Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b075bba7-0ab0-35fc-b89e-34e2dd320d96.roa
File:                     b075bba7-0ab0-35fc-b89e-34e2dd320d96.roa (raw, json)
Hash identifier:          kd4nhVw5dqmniRD+qxxlwwLOWCNq3iBgjCIYUQrWtdY=
Subject key identifier:   9B:BB:35:FE:65:2A:4E:54:7B:E0:FA:E2:D1:3B:D4:04:D7:E2:CC:5E
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584B0746C120ABF4C542F723A800
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b075bba7-0ab0-35fc-b89e-34e2dd320d96.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     11248
IP address blocks:        204.8.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c1:20:ab:f4:c5:42:f7:23:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=ad7dc4e2-7c14-41a8-b668-e6517579c1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:eb:5b:69:43:c2:d2:39:85:d9:23:fd:01:34:
                    a0:fc:61:59:64:66:ac:b5:83:99:9c:f7:c0:3c:f5:
                    5d:d1:32:7e:cd:16:07:b9:3f:dc:86:97:97:41:c7:
                    67:89:b5:b7:78:8f:a8:e8:21:c7:0c:88:a3:4f:aa:
                    78:34:cf:e9:1a:96:1e:92:ba:01:18:24:54:67:92:
                    f8:c1:fd:d1:46:62:2b:c2:84:fb:3e:9d:52:37:75:
                    8c:1e:a8:c9:87:7f:13:e4:a4:13:b2:40:b8:bb:30:
                    ec:2e:ec:2e:33:30:a0:63:ec:09:32:fa:87:45:06:
                    fa:2e:5a:7c:d0:7f:33:b3:81:61:4f:fa:4a:14:94:
                    27:c7:9b:93:41:c5:5b:31:b9:61:25:de:45:0f:85:
                    a0:e6:60:a3:86:10:59:3f:31:cf:ae:41:fc:56:bd:
                    98:52:00:33:ff:81:f1:62:7b:63:6a:f4:54:d5:19:
                    a9:a0:9d:77:62:60:98:74:d4:05:aa:d6:73:63:db:
                    c5:c2:c9:d8:9f:81:7d:d6:6e:c4:5b:a5:f7:2b:9d:
                    a1:f3:1d:51:03:30:9b:e4:50:95:1e:34:9e:45:9c:
                    29:fe:ce:5a:df:81:db:f8:21:a7:26:3a:4c:db:93:
                    cc:d1:4c:75:84:30:9f:01:9b:2a:3c:cd:9f:86:75:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BB:35:FE:65:2A:4E:54:7B:E0:FA:E2:D1:3B:D4:04:D7:E2:CC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b075bba7-0ab0-35fc-b89e-34e2dd320d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:dc:93:8d:c9:fc:85:cc:8e:96:ee:c7:df:7d:4b:7c:f0:36:
         28:a4:d2:bf:b4:12:a3:58:c6:5f:0a:ed:d6:8b:b4:e9:d2:8b:
         aa:db:09:66:2e:92:f2:85:0d:c8:28:d8:a4:74:97:1e:8f:71:
         10:09:72:de:2b:80:0e:a3:cd:29:61:cd:1e:ca:20:27:69:a6:
         6e:16:a5:49:64:8c:72:41:d1:b9:55:cd:67:fa:74:f0:d3:97:
         88:26:18:8a:b5:96:c8:6a:2e:05:ac:ba:e2:da:98:59:b0:7b:
         cb:f7:eb:1b:f2:5f:18:66:15:85:fa:49:63:6b:be:f3:90:ad:
         07:ce:4b:3f:66:35:52:fe:8f:a5:e7:4e:63:6c:1c:b1:80:b5:
         65:d2:69:23:fa:00:66:6c:e5:5d:9b:f2:41:5c:be:f0:d4:09:
         65:15:75:c6:76:0c:14:3c:08:fb:32:01:65:a2:26:16:b5:e2:
         30:85:5f:0f:25:fb:80:b6:b3:18:b6:48:62:d0:f2:f8:d9:7b:
         2a:a3:ec:24:63:3b:f8:4f:7a:33:77:c4:61:de:e8:6d:81:1d:
         4e:03:d1:50:86:8c:c4:f4:5c:24:79:fb:7e:7f:7c:84:ef:c9:
         a7:c4:b4:77:6d:b3:7c:a0:5f:73:e1:0e:1c:1b:d8:70:50:e5:
         74:57:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:48 2025 by rpki-client