Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ea4b1d17-c3ad-3bd4-9481-c84058c46769.roa
File:                     ea4b1d17-c3ad-3bd4-9481-c84058c46769.roa (raw, json)
Hash identifier:          b3F8XvBsDv7uxQudyET5fuhzofRCIEJKArpJFou8gsg=
Subject key identifier:   68:B0:24:AA:51:57:70:4C:BF:97:8A:F5:CA:FA:0B:7E:BA:5B:86:3F
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584B84E77804E275EFFA826ED2F8
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ea4b1d17-c3ad-3bd4-9481-c84058c46769.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        206.225.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:78:04:e2:75:ef:fa:82:6e:d2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=a6f0bbe4-7a42-45fb-8738-4dfe46a6c921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:75:f2:43:d2:b6:6d:95:3e:9f:0d:72:a4:
                    f1:25:4f:ad:c3:6c:9d:5e:e1:94:a1:e5:82:a8:71:
                    46:b8:2c:87:29:ed:c0:cd:fa:79:3f:44:76:27:1d:
                    02:91:1d:4e:26:7c:d3:66:7c:ec:02:b1:23:b1:6f:
                    99:d1:11:2f:b3:14:a0:75:e3:ea:f5:42:d9:f8:01:
                    05:07:7e:37:cf:45:a8:c5:26:c3:07:ce:4c:c2:0b:
                    11:cf:c9:05:44:69:88:46:97:bb:f2:5c:af:48:da:
                    9b:38:62:53:31:b8:b8:56:c2:e9:f8:56:70:25:79:
                    6c:b6:cf:1a:fe:ee:2f:e4:67:93:b7:05:a1:34:2f:
                    a6:3a:c8:85:c9:b7:99:a1:5e:66:de:2c:d6:b3:d4:
                    89:ed:9c:3f:98:eb:30:82:90:86:1d:c7:77:b6:e9:
                    ac:51:40:db:9b:cf:0f:9d:6f:19:40:3a:dd:57:94:
                    9e:aa:b2:05:35:e2:d7:f0:63:c8:9a:b1:c3:31:f3:
                    3b:8f:25:a7:cc:49:45:55:4f:6e:ec:0f:40:ea:33:
                    7f:1b:ac:f6:f7:7a:f6:3b:46:52:ac:23:3c:4f:ad:
                    4e:2b:76:c2:21:c4:e3:f7:e4:de:09:17:d3:69:7c:
                    6c:58:50:59:55:90:df:db:63:0a:c1:da:51:d9:6e:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B0:24:AA:51:57:70:4C:BF:97:8A:F5:CA:FA:0B:7E:BA:5B:86:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ea4b1d17-c3ad-3bd4-9481-c84058c46769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:8b:64:10:f1:87:67:10:46:9d:8d:ea:43:e4:a0:a3:18:
         8f:6c:fd:82:0c:ed:e0:3b:ce:99:62:35:f3:63:89:8b:5a:d0:
         eb:16:03:4f:98:b2:80:c7:1a:46:ca:0f:2f:2f:2b:2e:d2:29:
         81:be:93:7a:61:7e:e9:1a:0d:7f:7c:b6:27:a2:aa:08:e8:75:
         27:93:60:8b:ce:59:2d:f1:98:e6:bc:86:64:79:d8:3a:b6:83:
         85:95:2d:9a:a8:4e:98:6e:41:17:20:6b:04:3d:17:db:ef:cd:
         71:6c:09:42:b5:4a:80:18:ad:75:30:d1:50:d5:00:7c:ab:dc:
         4a:26:26:24:c5:a8:93:08:41:ca:0d:54:c0:1f:0e:10:e9:d9:
         2e:08:c0:2f:a0:d6:cf:bc:d2:72:40:0b:8e:a9:e3:86:00:50:
         03:b7:19:bf:73:1d:5c:df:6a:77:d6:94:14:5a:30:03:78:14:
         9d:3b:39:80:1a:de:03:6d:d8:0c:78:96:fd:14:0c:07:40:18:
         e7:23:e6:ba:d7:c1:c0:02:bb:03:06:b0:58:21:9e:af:dd:9b:
         4a:59:96:42:b3:79:ae:6a:09:24:2a:1d:5d:29:a5:9e:c5:41:
         fd:3e:ca:05:34:75:6b:0a:c1:9b:59:c8:5d:4d:50:87:e4:75:
         5d:dd:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 02:42:10 2025 by rpki-client