Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/637ec565-5a93-39a0-85c1-1851ef668bbb.roa
File:                     637ec565-5a93-39a0-85c1-1851ef668bbb.roa (raw, json)
Hash identifier:          THlpJ7OVJzX7BsiI88f1iwdPkDAb8asbWSKmt7Tz/Lo=
Subject key identifier:   75:BE:3F:4F:22:E4:F1:D8:29:46:70:49:9C:3A:C5:A1:C8:13:12:91
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F4328584B76F25D783FF043EEC92F0480
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/637ec565-5a93-39a0-85c1-1851ef668bbb.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     53535
IP address blocks:        199.180.180.0/22 maxlen: 24
                          2001:500:f0::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:5d:78:3f:f0:43:ee:c9:2f:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=f7d1f564-2c95-4540-8f53-f895f0e0b345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:1c:3c:ba:ac:32:ee:64:cb:26:6a:48:2e:
                    b4:fc:e9:83:89:7c:ea:9d:69:f9:fd:cb:54:c4:16:
                    f0:fc:ef:dc:33:be:64:4b:86:7d:d8:83:e0:9a:91:
                    48:62:e8:03:52:57:14:c0:e2:6e:68:39:80:4d:21:
                    ad:b5:fb:8b:c6:6f:8d:ff:a3:7b:06:d3:b0:dc:1f:
                    10:4c:30:0c:84:54:02:99:be:0a:6c:0e:a4:14:42:
                    79:80:cb:6a:8d:4d:8f:2b:66:78:f0:55:e8:44:4e:
                    31:b2:82:01:18:d0:77:a5:65:cb:f5:8f:64:0b:a2:
                    d8:f3:a5:06:0d:7f:eb:7b:0a:17:94:22:b5:58:05:
                    c7:65:0a:ef:2c:bb:6a:01:f1:01:b1:cb:a8:f8:89:
                    2b:8d:de:33:6b:10:5a:6d:1a:44:f7:fc:4a:31:01:
                    de:f0:c6:73:58:88:ad:0d:04:e8:64:85:c5:a5:8e:
                    29:ad:42:fd:bd:ce:76:bf:e3:36:9c:6c:b3:a7:d0:
                    b2:71:73:c7:08:0d:b6:0f:bf:61:a1:a4:42:39:44:
                    a1:ab:c8:43:0d:49:40:4d:b3:06:67:67:90:10:4f:
                    ab:90:32:9e:bc:97:79:70:16:8b:d3:ea:66:16:76:
                    aa:d4:bf:70:b6:37:16:d8:72:e8:ea:f7:a6:90:90:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BE:3F:4F:22:E4:F1:D8:29:46:70:49:9C:3A:C5:A1:C8:13:12:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/637ec565-5a93-39a0-85c1-1851ef668bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.180.0/22
                IPv6:
                  2001:500:f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:de:56:ae:62:e9:15:06:11:a0:52:c1:50:1e:aa:ac:39:a7:
         d5:51:8b:11:fb:1c:ee:d5:cd:7c:57:d8:3c:53:98:b8:65:93:
         9e:05:34:b2:af:21:c4:a2:d7:72:af:59:06:91:75:ee:f6:cc:
         06:e2:31:51:9d:c6:49:dc:99:a3:b8:8d:aa:b6:e7:af:25:a6:
         f9:96:1f:a3:76:c5:e1:5e:6f:2e:d4:74:6c:df:60:3a:0d:bf:
         7d:a2:8c:c4:d5:99:d0:3b:3f:00:a6:84:51:02:3a:40:87:90:
         27:19:e0:b6:0b:d4:62:ad:3a:3a:df:f8:a8:3e:df:06:6f:82:
         09:c8:85:ea:d6:21:af:f0:5a:85:13:84:75:06:58:ed:a1:04:
         2d:65:99:02:ad:79:06:ec:2f:b5:0e:41:05:e3:a8:02:34:3f:
         85:f5:a7:d2:00:9c:03:58:8e:67:5b:15:7b:28:83:b5:6d:40:
         de:80:ea:11:e3:42:49:7c:99:c0:5f:bb:27:f1:c2:06:f1:fb:
         03:5b:ad:49:92:5c:3f:fa:8d:fc:0c:95:b0:b9:b7:41:4e:ca:
         a0:0f:72:3d:89:5c:34:14:30:dd:82:9b:fc:23:03:da:90:25:
         25:47:b4:f2:19:a4:30:8a:14:93:d4:2b:a5:99:33:5c:4b:2b:
         d9:4c:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:02:18 2025 by rpki-client