Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa
File:                     a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa (raw, json)
Hash identifier:          9ttlAoiUES4aNCQ4lNNjNMIfA93EQC1LI0YekWNrH2w=
Subject key identifier:   BB:F5:2A:D0:FE:CC:AE:7D:7A:50:46:EF:03:D0:AE:22:DC:74:42:1D
Certificate issuer:       /CN=74448f2d-e70e-4042-9da0-e023ba682319
Certificate serial:       010D0C9F4328584B3C51AB3BA70DB83B7B28E780
Authority key identifier: 63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     36111
IP address blocks:        130.250.220.0/22 maxlen: 22
                          130.250.220.0/24 maxlen: 24
                          130.250.221.0/24 maxlen: 24
                          130.250.222.0/24 maxlen: 24
                          130.250.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:ab:3b:a7:0d:b8:3b:7b:28:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74448f2d-e70e-4042-9da0-e023ba682319
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=2afe4a9c-0319-4b6b-a25d-d91513908d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:3c:31:ad:f5:67:be:8c:5e:60:82:37:8d:
                    ef:92:f1:0b:72:69:ab:ac:b2:cd:3d:4f:1f:e4:ba:
                    29:dc:8c:c5:30:d6:7b:1a:d4:8e:e4:e2:86:5d:3a:
                    22:a9:24:60:5d:e8:94:5d:aa:bc:0f:c5:04:47:6d:
                    66:44:26:3f:cd:40:43:96:37:cc:c4:30:15:ca:38:
                    32:bb:5c:36:20:27:a6:99:dd:e7:ac:a9:40:5e:99:
                    05:c3:6b:5f:67:4b:e3:0e:db:b6:97:02:d5:b4:70:
                    dd:da:20:19:f4:d4:5f:75:a3:26:84:e8:7e:be:4f:
                    e3:9c:ae:a5:3b:d7:a6:fa:d8:6b:4b:e2:38:5c:a2:
                    fe:0c:9c:75:c2:c0:32:df:37:ab:0c:f2:4a:39:88:
                    8e:63:c1:ab:0c:7a:68:dd:69:3c:e5:63:4a:ac:d8:
                    44:fb:6d:14:94:27:9b:cd:e2:b6:31:de:f2:3b:ff:
                    cf:03:f0:50:9c:09:e7:bc:e5:05:15:e7:1b:0c:a4:
                    30:05:c8:34:f3:b3:90:30:8c:9b:82:8d:3f:c5:a8:
                    7d:5a:a9:fc:d9:f4:65:4b:b4:ec:22:95:02:b7:49:
                    28:ea:fb:03:b2:c2:3a:a1:81:94:02:58:67:eb:6d:
                    d2:62:2e:17:15:88:4a:cf:17:b0:d7:27:97:e9:4b:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F5:2A:D0:FE:CC:AE:7D:7A:50:46:EF:03:D0:AE:22:DC:74:42:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl

            X509v3 Authority Key Identifier:
                keyid:63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c2:00:df:d8:c6:7f:ee:ff:82:dd:aa:8b:0d:ec:0f:6d:68:
         ea:53:ac:09:9f:8b:60:53:ab:bb:77:d5:be:ec:f4:ea:8d:b3:
         6d:20:5b:46:cc:8e:d5:19:b7:c9:b0:64:f7:44:c5:bf:39:1c:
         d5:e9:24:e1:18:03:07:8d:2b:7e:c1:40:a0:40:71:4d:93:c9:
         87:e5:b6:a6:cb:37:74:16:ec:de:70:67:e3:25:a0:58:c4:eb:
         b6:ba:d5:bc:12:d1:ad:b1:be:52:a0:f1:c3:33:44:19:24:34:
         56:c4:0a:6e:87:bf:b6:95:49:a0:f7:37:19:9f:44:a5:54:58:
         a2:9e:a2:4c:50:1d:d4:f4:f6:d1:ec:48:b8:cb:65:d3:82:95:
         8e:76:a9:6c:69:05:e7:9f:43:53:f8:3a:3d:ab:9e:f3:3d:29:
         35:a9:fc:eb:e9:2c:63:d2:81:7e:7e:9e:e1:f4:6e:81:bf:3b:
         41:46:84:2e:04:ec:53:9b:58:68:c4:1b:1d:37:3e:5f:45:4f:
         14:54:56:9e:e1:d6:09:d0:16:47:58:1c:e6:bd:49:f3:e6:7f:
         82:00:7e:e0:66:da:9b:e9:7d:a8:4b:66:f4:86:45:a9:0a:bc:
         fe:93:5e:2b:bc:78:3e:e3:8a:c1:8f:38:dc:d4:ed:f3:16:d6:
         c4:6d:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:27 2025 by rpki-client