Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/ee7692de-187f-3724-9e9b-8ab972c9ea9b.roa
File:                     ee7692de-187f-3724-9e9b-8ab972c9ea9b.roa (raw, json)
Hash identifier:          CTLYXRSolYW8TMavppFB5+quVxWTS5SABEiOnqaB4K8=
Subject key identifier:   15:C6:66:0B:8E:42:FA:65:A8:85:03:BA:42:82:31:BA:63:CC:6C:0C
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584B6631F23D926B238BC604A880
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/ee7692de-187f-3724-9e9b-8ab972c9ea9b.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     401307
IP address blocks:        204.25.192.0/23 maxlen: 24
                          204.25.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f2:3d:92:6b:23:8b:c6:04:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=4fd2a58d-5146-426e-9e25-3345845c8294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:9d:cc:f6:65:f9:61:ed:bb:32:d6:85:e8:
                    c5:f2:d3:23:e0:70:64:b1:6d:02:cf:b0:fe:88:f1:
                    1f:41:21:1e:71:a7:d0:d9:4d:29:b4:96:c2:d3:c7:
                    5b:60:37:56:6c:e9:7f:11:37:d8:6b:ad:e0:fa:69:
                    58:22:86:06:ce:ac:eb:f0:d2:53:6e:82:67:7e:a5:
                    cb:f0:85:6c:2b:e5:24:3d:88:d3:55:aa:f0:2c:5d:
                    ad:f1:41:c3:88:0e:20:d3:38:ad:a0:21:89:ca:96:
                    46:a3:01:bf:e5:28:59:03:0b:92:f5:98:f3:50:b5:
                    5c:28:75:be:3b:d8:86:a0:4d:e6:56:47:8e:93:95:
                    46:46:c0:0e:99:cf:f4:b0:d9:57:08:83:86:0d:92:
                    a3:77:da:55:d1:59:19:4a:6d:f0:c8:33:5a:59:96:
                    e6:f9:3a:25:08:32:72:9d:89:4a:7e:e3:32:b9:36:
                    56:55:ff:2b:3d:00:c9:5a:60:d6:aa:ee:d9:78:54:
                    b1:c6:59:f8:d2:b6:8e:2a:36:bb:e2:e2:43:a5:d0:
                    4c:5b:ee:0b:ea:d8:37:18:03:05:64:5e:dc:89:63:
                    c5:81:51:61:b4:83:2b:39:3d:d7:31:6a:de:d7:4c:
                    2f:c5:3a:93:4c:0f:d4:64:57:d9:09:8c:3a:a6:da:
                    9e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C6:66:0B:8E:42:FA:65:A8:85:03:BA:42:82:31:BA:63:CC:6C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/ee7692de-187f-3724-9e9b-8ab972c9ea9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:05:d8:a5:8f:b8:91:0b:59:4c:3f:99:73:0e:5c:8a:e0:
         fa:f6:c6:83:6a:e2:26:df:6a:53:26:ec:72:23:94:aa:c1:87:
         d9:a3:10:1e:06:f7:d2:63:d7:d7:24:83:13:89:e0:6d:52:c6:
         36:3b:cd:46:95:2e:2e:cd:69:99:13:c7:0b:4d:02:4e:7e:d5:
         c1:c2:3a:38:e1:e9:dd:e4:82:aa:53:4b:d2:77:02:48:b9:cf:
         77:be:9e:e8:7e:1f:bd:94:bf:8a:45:99:34:60:64:7c:7f:66:
         97:4b:e7:e0:6b:25:0e:72:b0:c0:e0:33:17:a0:73:e6:61:18:
         20:1f:28:8f:38:22:64:b3:9b:8e:68:8a:4d:06:cc:2f:9e:94:
         23:00:cc:12:1f:5e:54:06:22:8c:e3:26:64:28:90:82:95:3d:
         3c:7b:e7:38:4f:5a:b1:cc:f3:b5:69:65:2a:c9:e8:e0:23:07:
         92:49:47:63:51:ba:16:95:25:b8:bf:da:d5:46:d3:e6:a8:9e:
         56:97:ec:a8:36:2f:ec:d7:c7:a4:2b:1a:6f:28:10:95:41:ec:
         dd:fc:00:b0:34:ac:d0:e3:dc:ec:46:af:d5:27:81:7c:cb:7d:
         a3:da:0e:7b:6b:70:fb:fe:61:67:47:16:33:0f:cc:25:58:a9:
         f8:c8:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:35:38 2025 by rpki-client