Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa
File:                     0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa (raw, json)
Hash identifier:          AZEMKJRRp/6ypkzbrtoQj5Iq13JDfhsdK8SH/XGtjwY=
Subject key identifier:   F3:1D:35:2F:7D:D8:EE:E0:22:CF:08:F8:9D:E4:47:19:02:1A:9B:CD
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584B25FC3EC9946793E66D408880
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     46450
IP address blocks:        173.205.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3e:c9:94:67:93:e6:6d:40:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=0aab6ec4-9475-43ce-b296-9dcd6a963511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:35:42:53:5d:2c:85:c3:2d:25:21:13:fb:
                    e8:7b:cb:5e:a1:ec:f5:45:25:e4:50:dc:4d:ad:dc:
                    54:f9:a3:85:10:2e:9a:9c:c5:76:20:6c:e5:c7:21:
                    99:16:8d:b6:72:4b:0e:7a:c2:36:37:9b:f9:d9:4d:
                    04:75:e9:fa:7e:85:d0:79:60:04:69:b1:43:47:a8:
                    fb:51:28:43:1f:6a:5a:14:b1:9c:c1:1d:3f:26:a2:
                    04:6e:43:18:7f:67:c5:03:f5:45:91:9c:37:df:a5:
                    95:51:92:2f:88:fe:02:9b:7e:65:6b:95:50:40:db:
                    d4:7e:b5:69:49:0e:97:1a:c1:77:a8:45:72:93:c9:
                    8f:17:ae:a1:da:16:23:22:1a:f4:60:ef:e0:f7:97:
                    f9:f9:0a:8b:e3:44:54:02:ae:0d:ac:e9:41:b2:00:
                    e0:1b:a7:2a:79:75:15:b2:9d:40:55:d2:b9:98:d3:
                    f7:88:f1:b4:10:ed:3c:be:de:2c:32:7e:a1:4d:fa:
                    13:ea:7b:18:bf:a9:51:26:04:e7:32:ce:05:52:5e:
                    0e:d8:be:93:5d:0b:41:d0:79:b6:25:7a:7b:74:68:
                    9b:45:e0:f9:b4:09:d1:04:38:44:60:ce:e8:ae:60:
                    ca:99:be:03:dc:53:f4:f9:24:c1:aa:32:36:66:9c:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1D:35:2F:7D:D8:EE:E0:22:CF:08:F8:9D:E4:47:19:02:1A:9B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.205.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:39:45:c8:f2:37:63:99:b8:92:ea:32:44:88:45:e1:d8:f6:
         1a:9f:9f:87:6a:92:5a:ee:23:07:d4:36:f3:55:e1:9d:9e:6b:
         0b:3c:cd:0f:b0:79:a3:7e:a4:f3:1a:60:90:b6:0b:07:67:91:
         2b:e0:f7:d3:e0:4c:88:88:12:73:70:d9:10:d5:eb:8f:b0:ef:
         9a:2a:7e:3b:ae:c9:80:a1:20:ee:e0:b2:4f:b3:ec:86:5f:33:
         56:5b:6b:3a:d6:4f:00:cc:b3:50:a7:11:d0:1d:ca:98:f5:00:
         8c:16:1f:3b:ca:ec:a3:85:45:ad:af:ef:45:57:c7:cc:dc:bb:
         1b:9f:71:84:f3:79:78:80:d5:e4:f4:9d:0c:20:34:d0:1a:7d:
         16:e5:db:b7:2c:9a:64:ea:10:af:ed:e6:23:81:b5:b8:6c:e7:
         d6:ed:e5:3a:ce:f4:29:3f:74:5d:0f:b5:1f:f4:35:8e:96:97:
         a3:73:ed:dd:5b:0f:0b:ef:5f:e3:91:31:ee:da:77:77:ad:67:
         2a:de:eb:04:5e:25:98:54:3a:df:76:9f:15:c4:4b:c5:e5:d0:
         0b:48:f8:03:fc:8b:bb:5f:19:ba:e0:c6:1e:2a:f7:04:0f:67:
         00:bb:3a:a1:b4:fc:5c:c0:67:2f:c2:45:37:04:5b:11:c3:a0:
         6c:13:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:49 2025 by rpki-client