Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f6cd7213-c676-3703-a01d-0a957230f88b.roa
File:                     f6cd7213-c676-3703-a01d-0a957230f88b.roa (raw, json)
Hash identifier:          TO+kcpvRSkydiErwM5lWf8qIl+Wx4tnZilbY0hxBisc=
Subject key identifier:   F0:84:11:33:E8:7C:89:EC:30:93:7A:F9:18:1D:23:45:63:B1:44:B6
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F4328584B6201EE82523BE9E665DE7F00
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f6cd7213-c676-3703-a01d-0a957230f88b.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     394977
IP address blocks:        74.114.8.0/21 maxlen: 24
                          139.138.224.0/19 maxlen: 24
                          184.75.160.0/20 maxlen: 24
                          199.48.104.0/22 maxlen: 24
                          209.204.240.0/20 maxlen: 24
                          2620:102:8000::/44 maxlen: 48
                          2620:132:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ee:82:52:3b:e9:e6:65:de:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=17f9edb1-2648-4d6b-b896-d70bddae0fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:9f:80:99:a8:26:e4:ba:ae:7c:e2:40:d3:
                    4d:36:1c:b5:0f:ad:d2:f6:d2:8c:be:ce:3b:dc:f0:
                    45:c5:a6:c0:0d:d6:82:26:96:c8:96:71:e0:7e:40:
                    13:45:fc:3a:d9:14:9c:fb:ff:c0:b5:1b:b1:37:b5:
                    24:a9:79:c3:25:8d:d2:c5:4d:1d:c6:2d:e0:18:bc:
                    82:35:94:74:5b:98:e6:a7:85:d2:0e:b6:a9:73:32:
                    da:a3:26:61:f4:21:62:7d:d8:f8:67:d9:82:7e:96:
                    31:72:96:6c:55:68:d7:5c:2e:dc:74:36:e2:29:2e:
                    0d:aa:82:6d:b5:a9:19:11:85:01:04:3f:6e:29:24:
                    cf:17:ff:83:6f:42:07:a0:fd:2c:11:ed:1e:00:f3:
                    87:9a:bf:f1:ef:ae:1d:41:3d:e8:03:03:d4:d0:28:
                    9a:5c:15:bf:be:77:7b:94:92:14:44:93:b9:f8:3c:
                    3e:93:3f:a5:7f:13:c1:1f:65:41:df:63:34:33:fd:
                    4a:53:45:8a:bd:cc:4c:14:ee:a8:6d:5d:1f:6b:91:
                    c8:72:c6:57:8f:6e:ab:b4:9b:25:59:a5:1d:dd:ff:
                    85:4d:93:6a:5f:b6:4c:e4:e0:59:5d:dc:8f:08:c7:
                    49:8c:3c:3a:e0:81:20:18:b2:41:76:b4:74:ba:ea:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:84:11:33:E8:7C:89:EC:30:93:7A:F9:18:1D:23:45:63:B1:44:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f6cd7213-c676-3703-a01d-0a957230f88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.8.0/21
                  139.138.224.0/19
                  184.75.160.0/20
                  199.48.104.0/22
                  209.204.240.0/20
                IPv6:
                  2620:102:8000::/44
                  2620:132:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:5a:df:5f:d9:23:6c:40:3f:22:99:4f:de:e9:13:d1:55:
         e5:99:23:25:fd:95:23:b1:e2:e6:e8:54:5f:dc:21:0e:a2:eb:
         7e:7f:0e:72:e8:a3:2d:c5:36:1a:72:ec:3b:8e:10:2b:14:ba:
         65:69:c3:cf:26:dd:d6:5b:ab:72:ae:6d:ec:01:9c:3f:10:e1:
         0e:85:06:0d:b6:ca:d3:54:0a:de:81:89:d5:56:04:3b:8d:fc:
         a7:23:3b:c9:0f:ec:81:26:b8:12:ad:39:2c:21:47:d2:34:28:
         28:8c:25:46:8e:04:5a:92:c7:45:ac:4a:43:50:99:d4:3f:62:
         ef:25:4c:8e:a5:d1:ad:f0:4e:62:00:75:77:a6:05:53:a4:01:
         ca:89:e4:49:91:d8:be:a5:66:2a:4f:e7:ed:b1:45:9a:2d:7e:
         ef:98:85:d4:9b:39:aa:5c:b1:56:87:8e:86:a9:2d:79:a5:f9:
         9a:1e:4f:1e:0b:ac:c9:47:7d:f9:97:07:69:cc:e9:4a:89:46:
         2a:f0:22:11:78:12:d9:70:90:32:59:e3:f3:c0:08:d5:da:da:
         18:aa:e8:0f:f5:ad:cd:c6:9b:d1:25:7f:c8:76:71:4f:49:1c:
         55:6b:57:26:24:52:5a:e0:b8:3a:f5:24:11:5e:ba:64:02:34:
         3b:e0:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:00 2025 by rpki-client