Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
File:                     1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json)
Hash identifier:          yo2Hhl5xKwV8367v9NmjBD0su/OUAQSsbVZbIZEahfM=
Subject key identifier:   7B:A5:C0:B0:8D:22:3E:76:61:B4:B3:40:81:52:93:23:BF:0B:D4:B7
Certificate issuer:       /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
Certificate serial:       010D0C9F4328584B76F25CBDC167385486832600
Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     36667
IP address blocks:        198.35.120.0/21 maxlen: 24
                          2620:c:8000::/48 maxlen: 48
                          2620:109:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:5c:bd:c1:67:38:54:86:83:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=d9867309-a880-441c-8f29-46b0200e636c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:32:7d:3f:30:3a:7c:d8:09:02:4e:2e:2a:
                    5b:e3:fe:73:18:aa:18:d7:d8:b8:8a:5e:6c:63:9e:
                    21:09:57:a5:43:e4:c3:ec:ef:da:ac:6e:cd:29:c1:
                    ed:c9:38:9a:7a:ad:7a:04:68:72:d4:9b:23:cf:be:
                    58:22:22:87:ee:df:40:d4:a1:1d:9a:69:bc:3b:19:
                    31:34:ee:1f:fc:83:7c:e0:32:77:49:f3:1e:e9:ef:
                    a5:08:39:85:e8:01:fc:00:d4:62:5a:48:d1:21:c5:
                    f3:62:84:ec:bc:29:0c:a5:60:53:a5:11:88:2f:60:
                    eb:60:bf:f2:68:41:f3:30:7d:bd:c9:4d:1e:30:d1:
                    73:aa:73:26:cc:2b:7e:3e:22:6a:15:2b:6d:a2:17:
                    6d:ad:9c:ac:50:51:e9:67:26:fc:f9:6c:26:b3:8c:
                    9c:e9:61:40:10:ff:76:da:12:d5:00:46:86:76:a4:
                    c3:82:13:78:e5:1b:6e:d9:c8:08:47:26:3f:fd:7f:
                    48:f1:a6:23:72:bf:21:fc:68:66:11:01:26:c2:e1:
                    9c:02:d3:b3:bd:58:64:1f:6b:66:eb:e6:c9:c0:5b:
                    25:a6:4f:61:2c:72:e3:8f:ec:3d:3a:bc:0c:5f:c4:
                    7e:91:ad:c6:2c:da:14:75:bb:d9:7f:ce:69:6f:83:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:C0:B0:8D:22:3E:76:61:B4:B3:40:81:52:93:23:BF:0B:D4:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl

            X509v3 Authority Key Identifier:
                keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.120.0/21
                IPv6:
                  2620:c:8000::/48
                  2620:109:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:0c:74:f9:50:a4:12:92:c4:e7:81:84:a4:ca:4b:ed:79:
         8c:15:57:8e:0a:49:1c:d6:35:8a:2e:0e:b1:9a:7d:ac:a1:0e:
         9a:22:80:d5:48:9d:1e:4d:ca:e9:43:78:55:55:ca:c8:5a:ad:
         9c:15:50:56:79:fe:45:e4:08:af:bb:91:e0:f7:41:60:c0:90:
         84:dd:d5:24:b6:da:76:27:05:a2:c5:35:87:f8:22:2a:6b:03:
         69:73:c7:95:d4:e6:6d:aa:d3:b0:2b:45:fe:ad:6b:b3:43:2e:
         59:06:66:38:c4:55:68:de:02:ce:ad:24:a4:5c:a8:76:ec:c6:
         a9:be:4e:56:7b:56:95:cb:15:65:61:53:bf:4b:2e:e5:de:84:
         19:43:90:da:e5:b9:d9:ef:c3:4a:c0:63:00:eb:e2:7e:d2:c4:
         38:b1:ce:1d:89:c4:be:71:24:21:07:80:b2:e4:fd:b8:19:bb:
         86:58:7f:63:ea:26:79:15:f0:db:0b:9f:a8:c1:ae:55:4d:b7:
         b1:fe:ab:ac:da:91:18:11:7f:9d:a1:ab:74:4d:1c:26:a5:c2:
         d6:ae:7c:30:e2:c9:18:1a:ab:5e:19:5b:44:b1:52:ff:f6:41:
         79:b9:52:31:a1:18:2c:cb:5f:97:b5:6e:0b:c6:bf:5c:41:3e:
         72:68:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:38:50 2025 by rpki-client