Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/1ca458dc-00bb-3356-93d2-ad3d163a6f27.roa
File:                     1ca458dc-00bb-3356-93d2-ad3d163a6f27.roa (raw, json)
Hash identifier:          JcxJ+KO9Lw/rDX40/FYLNZDRf983E6EwGYfqAAyYR78=
Subject key identifier:   CD:33:07:A6:B8:3E:BF:A2:5C:6D:95:B9:7C:77:08:DB:12:19:58:4B
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584B23319A0615070F0DA1ED7580
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/1ca458dc-00bb-3356-93d2-ad3d163a6f27.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     6922
IP address blocks:        204.158.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:9a:06:15:07:0f:0d:a1:ed:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=6e4ab801-eb11-4813-bfef-60c70af661b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:c7:93:92:8a:aa:58:7e:bb:22:37:d7:00:
                    c0:11:1d:9f:29:6d:da:59:9b:1d:eb:09:ca:8d:71:
                    50:98:f3:75:2b:83:86:97:cb:9b:43:fb:65:3f:c8:
                    2f:30:3a:f3:22:3c:fd:01:9e:e4:6d:57:28:2c:61:
                    51:d0:bc:28:25:39:82:94:59:a6:ba:f7:a8:26:8f:
                    63:75:ce:c0:64:7d:5e:38:77:d7:43:8c:f0:7b:db:
                    1b:de:c3:b6:d6:bb:f1:55:52:d2:a4:c6:8e:bd:89:
                    9e:7c:fb:4f:6a:b7:c8:34:32:30:1f:b4:cb:75:b7:
                    04:fa:96:e8:78:92:4f:a7:47:79:bf:c0:f5:6c:84:
                    3a:1d:5a:9e:89:66:16:5c:c1:d6:c2:ce:d9:0b:c3:
                    0a:25:d5:df:24:a1:23:0c:34:af:f9:60:55:83:b8:
                    ca:84:d4:dc:a8:8c:2a:a8:97:04:22:5b:cd:00:ef:
                    ae:5f:c8:30:b5:16:ed:f4:40:1b:c3:b7:58:66:1c:
                    ec:17:8c:1d:4d:a0:da:98:f7:27:bf:f5:82:07:86:
                    95:e9:c4:58:3b:1e:03:b8:0d:a1:fc:fa:d0:95:f3:
                    65:03:8c:3b:ee:d1:1b:6c:49:4e:9e:02:f1:31:4d:
                    49:ba:0e:39:1c:d6:eb:0d:cc:7b:c8:db:47:07:6c:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:33:07:A6:B8:3E:BF:A2:5C:6D:95:B9:7C:77:08:DB:12:19:58:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/1ca458dc-00bb-3356-93d2-ad3d163a6f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9e:fd:53:be:bf:ec:4b:32:35:3d:3b:2c:ff:87:80:70:9d:
         5a:8a:31:2d:c9:a5:a4:0c:f9:a4:01:b3:6c:bd:9f:e0:57:e2:
         6d:4b:ee:cc:d7:2e:1c:c6:6b:99:a9:7a:2b:ad:27:9d:5b:6d:
         de:70:6e:ca:e7:77:13:b0:83:6d:ca:da:14:3f:fb:6b:f7:ac:
         d3:bd:be:80:76:d5:ae:67:49:6f:8f:03:95:da:dd:6e:63:de:
         a6:2e:12:39:8a:68:07:4c:2e:5e:d9:12:d9:95:e9:2d:ae:71:
         ef:e1:cb:5b:1d:f3:ea:48:bb:f0:07:9f:3a:9f:55:34:ad:cc:
         0f:c9:e5:40:7a:80:39:f6:3a:af:f2:31:8b:7f:77:4e:e2:02:
         73:b5:51:fe:76:93:57:8a:fa:94:31:60:17:43:6a:e8:63:29:
         d9:2c:a1:ea:8e:5a:92:c2:1f:cf:c1:7f:f9:18:54:c5:4a:ae:
         c4:91:f6:c1:4e:e0:e0:fe:28:ff:81:4d:1a:27:5d:ed:4c:fd:
         80:84:51:c0:81:8c:67:1c:66:b1:91:a6:31:01:61:f0:92:e0:
         c3:a9:52:88:f9:0b:e0:6c:cd:c9:69:c2:7a:c0:2a:9c:fe:85:
         f0:92:fe:3d:af:94:38:f1:cf:7c:1c:9e:5e:3f:00:d2:94:25:
         44:99:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:02:25 2025 by rpki-client