Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/12136690-6422-3af0-ac32-cc7e4323e3e2.roa
File:                     12136690-6422-3af0-ac32-cc7e4323e3e2.roa (raw, json)
Hash identifier:          oe3SECl4kikjPsnWXM1MPftch70d4Qn6N4uoYSw2YQ0=
Subject key identifier:   43:8A:72:5C:9B:C6:C3:02:0C:83:93:52:00:7D:2D:D4:E8:BB:64:87
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584B7A519D59A8E35255B6A76E80
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/12136690-6422-3af0-ac32-cc7e4323e3e2.roa
Signing time:             Fri 10 Oct 2025 18:00:46 +0000
ROA not before:           Fri 10 Oct 2025 18:00:46 +0000
ROA not after:            Thu 08 Jan 2026 19:00:46 +0000
asID:                     397630
IP address blocks:        207.180.23.0/24 maxlen: 24
                          216.75.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:51:9d:59:a8:e3:52:55:b6:a7:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Oct 10 18:00:46 2025 GMT
            Not After : Jan  8 19:00:46 2026 GMT
        Subject: CN=e7a694ce-df4d-47bb-86d8-3654d30edd45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:55:fd:c1:b0:2b:59:bd:c7:f9:57:20:29:
                    30:61:22:b0:f0:d8:27:f3:46:a7:73:59:24:06:d3:
                    b5:3c:d6:29:ec:8b:74:2d:76:f6:af:51:08:a7:66:
                    50:79:cc:aa:aa:7d:24:ee:db:77:f0:71:f4:36:2d:
                    d6:e9:9f:df:23:2b:1f:d7:c2:68:b9:13:77:9f:b1:
                    e5:74:aa:c7:b3:8c:25:42:d2:12:f5:50:db:6a:3d:
                    93:63:e1:65:45:b1:9e:ec:be:4d:59:32:00:b8:7a:
                    ef:72:93:4a:23:e4:63:11:f3:58:a1:8c:56:14:02:
                    df:38:42:8b:5c:1a:0e:78:b4:0e:aa:92:89:d7:cc:
                    7f:54:a2:76:25:b1:31:97:ea:c0:52:23:6a:67:11:
                    b7:cb:ce:71:52:55:a3:75:29:45:13:0f:e2:0f:03:
                    03:2d:7d:e5:b3:f9:bc:34:fa:11:19:df:7f:5e:a8:
                    aa:39:67:f2:7f:5b:f1:a2:a1:06:f5:ff:c1:9b:c9:
                    0f:29:ae:28:c6:df:25:51:93:27:2f:a0:cf:62:99:
                    17:b3:bf:e0:d2:dc:aa:00:1d:d9:19:ab:50:bb:2c:
                    c6:69:5c:b5:66:ee:cf:a6:47:c2:95:b8:b2:e6:8d:
                    76:9b:0c:a9:44:04:b6:61:28:ce:d8:f3:be:65:53:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8A:72:5C:9B:C6:C3:02:0C:83:93:52:00:7D:2D:D4:E8:BB:64:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/12136690-6422-3af0-ac32-cc7e4323e3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.23.0/24
                  216.75.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:fd:cd:1e:9f:8f:5a:60:33:c7:e7:02:53:d3:05:27:d1:45:
         f0:16:3a:e8:bf:e3:fe:1a:22:93:43:f6:72:59:94:ff:d3:7d:
         a1:54:d7:60:fc:f6:dd:ff:58:cb:7c:ef:5a:b1:ba:2f:11:55:
         0e:5a:f4:27:c7:8b:0b:dc:06:47:39:97:09:71:b9:fd:68:5d:
         0a:c4:df:3d:95:87:9c:31:9e:97:8f:9f:4d:e6:78:ee:5e:03:
         c9:01:86:e2:12:06:49:99:43:eb:5f:3b:2c:e4:d6:e4:b0:9d:
         a0:20:75:46:04:ec:65:9d:6f:80:98:51:80:2d:e8:0b:a2:a9:
         87:63:c4:e1:0f:83:a8:35:07:c4:1f:c9:0a:66:38:ac:88:e4:
         99:7a:42:3b:4c:ee:9a:50:04:f0:91:65:25:e2:c2:e0:68:51:
         cd:cb:6b:1e:83:ac:bb:1a:80:1a:90:53:c7:b1:82:4e:f8:73:
         6e:bd:76:bc:84:c9:e3:c0:8e:7a:81:03:be:04:cf:51:81:97:
         76:66:f5:00:e2:14:38:d1:fd:8c:71:7b:17:1b:7c:69:94:92:
         1e:98:c1:64:01:0c:c1:1d:7a:a2:0c:6d:97:ac:02:23:48:3d:
         00:30:cb:48:64:b5:7d:d4:2f:ea:4d:25:8a:93:67:1d:d7:df:
         01:66:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:34 2025 by rpki-client