Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/2778cd9c-5943-343a-af69-9adb0253cf93.roa
File:                     2778cd9c-5943-343a-af69-9adb0253cf93.roa (raw, json)
Hash identifier:          P3v2CWQeiVDolLmizD6jB4vsfN6x46rWl0XJt0tgJ8E=
Subject key identifier:   64:D3:57:7F:4C:1E:86:BD:D0:FE:37:6E:B0:2A:64:27:73:D7:48:11
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584B8BE218DEAC7B6B40112FCC4C
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/2778cd9c-5943-343a-af69-9adb0253cf93.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     36678
IP address blocks:        69.163.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:18:de:ac:7b:6b:40:11:2f:cc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=29625005-13ac-4211-acff-ecc7619d3564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:2d:93:69:3e:f3:16:5d:b9:d4:88:c0:d1:
                    80:86:d8:88:8f:36:24:5e:6c:4a:a5:cf:38:9e:cd:
                    33:56:63:e6:6b:2e:b4:a7:4c:fe:37:f5:71:a5:4b:
                    c3:73:6f:6f:61:0f:6b:40:db:43:b1:ed:eb:45:e2:
                    51:b2:c8:c8:58:50:75:82:f8:49:d3:bb:1c:e0:99:
                    53:b4:1f:3b:43:aa:28:84:f4:6d:52:53:1d:85:9c:
                    de:f0:ea:c9:88:16:38:19:12:66:f8:5e:c2:c6:9c:
                    c4:99:0e:03:bd:17:0d:27:7f:ea:83:a4:5c:68:f4:
                    9d:21:a0:04:d6:05:13:d4:80:f2:a0:10:57:55:05:
                    07:6b:8b:8d:10:38:80:50:1e:59:1f:7d:d1:3d:98:
                    e5:ea:2b:fa:98:24:cf:e3:47:43:1f:0e:80:48:c2:
                    ae:d7:6a:cb:1e:90:be:c1:51:0e:63:b7:4b:85:c6:
                    1b:9a:6b:4b:00:50:08:bc:40:0c:08:6d:50:fd:20:
                    86:69:98:4e:8e:6b:e4:28:23:05:61:f0:bf:24:89:
                    5d:aa:0c:dd:dc:a2:d3:60:b2:c8:7f:4d:f2:b1:93:
                    7c:c7:54:5a:f9:31:b0:c3:99:1d:a4:69:77:47:87:
                    d8:94:a4:32:f9:68:45:00:cf:1a:51:1a:d9:99:63:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D3:57:7F:4C:1E:86:BD:D0:FE:37:6E:B0:2A:64:27:73:D7:48:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/2778cd9c-5943-343a-af69-9adb0253cf93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.163.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3f:fe:d9:4d:6e:c9:5f:9c:f2:5a:3f:ae:de:8c:02:55:4f:
         9a:e0:33:f2:d8:a0:ef:bf:4d:f2:92:98:8f:0f:d1:e4:6d:e3:
         67:ca:7b:f1:98:99:cb:2f:68:2a:93:10:3a:3b:62:12:41:3d:
         0d:70:74:ca:0c:2d:ab:ff:ba:bd:41:3c:74:fb:ac:2c:f7:b0:
         27:3f:8e:84:66:b9:d6:9c:a6:b6:01:73:d0:2a:52:fb:b5:be:
         f9:89:80:ca:f8:12:b3:3d:3d:1c:ff:49:42:3b:0b:33:07:65:
         ca:70:8f:a3:e4:77:5a:9d:af:d3:93:4c:62:2f:31:64:2a:b8:
         b8:02:ed:78:e4:0f:18:16:7b:32:e0:21:6d:19:13:0f:21:19:
         f6:02:3d:bd:e2:44:63:6a:9c:a9:10:db:e4:76:0e:61:6d:e8:
         a5:7b:88:b4:11:a3:8e:ad:79:56:2e:94:26:f1:98:11:e4:78:
         90:30:b8:7b:2a:6a:96:7e:a8:99:1e:9d:d5:49:48:65:d6:9c:
         c8:31:13:e1:bd:dd:fa:82:28:49:6f:5e:54:61:91:5b:f9:65:
         8c:e5:e6:79:ba:e3:67:0b:71:36:d7:38:fb:a3:5c:7d:1d:cc:
         fb:57:d9:84:cc:48:91:2e:1e:18:d5:2d:31:07:10:18:f7:3f:
         98:47:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:02:52 2025 by rpki-client