Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/e2cdcff9-00bb-3ba7-975b-c033cda9cd90.roa
File:                     e2cdcff9-00bb-3ba7-975b-c033cda9cd90.roa (raw, json)
Hash identifier:          8RG9Ois+n0WKHA/B8EOpjFMc+j8IciNgvCUsOOemp7Q=
Subject key identifier:   8C:91:7C:AF:79:5D:8B:88:BA:EE:B3:CB:F6:EA:9D:AE:15:6A:74:B1
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584B71CAA6C8F7E8DF8F0C211D80
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/e2cdcff9-00bb-3ba7-975b-c033cda9cd90.roa
Signing time:             Tue 07 Oct 2025 16:42:22 +0000
ROA not before:           Tue 07 Oct 2025 16:42:22 +0000
ROA not after:            Mon 05 Jan 2026 17:42:22 +0000
asID:                     397412
IP address blocks:        139.94.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:ca:a6:c8:f7:e8:df:8f:0c:21:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Oct  7 16:42:22 2025 GMT
            Not After : Jan  5 17:42:22 2026 GMT
        Subject: CN=3a2a3c2d-bcb6-47ba-a314-1db139c98f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:3f:59:64:0d:92:e4:41:cc:9d:0f:24:a5:
                    2d:81:b7:cf:10:b3:38:da:db:6e:f7:f6:a8:3c:c6:
                    ef:c1:c7:d6:98:38:1c:67:60:47:70:4b:76:24:e6:
                    8f:06:8e:4b:0d:b4:2c:09:2f:30:5c:11:72:07:44:
                    d9:5e:63:09:9d:31:f0:83:65:88:b0:3f:a9:d7:78:
                    58:2b:28:dc:9f:38:f1:4d:2e:09:44:e6:fb:5c:4f:
                    f2:a2:84:25:d8:62:ac:b2:ee:62:b1:ba:e3:07:2f:
                    2d:08:98:ac:31:95:ec:f3:25:52:22:fc:0d:6b:bc:
                    36:ee:7a:4f:97:21:ba:9c:b1:c1:e1:45:c6:99:6a:
                    59:be:29:53:27:87:c3:1d:18:fa:1f:41:88:dc:4a:
                    82:53:22:93:b8:9a:6e:4b:e1:b9:b7:ba:48:28:7c:
                    f6:c0:a4:a1:8b:0c:ce:01:5b:eb:87:f9:1b:5a:c9:
                    0d:5f:f1:ed:a7:e8:9a:2a:bd:11:57:89:be:01:5c:
                    d1:ca:22:cb:94:5d:30:c5:5b:48:7e:87:70:cc:8c:
                    5c:59:70:e9:4e:3c:b6:11:e2:b1:4c:f0:f9:b5:cc:
                    ff:b1:28:56:1e:25:3d:c4:31:a9:14:07:d2:06:af:
                    e9:50:32:42:a3:ac:4c:7b:58:a7:a6:5b:14:88:8a:
                    a0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:91:7C:AF:79:5D:8B:88:BA:EE:B3:CB:F6:EA:9D:AE:15:6A:74:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/e2cdcff9-00bb-3ba7-975b-c033cda9cd90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.94.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:07:01:b1:a7:f6:6d:6f:3d:a4:54:93:c7:87:49:ca:4c:06:
         4e:ae:59:8d:e9:67:22:e9:45:79:ae:a0:39:e4:4a:d6:ca:dc:
         82:9c:95:59:43:d9:52:63:bf:1b:ca:70:10:45:89:75:e6:30:
         81:be:47:c8:27:22:3d:5e:d9:ed:20:b2:58:f3:e8:ab:a4:8c:
         b5:14:41:cd:ed:32:b2:89:1a:31:8a:fe:d8:d8:df:cc:69:d5:
         56:90:d6:c3:03:8f:1b:b2:96:1c:fe:6d:78:52:4f:80:bc:69:
         61:a4:cd:0e:b3:e2:b9:b6:17:f9:6c:ff:40:58:7b:b5:39:fa:
         f5:1a:f3:0e:88:f9:ea:d4:e7:d3:b5:29:4f:b6:aa:ea:9e:ff:
         46:eb:d6:fd:8f:c8:93:72:92:b1:30:34:2c:b0:7a:ca:ce:7a:
         96:f2:a3:14:06:86:17:c8:ee:8c:80:1b:cb:07:c5:30:ad:06:
         7d:2b:54:92:06:b1:3b:34:09:a7:ef:9e:0e:fe:42:20:e5:bc:
         a0:51:95:27:b2:77:53:0c:36:e9:a6:d7:94:3c:8b:5c:27:01:
         4a:d5:0c:cc:89:81:91:08:fd:dd:8e:01:2e:d7:ad:89:02:0c:
         5e:81:3d:f0:a4:7d:ba:03:85:df:16:ea:f9:2c:c4:d5:c0:2b:
         84:0f:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:41:00 2025 by rpki-client