Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa
File:                     e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa (raw, json)
Hash identifier:          7wEwtEzbKyG+7/syKCd3PdHOcZpnfrazyRYHdenFcAI=
Subject key identifier:   FB:9C:3C:FB:EF:BA:61:7B:7B:3A:AC:36:EE:D7:C1:0B:C9:AA:0E:03
Certificate issuer:       /CN=61ba8425-192b-4617-96ff-4227c427dd41
Certificate serial:       010D0C9F4328584B3FBA24E3149BD1EA0FCFFE40
Authority key identifier: E4:8E:36:DA:AD:8A:FD:33:5E:75:A7:4E:68:DF:02:C9:18:E7:78:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa
Signing time:             Fri 19 Sep 2025 18:18:41 +0000
ROA not before:           Fri 19 Sep 2025 18:18:41 +0000
ROA not after:            Thu 18 Dec 2025 19:18:41 +0000
asID:                     401909
IP address blocks:        74.207.192.0/21 maxlen: 24
                          216.183.64.0/21 maxlen: 24
                          2604:1c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:ba:24:e3:14:9b:d1:ea:0f:cf:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ba8425-192b-4617-96ff-4227c427dd41
        Validity
            Not Before: Sep 19 18:18:41 2025 GMT
            Not After : Dec 18 19:18:41 2025 GMT
        Subject: CN=fa92e9a8-9f29-470e-9257-72e6c7631586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:5d:2a:c8:cf:35:38:d6:d2:58:ba:92:a1:
                    31:0e:0c:5b:53:5c:f1:e0:c4:f5:e0:cd:40:6c:7a:
                    74:71:dc:b9:4e:60:7b:f6:52:ff:a5:82:46:a0:3a:
                    36:61:86:ca:6f:f2:cd:48:56:ff:0f:50:56:40:cc:
                    3e:f2:40:25:51:66:c9:03:5f:ad:3d:e0:6f:36:5f:
                    74:9e:30:d1:7e:1b:48:f3:44:14:06:43:d5:74:30:
                    85:f6:ad:05:84:29:fb:1b:4c:7f:7c:03:c6:f8:84:
                    29:7c:14:88:4a:6d:91:81:14:c9:44:fd:58:be:a0:
                    8c:24:a4:61:b5:1a:82:d8:07:c1:f8:c8:61:06:54:
                    6c:df:b5:1f:7a:4c:86:c5:55:fc:9a:35:83:5d:b0:
                    1c:08:84:41:39:f1:bf:34:86:10:74:9f:53:2c:01:
                    31:02:79:c0:e7:73:1c:ca:24:d4:1f:93:5c:fb:af:
                    0a:11:51:62:e7:d8:ab:84:b5:81:e2:78:be:eb:c9:
                    5b:2e:87:cb:ad:2c:5d:06:d1:37:f5:59:28:b7:52:
                    74:8b:46:1f:3f:3a:ee:a2:66:63:ec:a1:36:24:1c:
                    ec:6d:ce:e4:1d:9f:28:f7:14:1f:fe:b0:21:1e:10:
                    31:22:48:c9:01:bc:7f:5a:0b:a3:b9:4c:10:fd:6e:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9C:3C:FB:EF:BA:61:7B:7B:3A:AC:36:EE:D7:C1:0B:C9:AA:0E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.crl

            X509v3 Authority Key Identifier:
                keyid:E4:8E:36:DA:AD:8A:FD:33:5E:75:A7:4E:68:DF:02:C9:18:E7:78:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.207.192.0/21
                  216.183.64.0/21
                IPv6:
                  2604:1c20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2a:e7:e9:38:44:87:42:7c:fd:ea:0d:ff:43:51:f3:54:c6:
         a9:83:8e:38:9c:d7:4f:b4:a5:d0:79:fa:13:c2:e1:f3:e7:25:
         d6:25:f7:5e:70:4a:29:50:fd:be:f1:9c:9f:df:6a:b5:8f:06:
         0f:f0:a3:6a:77:e3:c4:08:33:f3:0e:8b:8f:da:86:5e:a5:9a:
         03:70:15:cf:36:52:cb:48:25:19:92:ec:c1:ab:ec:ed:2d:f6:
         a2:0b:68:c3:fd:b2:d4:f8:2e:d6:36:74:87:22:95:29:0d:0b:
         2f:a8:0e:44:d8:30:8e:c8:99:e2:6f:c6:3b:0e:40:29:10:f4:
         d0:a1:aa:bd:75:de:91:cc:e6:3c:11:1e:65:c2:a2:c9:cd:79:
         14:bb:dc:d4:56:44:93:5e:31:03:43:bb:44:14:31:46:7e:39:
         6a:bb:e9:fc:19:6f:ca:5c:48:5c:45:df:06:2c:0b:43:12:56:
         e2:70:51:af:c2:b3:e0:d8:cc:7d:9d:da:56:09:a5:83:23:b4:
         89:5c:28:50:f7:95:23:c7:6a:04:75:59:7e:38:91:74:06:43:
         d7:86:a4:6d:33:ff:21:64:75:b3:3f:bb:95:a1:51:bd:c0:bf:
         a4:1b:22:1a:97:1e:c0:8a:50:c1:05:b0:66:79:c2:d6:54:63:
         97:de:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:04:22 2025 by rpki-client