Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/dccd8aec-fc34-3574-9ee9-85d8bdb2a7b7.roa
File:                     dccd8aec-fc34-3574-9ee9-85d8bdb2a7b7.roa (raw, json)
Hash identifier:          jpXypWZi+mq2AxSUooJaYlzii2RNrse5oOIPw7Vx2UM=
Subject key identifier:   8E:90:91:22:FE:2A:1A:7B:7C:9A:92:CC:78:4B:30:67:AD:15:B7:F5
Certificate issuer:       /CN=a3073e85-2b7a-45f5-809d-4c36116cd85c
Certificate serial:       010D0C9F4328584B3126F385CB95F41BF4BC5000
Authority key identifier: 16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/dccd8aec-fc34-3574-9ee9-85d8bdb2a7b7.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     7922
IP address blocks:        206.225.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f3:85:cb:95:f4:1b:f4:bc:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3073e85-2b7a-45f5-809d-4c36116cd85c
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=d78540b1-2866-49e6-9383-67bb91370b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0e:11:5b:22:75:90:45:63:c4:eb:4f:06:7b:
                    82:75:0f:eb:fc:ca:65:ed:4a:12:c3:dc:cd:bd:4e:
                    bc:f4:0b:e4:2f:c9:aa:c2:22:ed:07:0d:db:04:51:
                    9a:65:bb:2f:c6:2a:c1:36:ca:68:a9:10:8a:7a:fe:
                    dd:53:f3:92:fa:05:3d:ac:ca:10:10:42:fa:1b:d9:
                    a9:4c:d5:ef:b7:e4:56:be:57:a0:94:f9:32:ef:18:
                    55:70:41:5c:c1:38:bb:59:f4:5f:3b:20:ab:74:dc:
                    67:d8:8c:2e:6d:50:ac:dd:b9:ed:74:bc:bd:77:86:
                    ed:3e:a7:9b:bb:71:9f:bc:08:bc:f6:b0:8c:b4:c2:
                    e9:f7:51:ae:19:f0:6c:c3:be:20:b0:19:a1:aa:08:
                    81:b4:36:04:e8:6d:92:67:98:ea:1b:70:37:1f:60:
                    e3:13:21:83:66:be:13:c2:28:19:66:a3:f6:79:52:
                    43:6b:67:56:0d:04:2d:e4:b8:78:3a:c0:e8:f1:98:
                    97:d4:01:46:1c:16:5b:6a:76:00:32:9e:f7:be:d7:
                    5f:9f:92:d4:a7:be:5d:f6:32:b7:0e:a3:75:54:46:
                    82:12:46:42:3b:86:5c:ea:93:ea:b5:76:c6:1b:04:
                    a2:0d:01:0d:b2:80:46:cd:8e:58:58:a0:50:7d:fb:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:90:91:22:FE:2A:1A:7B:7C:9A:92:CC:78:4B:30:67:AD:15:B7:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/dccd8aec-fc34-3574-9ee9-85d8bdb2a7b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl

            X509v3 Authority Key Identifier:
                keyid:16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ef:61:69:6f:9e:d8:d6:ee:bf:94:cf:bb:aa:eb:31:ce:40:
         49:5c:51:11:f7:47:35:45:a1:83:b9:7d:0a:62:b5:ca:b9:5d:
         84:03:48:38:50:99:a3:0a:00:03:5e:18:aa:7c:45:fa:aa:61:
         b4:81:69:ea:32:0a:e4:b2:28:c9:b9:ca:74:f3:a5:55:d7:60:
         23:87:d8:b3:cd:29:b7:6f:9b:b1:d7:6f:a3:c7:83:06:55:60:
         91:00:e9:2b:bb:82:0f:ce:91:75:7a:45:b8:81:73:1d:0a:58:
         fd:f6:1e:c3:86:c0:86:0b:5e:0f:df:23:06:f7:4d:bb:f1:66:
         8f:10:f2:0d:0f:87:da:d7:bb:e5:92:c6:e1:a7:d7:62:75:b7:
         75:13:9d:1c:55:84:53:37:83:2d:3c:c4:f2:bd:80:67:c4:2e:
         40:ff:2e:18:54:3c:ad:c8:57:d8:f6:1e:c2:76:f9:0d:cf:69:
         4c:90:b3:53:29:7f:8b:13:6d:25:a2:b1:c8:8d:71:16:e2:c4:
         89:8b:c4:f9:d5:42:ee:05:9f:be:48:df:dd:8d:de:ad:56:06:
         ba:6a:f9:8b:ec:70:e8:9b:f1:20:d2:69:7e:95:f3:b3:47:92:
         57:80:fd:45:45:87:df:61:5b:da:c5:3c:8a:4e:a6:96:d7:87:
         66:e4:35:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:49 2025 by rpki-client