Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
File:                     5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa (raw, json)
Hash identifier:          mBHrBKGV39Xf5JJEGl+wJryJH3iDoulrhfnSnK4AW7A=
Subject key identifier:   F6:DB:B7:11:ED:0E:F1:11:FC:F3:05:F9:2E:82:2A:FD:6B:51:05:3E
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584B1806E15F8A28248CB92ED300
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     32133
IP address blocks:        169.197.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e1:5f:8a:28:24:8c:b9:2e:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=5a435234-fa08-410c-a5b1-be00cd3770c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:73:73:c2:e6:fb:1d:a5:94:ba:5d:dc:0b:
                    49:9b:40:01:35:c0:ab:d9:40:49:85:eb:b1:bc:97:
                    be:65:76:cc:f4:25:c6:96:79:84:0c:36:13:2a:73:
                    72:86:9e:18:c7:74:d5:51:0a:3b:ef:63:8a:a7:e0:
                    fd:48:be:c3:ba:41:f4:e9:a1:6e:0e:3d:cb:cc:0a:
                    f4:1b:23:5f:25:a5:a9:99:a0:ce:64:9d:a4:80:7f:
                    f4:dc:a6:94:13:7c:f6:f2:51:ae:fc:ae:1f:e1:fb:
                    40:0e:05:a2:ff:50:5e:3c:75:c2:9b:f9:f6:35:4a:
                    d6:37:03:09:79:38:97:ae:7f:a7:23:78:9b:e8:b1:
                    1d:b7:e5:65:79:f6:90:cb:9d:6f:73:91:97:b8:88:
                    a1:9d:39:91:bd:fd:ba:12:43:f5:2c:7b:fd:9e:f3:
                    ec:64:96:84:30:8a:5e:7b:4d:c7:c4:9c:e0:b0:af:
                    70:a2:81:04:c3:bc:0f:92:f2:30:56:29:5e:3d:07:
                    98:9e:22:b9:07:84:95:57:02:4f:02:fd:06:c3:38:
                    2c:26:40:9c:a0:ff:47:b2:77:e8:59:c1:9d:d3:c7:
                    f9:52:51:ce:63:c6:bd:28:ca:64:e7:48:74:56:da:
                    5c:fb:b3:88:15:72:58:ba:7a:13:f0:3a:28:7a:01:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DB:B7:11:ED:0E:F1:11:FC:F3:05:F9:2E:82:2A:FD:6B:51:05:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/5ef0925a-0654-36aa-8368-bd2e6652f7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:28:92:2b:fe:6f:e3:63:35:25:e0:da:71:2e:b4:4f:e6:87:
         2d:a9:19:af:95:9d:74:ae:02:58:b3:f6:0f:f6:77:70:9d:56:
         33:75:20:9d:53:1c:e3:84:8b:66:0b:56:f7:7e:7e:70:8a:b1:
         10:1f:52:9f:30:e2:7d:02:6b:a5:a2:17:25:6b:a3:41:f4:a4:
         26:d7:e2:60:6d:ba:02:8e:83:0f:6d:df:aa:49:5f:37:30:b0:
         a1:75:00:ec:8e:80:45:42:f7:2b:09:03:e5:f9:25:4c:f3:a4:
         4e:00:22:a3:dd:f2:d7:c5:15:08:9c:10:e7:7a:32:3e:1b:be:
         d4:1b:b1:c6:54:ce:c6:a8:be:b4:84:81:3d:56:f3:5f:c7:7d:
         b8:cf:6f:2f:be:d1:61:01:bf:42:d0:e8:43:10:c0:89:df:99:
         80:b9:02:ad:d5:d4:2a:ca:17:1c:ce:c3:a0:e5:33:bf:3a:17:
         e6:6a:c1:72:b2:af:21:88:d7:7e:3c:79:69:8f:36:d8:84:8f:
         89:3f:eb:ae:04:7b:c2:ed:2a:93:ab:14:3c:d4:b8:36:12:40:
         1a:5b:bd:bd:cb:16:fe:05:be:7e:49:71:fa:9b:9f:38:66:71:
         ef:23:8a:22:05:79:01:bb:f3:88:cd:0c:3c:c2:4b:33:08:0b:
         29:11:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:16 2025 by rpki-client