Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ec98ccff-bac5-31aa-9357-e5318d0e3c73.roa
File:                     ec98ccff-bac5-31aa-9357-e5318d0e3c73.roa (raw, json)
Hash identifier:          kdIerI/gB/dF5WMkdJyW5DsNWr1lGpQnWoAgJdl3fEA=
Subject key identifier:   FA:C3:D7:11:F0:90:34:85:6B:AA:18:68:A9:D7:3F:50:93:C1:E9:D0
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328584B8EACD965B35CB7284F8B0DC0
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ec98ccff-bac5-31aa-9357-e5318d0e3c73.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        204.110.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d9:65:b3:5c:b7:28:4f:8b:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=7c0a41cd-0213-40ad-91c1-36bebf657e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:ff:8b:72:01:ee:c6:9c:df:b5:9c:c6:7d:
                    63:a9:9c:f0:c0:ae:d5:e0:5d:eb:7a:1b:8f:70:71:
                    8f:d6:06:6d:ed:e5:b9:98:b3:42:a4:9c:17:36:0c:
                    0f:e0:06:c8:8e:dc:9c:7b:bc:ef:a9:4e:a2:90:f9:
                    23:77:1d:84:cc:69:71:9a:28:c9:4e:5a:c8:b0:27:
                    d2:7b:6b:8b:0b:2a:92:05:00:f7:b0:05:dd:9e:6a:
                    f0:e1:ff:00:db:df:39:7b:ba:03:69:dc:d5:6e:b0:
                    2b:7f:2d:42:15:06:5b:f3:2f:b6:9a:52:d5:32:55:
                    43:de:78:05:e8:6c:31:03:14:d4:53:ac:2e:c5:da:
                    2a:47:a9:59:04:7e:94:20:c4:77:f7:40:62:3d:f8:
                    d5:84:0d:cc:6b:76:d5:dd:bc:3d:e5:6f:9b:81:0c:
                    be:12:13:2b:fc:61:52:c1:fd:2a:35:e3:05:6a:78:
                    de:ae:06:1c:1e:22:2c:3d:a4:fb:c5:f2:84:fa:37:
                    ab:0c:80:31:34:e7:af:96:32:c2:f1:18:24:13:3d:
                    41:21:41:ff:59:75:31:1d:0a:d4:e5:a2:3a:ee:74:
                    2b:5b:d9:f8:8e:90:bd:ce:b1:15:b0:4b:89:41:8f:
                    1b:ec:f3:37:56:6a:c1:d7:1e:3e:99:78:c3:40:bc:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C3:D7:11:F0:90:34:85:6B:AA:18:68:A9:D7:3F:50:93:C1:E9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ec98ccff-bac5-31aa-9357-e5318d0e3c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.110.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ec:32:ac:9d:54:55:ef:4d:b4:a5:b0:a2:37:c6:3e:1e:b9:
         91:4a:58:64:d8:25:b7:38:21:e4:d7:40:f4:c3:dc:d7:f9:94:
         9f:2b:cb:93:bc:9f:25:f6:5d:3b:27:aa:d4:7b:54:b5:fd:9a:
         8d:fd:1d:f0:a3:77:11:38:f6:7c:f7:a6:db:cd:54:32:09:c5:
         e3:e7:bd:89:b0:9d:f3:0a:e3:44:9d:cd:73:27:22:ec:02:9d:
         80:cf:2c:f2:e9:7a:29:a1:1d:3e:92:3d:27:90:9b:aa:12:df:
         00:1b:0c:52:e6:0a:29:cc:9f:86:ad:8e:1c:8b:45:03:6a:0b:
         60:65:d1:b2:28:0b:0d:af:26:79:a0:f3:9e:85:a5:0b:81:fe:
         b1:0c:a6:3e:d1:50:97:c7:7b:4e:ac:37:43:43:6c:4f:e4:cf:
         e8:99:6a:b3:2d:94:ba:21:0c:84:0b:8a:02:e7:4b:7f:e1:15:
         d2:48:fd:09:fe:5a:2d:cb:e5:b6:b4:d9:8e:c6:8f:f1:78:82:
         3a:87:0d:4c:6e:8c:4a:c8:2d:5a:16:d4:6f:08:d1:fc:2a:55:
         a6:3a:eb:da:de:5d:3f:ad:41:52:6b:14:7a:31:08:5c:6a:4d:
         aa:b4:11:88:44:ac:9b:01:d5:51:1c:8b:3a:21:0a:96:ad:35:
         f7:86:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:23:26 2025 by rpki-client