Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa
File:                     a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa (raw, json)
Hash identifier:          Iw6F/GJEwSEVIAQziHoSReYZVyXOLzT0XiBBimminWA=
Subject key identifier:   F0:18:04:83:E6:42:AA:3F:5F:18:FF:83:87:2F:60:9F:5B:C1:89:6E
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584B434C6A920DB62FDDC320A200
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     33548
IP address blocks:        206.162.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:6a:92:0d:b6:2f:dd:c3:20:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=f29884bf-4628-473c-81aa-b1269d2e8be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:b1:59:2c:33:12:04:d5:ce:ab:98:52:ed:
                    97:0e:bd:48:f1:07:6b:57:3a:da:c7:8c:47:bc:40:
                    1d:7a:35:e7:df:4f:13:a8:de:7f:7b:ab:f2:e9:fd:
                    33:a5:61:66:71:d7:ef:62:6d:36:d9:ac:da:50:d2:
                    39:7f:f5:cd:15:5d:8d:26:92:1a:bb:d0:71:52:b4:
                    cb:35:ec:2d:ff:aa:c1:d0:14:3a:be:36:d7:63:cd:
                    5a:c1:93:8b:0d:60:7b:a6:36:ba:36:03:20:4a:24:
                    31:b6:2c:d1:10:55:c0:84:48:09:e2:7d:d5:b3:f0:
                    08:d8:a4:14:49:d6:01:61:58:4b:f1:6e:36:36:ff:
                    3e:44:96:60:be:cf:06:19:f5:e7:e3:f3:e5:38:16:
                    c0:67:6f:2b:35:ff:ab:7f:dd:b8:22:5d:c9:99:7f:
                    ba:a8:72:a5:c7:84:47:59:78:36:e4:27:dd:d0:8a:
                    e3:bb:45:81:16:7d:b7:da:3a:1a:e0:89:36:d6:7b:
                    08:81:ac:ba:96:c0:5b:08:d1:2b:78:18:72:b0:35:
                    98:ad:40:f8:58:a3:13:7b:33:d2:bd:16:92:3f:1f:
                    fe:a9:13:fe:06:19:d7:99:a7:2e:e7:cb:19:34:7c:
                    49:d3:05:e6:d0:24:15:66:f7:86:0b:da:b5:1a:28:
                    bc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:18:04:83:E6:42:AA:3F:5F:18:FF:83:87:2F:60:9F:5B:C1:89:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:68:2f:2d:db:6f:b4:5e:14:09:41:d0:ef:49:07:2d:df:2a:
         90:f6:43:84:0f:bb:d7:24:71:3b:b1:af:2a:5c:b7:ca:ec:c1:
         70:51:43:20:ca:d0:a6:19:ab:fa:e9:57:55:66:fc:f6:b0:f9:
         f3:14:4d:2a:ba:c2:41:b8:b2:cf:d6:f4:27:07:b5:ad:bc:ac:
         f4:e7:d4:a1:b1:3f:dc:0e:1e:52:43:d6:00:cb:2d:e8:9e:18:
         f3:cf:e4:d5:66:0b:56:9d:d5:c0:81:3f:10:13:95:d4:4c:96:
         da:d7:e3:5c:3d:39:52:cf:78:46:bb:e8:9d:5f:d3:a2:49:36:
         8b:e8:38:30:50:e1:97:13:15:d2:77:39:9d:5e:0c:97:0e:15:
         cc:fa:10:5a:68:e2:4b:13:bd:4a:bd:c5:5d:51:de:86:9b:db:
         56:31:1c:63:0c:78:11:01:c8:3f:98:28:91:a7:a6:ac:dc:5e:
         ce:e8:6d:54:8f:4a:ed:1c:42:b9:8b:ff:47:7a:77:c3:8d:0c:
         d4:b9:6d:be:15:ee:2c:94:98:6e:bf:dc:a8:70:2d:79:aa:42:
         62:f8:e6:3c:cd:9d:09:d3:94:95:43:44:f3:18:a5:c6:fd:fb:
         0f:b0:14:a1:35:3b:99:ba:8c:e9:cf:b8:ae:17:20:13:32:8d:
         75:7f:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:30:28 2025 by rpki-client