5ba8-49d8-b3e0-bf30c5294ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:e8:02:a3:9c:53:e0:a6:12:19:04:17:cf:
                    31:0a:b2:8a:61:f7:72:af:5c:3e:92:57:d9:78:11:
                    e0:15:b3:6c:ce:3c:d2:35:ed:90:8d:5d:df:4f:6a:
                    fa:1e:56:4b:7b:87:c9:aa:ad:1c:ff:90:14:63:b3:
                    61:37:b8:52:12:04:45:89:03:76:fd:97:05:a1:c0:
                    0d:c8:e9:01:21:11:80:86:1c:b3:be:bb:2f:b3:88:
                    d0:a9:29:ad:26:6f:c5:74:a3:b7:92:7c:8e:70:02:
                    72:4b:71:1c:ff:34:23:b9:05:c3:dd:4f:e6:16:e9:
                    e9:d7:48:21:4c:bc:b2:6b:4b:9a:05:3d:86:b2:e3:
                    50:92:8c:08:e7:e7:6b:5a:c9:66:c8:e0:f5:0b:46:
                    39:4a:64:7c:ae:53:8d:a4:93:30:32:9c:99:66:9b:
                    61:c1:87:22:ad:f6:0f:cc:de:ec:cf:fd:f1:9b:c9:
                    05:56:ef:bb:3e:5c:7a:e5:b0:30:98:03:16:22:8e:
                    a1:d3:b2:da:2a:ee:6e:bc:e5:8a:7b:f0:af:e3:dc:
                    38:f5:86:ab:a8:3f:9e:f5:2d:7f:73:41:4e:72:92:
                    b5:b6:42:01:09:f5:ae:d9:f6:47:27:97:1c:eb:84:
                    2a:7b:93:06:3e:62:41:bb:16:c1:ad:5a:e5:98:9b:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:26:E4:14:45:63:08:C0:40:76:F4:39:EE:39:45:21:C9:55:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:6f:7d:2d:71:8e:5f:1a:c7:e5:9b:f5:bc:77:d4:75:89:2c:
         91:76:f8:66:ce:d6:a0:43:d2:09:71:36:0e:5e:81:af:9a:18:
         e1:71:6c:8d:85:c2:d8:97:16:ae:d8:e2:6b:88:05:50:d0:de:
         60:c3:fa:5a:50:cc:7a:24:19:20:bb:e1:da:95:ab:46:f5:bf:
         82:b6:f1:db:73:f8:24:e9:81:64:e0:c0:10:29:ed:87:66:9b:
         23:dd:d1:01:d2:a6:4d:c2:3b:23:da:f4:b4:bf:47:c9:91:9c:
         a6:33:fe:ef:27:61:90:65:34:b9:5c:d9:f1:82:86:a8:fc:9e:
         28:99:46:6e:7e:dc:63:2b:98:2b:1e:e3:0a:cf:15:17:e6:36:
         64:0b:d9:9f:89:31:19:87:2b:3d:35:c6:10:af:fd:56:28:35:
         70:29:b0:1a:12:31:0e:7f:52:b6:a4:13:eb:65:34:ef:fc:01:
         ca:a4:98:ea:d6:1a:46:60:57:d7:b9:c8:56:c8:32:94:8f:93:
         fd:11:c5:1b:13:55:9d:2e:d2:1d:ea:0c:3e:03:0e:1a:87:91:
         b2:6c:93:cc:ae:e8:08:7e:70:8d:a5:53:2e:7a:90:8a:a4:fd:
         76:f3:d6:5d:8b:19:25:0c:91:cb:ad:3a:1a:5d:1f:20:aa:54:
         d7:94:08:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:22:34 2025 by rpki-client