Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/258eb668-6709-3450-8617-5bfc5b30ca1c.roa
File:                     258eb668-6709-3450-8617-5bfc5b30ca1c.roa (raw, json)
Hash identifier:          6eN9XKpYiapeTFFfv9/rpcRWXhV7zh8iBIm7nqeR9KM=
Subject key identifier:   9D:43:EE:05:0D:BA:F2:08:DB:AF:A4:5B:E4:AD:79:F4:C9:41:13:E6
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584B2A2C552304527B5325C09880
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/258eb668-6709-3450-8617-5bfc5b30ca1c.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     395945
IP address blocks:        35.62.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:55:23:04:52:7b:53:25:c0:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=fdd711f2-4591-476a-a969-8ab3067fbb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:31:70:ea:a3:c3:9b:7e:80:9d:86:e1:a3:
                    65:2f:03:42:3e:37:61:8d:dc:9e:fb:e8:3b:7c:27:
                    d9:e6:e8:c1:2c:39:58:fd:c9:5d:c2:3f:96:96:d7:
                    e8:5e:81:eb:c9:84:f9:c7:dc:b5:29:71:94:57:8f:
                    ac:ef:84:9f:65:a3:a7:82:dc:bf:88:49:52:81:c7:
                    92:fa:4f:9e:a9:0a:86:d4:8b:b3:7a:d4:ac:fc:71:
                    87:14:cd:e5:a2:f2:62:eb:2f:38:cc:f0:4c:b3:7d:
                    81:cb:fe:c5:3f:88:01:75:b0:3c:85:2b:41:8f:89:
                    47:2a:b9:80:4e:17:8f:41:43:bf:92:36:a7:ef:b7:
                    1a:7a:1d:ea:7b:0c:bf:b0:6b:91:c7:4d:b6:2b:e5:
                    ac:81:24:cf:4e:ec:05:f1:11:2e:33:30:16:68:2b:
                    14:16:8d:69:e9:cd:c0:6a:98:18:42:81:04:9f:09:
                    ce:9f:c0:d2:c3:ff:80:1e:9f:76:2f:33:3f:c0:0b:
                    70:75:45:6f:60:cb:3f:bb:4c:9b:bd:91:2e:da:8b:
                    e9:c0:52:cc:6e:7b:b0:e5:80:5e:3c:b3:bd:5b:b0:
                    69:bd:f4:bf:39:74:9d:25:25:27:0b:e7:cd:57:a1:
                    75:5c:8d:ca:74:93:78:f5:cf:b4:63:22:8d:99:ba:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:43:EE:05:0D:BA:F2:08:DB:AF:A4:5B:E4:AD:79:F4:C9:41:13:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/258eb668-6709-3450-8617-5bfc5b30ca1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1b:31:90:b1:68:4d:b8:42:be:11:12:e2:72:ca:63:ea:73:
         05:cd:e9:44:a8:cb:e8:be:05:b9:cb:3e:ab:62:a6:09:ff:5f:
         3f:6f:d9:84:5e:df:e3:96:25:56:94:34:00:61:78:7c:2f:7c:
         ec:d3:eb:55:36:1b:8a:4b:02:2c:da:af:91:ca:4f:01:4c:29:
         7a:21:c0:37:45:48:4a:40:a5:11:4f:2b:79:a5:95:a7:43:83:
         72:15:8d:eb:41:33:d6:f0:71:b2:c4:14:35:63:88:89:cd:41:
         e1:f7:a9:81:4a:47:a1:c6:41:83:86:9e:8d:a7:55:e6:33:15:
         cb:94:73:49:f2:79:78:bb:9f:ea:da:88:18:79:e5:6e:82:59:
         30:20:f7:fa:c1:d5:49:dd:c6:19:09:f3:a7:7a:95:6d:60:13:
         47:37:a3:69:65:4b:0d:2f:f4:0d:d0:7f:a1:b0:55:bf:fa:e4:
         de:77:ec:c2:dd:d8:9f:1c:0d:b9:c8:e5:2c:54:9e:ad:1d:28:
         e7:3c:06:e2:00:a4:db:d0:b4:f4:ad:db:f8:ef:c0:7e:f0:93:
         c4:27:53:05:14:39:e8:df:f5:e7:5a:b7:e5:a0:1c:a6:b2:cc:
         d5:8b:5a:5e:8d:66:eb:ce:04:81:f1:2e:52:25:18:d0:39:fb:
         59:a5:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:15:39 2025 by rpki-client