Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/0077d0e6-3054-34f9-b282-d9e73da3017f.roa
File:                     0077d0e6-3054-34f9-b282-d9e73da3017f.roa (raw, json)
Hash identifier:          D0M2Osnpf57hjNOnu3Qj/0XmjCmKt7NWkvXtal63kMk=
Subject key identifier:   8C:53:EB:BB:E8:A8:F7:2B:F3:58:E1:49:FD:6C:D3:D8:10:DF:F7:47
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584B758C9AC86C0E47F895834780
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/0077d0e6-3054-34f9-b282-d9e73da3017f.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     36549
IP address blocks:        204.180.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:9a:c8:6c:0e:47:f8:95:83:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=74800b92-180b-4da7-92b5-c4387a0c25dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:68:ed:d9:f4:e1:14:38:ff:06:73:6f:9d:
                    b4:12:14:4f:c8:ce:d7:4e:8a:b1:3a:bb:16:3b:44:
                    49:0c:4c:8a:a6:a3:ab:7a:aa:57:2e:17:6f:eb:45:
                    40:51:16:68:34:16:21:74:3e:76:45:5a:1d:09:25:
                    31:0e:c0:a6:5f:85:0c:64:ef:e6:c3:81:56:13:dd:
                    75:d6:68:77:de:c6:92:1c:ca:bf:81:8a:1e:8e:50:
                    24:e6:32:41:9e:67:35:04:fd:51:fd:26:8f:90:66:
                    88:92:d0:25:bc:b3:36:81:b8:46:5f:da:b4:f1:66:
                    06:2e:90:88:8d:02:82:30:06:fc:ef:9e:95:86:4d:
                    b7:4a:ee:4a:1c:2d:cb:38:ff:a6:59:e3:71:20:c3:
                    82:d9:e2:ef:44:50:42:42:a2:28:5c:5b:25:b6:4a:
                    5d:25:7d:06:65:0b:f6:a8:b9:79:a3:81:0c:c7:c0:
                    0e:d1:c0:4a:14:c5:62:02:10:cf:a2:be:bd:73:ec:
                    55:fa:a0:bf:22:ee:14:35:d7:d3:2a:a4:5a:c7:1b:
                    d0:32:29:dc:7f:a7:17:dc:5c:ab:8f:6d:e3:d2:06:
                    43:93:29:2c:69:e4:0c:eb:6f:60:7a:a7:23:07:3f:
                    fd:06:3a:5a:53:03:96:3d:28:d2:cc:57:86:ba:9e:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:53:EB:BB:E8:A8:F7:2B:F3:58:E1:49:FD:6C:D3:D8:10:DF:F7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/0077d0e6-3054-34f9-b282-d9e73da3017f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.180.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4d:27:96:16:5a:55:06:ff:3b:b7:a3:aa:0b:bc:11:d4:9a:
         a3:5f:ab:7b:3c:4d:4e:d0:a8:4c:96:09:f5:3c:b5:dd:2a:03:
         cc:32:fd:82:37:35:1a:d6:de:96:89:ed:c8:a6:22:c1:c9:9c:
         f6:5d:a5:ea:c1:78:5d:c0:15:ed:d9:3d:f4:ba:41:fb:00:12:
         0f:cc:b6:91:24:fa:87:7c:a9:50:00:30:31:03:44:10:54:cd:
         42:4d:30:26:b4:31:ad:1c:55:02:4a:9a:8c:33:e4:1b:78:2f:
         54:b3:7e:cb:13:97:97:0f:b2:b2:e8:c9:ea:6e:66:4b:b9:58:
         4a:39:ab:19:b9:4f:ca:39:2b:40:6b:04:b8:5d:83:1a:b4:9d:
         b3:33:63:f3:a6:4e:0f:4e:d2:dd:c0:7d:2c:9c:6f:74:34:1c:
         f4:ac:b1:72:5e:48:6e:85:1b:b1:94:de:1c:5c:57:f3:51:a0:
         61:eb:e3:8d:fb:42:c8:73:86:1e:dd:53:6d:11:bc:f4:fc:7b:
         90:ed:bc:05:f2:48:21:b3:b0:ba:fd:b0:09:7a:60:7e:c1:56:
         36:37:c1:e1:7c:1a:d3:42:b2:f9:59:d8:1b:75:fe:b4:39:ab:
         a0:c9:21:57:bc:be:5f:11:c6:66:3c:29:34:6f:5c:00:0b:03:
         e4:ae:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:03:38 2025 by rpki-client