Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa
File:                     4947827a-81e3-3c67-8152-d53e2abb4dab.roa (raw, json)
Hash identifier:          Xno3+2zofzF6vI2eh4235MIJcI9McyROvp4Fyp0lLoM=
Subject key identifier:   09:22:3F:D9:1B:FF:A4:66:BC:5E:B3:38:46:90:59:5C:05:E4:1E:6C
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584B25FC3EA76AE6BFAEDBC9DA20
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     46450
IP address blocks:        158.106.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3e:a7:6a:e6:bf:ae:db:c9:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=ed6f0f22-eabd-44e4-b60c-b16c182c5b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:9b:3d:b6:a1:48:90:bb:d6:e7:7e:00:2d:
                    fb:aa:d9:51:b4:62:c4:21:f7:1f:60:19:c3:7b:68:
                    40:93:82:f5:53:64:ad:31:7c:35:ad:bb:bc:22:35:
                    77:18:e8:e9:bd:63:6c:14:e0:08:75:ff:d9:03:28:
                    2c:8c:43:34:8a:ee:51:09:95:50:35:8f:66:31:6a:
                    42:a6:4c:87:d5:df:a2:a3:40:6e:e4:36:96:a7:d1:
                    54:4c:d7:f7:c1:e6:08:7e:0e:ed:c7:c8:23:2e:10:
                    84:20:ca:c2:3e:58:e1:bd:f3:b7:67:72:79:1e:ed:
                    49:71:67:ba:51:ba:24:da:50:a9:58:39:24:04:cc:
                    93:96:a9:f4:95:8a:4a:db:99:64:11:5c:17:e5:70:
                    39:bb:64:85:1b:e7:8a:92:b3:24:05:51:f8:67:04:
                    e9:04:c1:48:f7:e1:0a:51:e3:86:f9:1e:60:b4:66:
                    cf:a6:35:89:73:51:4d:a1:fe:e0:a8:fc:2c:19:80:
                    af:aa:33:aa:96:29:30:28:35:11:cf:a0:4b:70:53:
                    7f:c1:39:0d:3d:09:c7:aa:18:e8:bb:3a:39:95:7b:
                    60:8c:89:ac:0f:66:38:b0:e2:8e:c3:16:c7:22:12:
                    ae:b4:37:ae:75:2a:c6:66:17:50:e5:78:b6:3a:10:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:22:3F:D9:1B:FF:A4:66:BC:5E:B3:38:46:90:59:5C:05:E4:1E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.106.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:17:17:67:33:cc:1c:d0:15:32:03:56:ba:70:56:09:28:50:
         2a:5a:df:5a:67:2a:fe:f6:2a:75:b5:2d:1a:ed:11:1f:fa:42:
         c7:32:78:7c:6b:19:56:30:ed:00:33:0f:11:a7:14:05:be:e8:
         5a:3a:63:90:6d:76:cf:a6:98:ea:73:fb:6e:6a:1d:69:0b:79:
         bc:bd:15:3a:2a:b7:43:c3:ef:53:55:fa:83:9f:3d:be:a4:0f:
         9b:af:dc:95:df:60:16:b4:0d:dc:e5:1a:d5:e8:ee:01:ee:c4:
         10:08:58:33:94:83:61:cc:85:fc:3e:49:d0:60:e9:4d:d3:fe:
         0c:01:b8:b6:9f:bb:fc:92:e5:91:8f:68:ec:d1:ab:99:93:e8:
         32:fe:71:a9:f5:f8:e2:7f:3d:d6:04:7d:53:c2:61:f3:73:aa:
         95:75:fa:95:1c:1f:5b:bb:c9:f5:14:8f:73:6a:e2:44:0c:e5:
         80:06:55:8e:b9:25:07:c3:da:88:af:bb:57:d7:5e:83:cf:6f:
         a1:2c:89:65:f7:19:26:ed:39:ff:d7:6e:b5:70:ec:b6:d7:d4:
         79:fa:e3:38:c0:39:90:7b:36:90:bb:a8:0e:cc:f4:33:1e:45:
         8e:cf:13:40:85:03:92:55:3f:a0:3d:f1:3a:76:c5:b9:45:c6:
         31:ce:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:57 2025 by rpki-client