Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa
File:                     6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa (raw, json)
Hash identifier:          rqgwH/NCCb0HCMhAOqfV8Ogfl3sCMpxS7iWRMY0Yt6Q=
Subject key identifier:   1B:71:99:7F:15:6B:8E:61:A0:9D:82:02:69:D9:1C:6A:2D:A3:E8:78
Certificate issuer:       /CN=b112dbf9-e037-4085-8a8c-b84035c902a4
Certificate serial:       010D0C9F4328584B13D6C7A00665221005755E00
Authority key identifier: 56:86:88:E2:95:0E:27:9C:0A:C9:A7:B7:38:1E:F1:5F:9D:39:A2:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     53971
IP address blocks:        141.193.80.0/22 maxlen: 24
                          167.248.136.0/21 maxlen: 24
                          173.250.232.0/21 maxlen: 24
                          204.122.20.0/22 maxlen: 24
                          2605:81c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c7:a0:06:65:22:10:05:75:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b112dbf9-e037-4085-8a8c-b84035c902a4
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=e6747b46-8cb0-43b6-b45f-4a2fd73517b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:ff:14:87:d7:7e:52:c1:d6:1f:3f:63:83:
                    eb:cc:89:d8:a5:4e:1e:f9:50:9f:02:bf:35:2c:6d:
                    16:43:06:89:23:37:93:2d:3f:c1:a4:cf:11:0f:e5:
                    d2:00:9b:4a:59:87:b4:c4:22:aa:74:18:32:f7:34:
                    c1:2f:69:3c:dd:f7:a5:ae:07:18:d8:e0:dd:eb:e4:
                    20:31:9f:ed:cc:a4:da:d5:a8:0a:8f:dc:be:1a:ca:
                    23:2b:5d:fc:49:ca:a8:f1:71:1b:91:47:00:97:b5:
                    76:98:f1:a1:a6:40:66:31:95:57:d3:0b:10:0c:13:
                    80:50:69:16:5c:87:5f:6c:55:c6:1c:4e:e0:f9:7f:
                    f8:d6:27:93:a5:33:eb:44:64:f1:ab:c6:dc:ac:ac:
                    52:78:2a:06:cd:58:d0:e8:c0:9f:f5:49:32:9f:a7:
                    17:fe:d3:5b:0d:16:b5:4e:99:e7:f5:a6:42:5e:76:
                    39:45:3f:80:65:e0:b7:2d:1a:d7:24:d2:08:43:28:
                    46:3b:ec:bc:a7:9e:13:01:96:1b:4e:13:d3:a0:85:
                    86:71:34:2e:fc:1d:b6:f2:47:3a:30:a3:1b:f0:af:
                    ca:9c:3a:7d:87:e1:3d:8f:20:2a:88:a2:5e:e8:6e:
                    cb:22:a1:c9:a0:18:76:06:52:34:c9:ab:42:4d:49:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:71:99:7F:15:6B:8E:61:A0:9D:82:02:69:D9:1C:6A:2D:A3:E8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.crl

            X509v3 Authority Key Identifier:
                keyid:56:86:88:E2:95:0E:27:9C:0A:C9:A7:B7:38:1E:F1:5F:9D:39:A2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.80.0/22
                  167.248.136.0/21
                  173.250.232.0/21
                  204.122.20.0/22
                IPv6:
                  2605:81c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c7:9e:e5:0c:47:7d:f4:6c:ff:dc:41:5e:f6:a1:1a:86:d6:
         57:b8:b0:c7:c0:04:fc:79:a3:ae:2f:6f:93:76:36:18:e0:1b:
         da:f9:55:22:7e:03:3d:90:c2:d6:36:81:19:2d:3e:47:1f:26:
         83:17:5c:dc:fb:94:8a:7a:c9:5c:06:2d:4c:b9:fa:6a:79:84:
         4a:b0:df:8c:5b:69:2b:7d:fa:30:b5:ed:3f:f4:7b:52:29:cc:
         77:23:5f:c3:91:4c:b3:1c:4f:85:c6:46:2a:11:98:0b:78:4e:
         ef:fa:c2:7b:4c:36:51:f6:f5:9a:a8:56:6b:83:43:a1:0c:c1:
         68:d4:5e:0d:31:8f:3d:19:f3:d2:96:43:7f:4e:c8:45:30:dc:
         49:03:7a:1b:bc:f9:2f:6b:3a:a4:b4:98:e9:37:df:f7:e0:88:
         41:97:92:e3:a9:eb:97:33:36:40:41:68:d6:19:b5:a5:ac:82:
         7c:af:36:30:b0:41:a9:c4:2d:88:ad:ba:4e:f4:c5:a7:b6:8e:
         17:23:f0:e4:00:b9:e2:58:18:ae:e5:e8:76:c3:4f:99:73:22:
         3d:eb:2f:7e:d2:09:83:b6:52:54:2e:09:9c:43:77:f8:4e:e9:
         47:57:08:fb:0b:c7:15:45:19:4d:d1:25:d0:76:9b:ce:56:11:
         d7:7a:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:11 2025 by rpki-client