Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/913ccad0-9f81-3143-b72c-4473dba1b1d3.roa
File:                     913ccad0-9f81-3143-b72c-4473dba1b1d3.roa (raw, json)
Hash identifier:          RiKaapFgAPm1naoXjLzxsnJnQn2uunbuxxSzwWEWYLQ=
Subject key identifier:   FF:AD:DB:5B:C3:3A:B9:06:57:4B:A6:2E:F9:2F:99:EE:4C:8B:4F:DA
Certificate issuer:       /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Certificate serial:       010D0C9F4328584B4D11DA64002DEA4D24FDDA00
Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/913ccad0-9f81-3143-b72c-4473dba1b1d3.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     398446
IP address blocks:        72.251.128.0/19 maxlen: 24
                          158.62.224.0/19 maxlen: 24
                          209.25.224.0/21 maxlen: 24
                          2605:d2c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:da:64:00:2d:ea:4d:24:fd:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=0a047681-7d42-4c41-bac0-32b1702e6937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3a:f2:b4:02:35:bd:b5:c5:14:47:87:e6:fe:
                    c1:ca:13:ac:1a:8a:af:5e:24:f1:52:3f:c7:5b:f9:
                    9a:03:4f:7f:9b:5c:8f:6c:42:a6:76:9f:f3:dc:18:
                    0b:5f:5b:1a:86:be:a2:99:b0:be:d7:85:f4:7a:cd:
                    5d:1a:21:4f:d0:40:8c:c9:c1:23:8f:51:2f:28:71:
                    8f:d9:6d:f1:b8:c8:42:dc:cf:b9:6e:50:30:26:59:
                    33:7f:f8:a5:d5:49:18:c1:71:f0:2f:3f:8a:ec:0a:
                    7c:ff:86:d2:6e:f1:f6:43:61:80:e0:c8:8d:03:f4:
                    ec:33:4c:16:49:0f:b0:34:eb:94:ad:f3:32:f0:33:
                    b3:12:f9:35:cf:e9:dd:7e:a2:a0:6c:9f:cf:e4:19:
                    41:c0:f4:5a:1c:42:78:86:f3:02:07:80:93:82:86:
                    e0:5f:b4:f4:e1:79:e9:8c:91:21:20:0f:19:e4:70:
                    66:35:7b:4f:ce:4c:70:a9:08:40:c6:15:5f:77:63:
                    15:af:3f:b1:69:69:54:50:ee:f2:e4:40:04:91:13:
                    6f:ef:b8:f7:2b:73:b1:4d:8a:cc:cf:db:a4:9e:e2:
                    11:97:f3:af:8a:26:97:a9:cc:20:72:63:7d:45:1b:
                    ee:fa:f6:25:07:e3:74:4a:e6:d8:01:2d:4e:79:4d:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AD:DB:5B:C3:3A:B9:06:57:4B:A6:2E:F9:2F:99:EE:4C:8B:4F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/913ccad0-9f81-3143-b72c-4473dba1b1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl

            X509v3 Authority Key Identifier:
                keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.251.128.0/19
                  158.62.224.0/19
                  209.25.224.0/21
                IPv6:
                  2605:d2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:ce:46:5a:96:0e:4f:97:17:ca:bb:10:3f:56:0b:93:70:
         b7:75:a1:83:73:23:e2:98:de:37:80:ed:a3:40:f6:5f:16:92:
         30:b1:26:18:43:61:0f:33:73:f8:3e:b0:66:ac:49:d4:5c:14:
         16:fe:06:d9:6a:d8:69:a5:e7:29:1e:fe:8b:78:85:ba:c6:bd:
         32:51:6d:9b:a3:46:79:24:99:50:c8:80:54:64:10:1c:da:3f:
         8a:cb:88:8a:23:21:b6:b8:3a:ac:0c:7b:5e:58:f2:ee:64:8f:
         06:c6:21:25:40:57:cc:33:c0:06:cd:41:40:2b:f4:79:7f:99:
         3e:91:51:2d:fa:10:6c:f8:b9:5d:5f:39:c8:8f:63:b3:d3:8c:
         8e:0a:6b:26:bd:c1:b7:2a:26:00:bc:29:93:3f:0b:21:9f:14:
         de:d2:10:d1:f7:2b:41:e3:48:96:f7:9b:4e:1c:de:ec:7e:31:
         44:a9:9c:be:cb:8d:a3:30:be:37:b1:a4:a0:13:28:0d:0b:e1:
         f5:86:1d:bd:ac:0e:a8:37:6b:57:f9:8f:d6:42:ab:2d:1e:34:
         61:22:85:42:42:39:61:22:9d:38:40:39:6b:a3:2f:34:ee:e9:
         32:55:d2:d0:bf:50:9b:1a:33:d3:b6:10:7f:bc:1f:95:d2:67:
         9d:af:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:15 2025 by rpki-client