Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b/514793aa-65fd-392d-a522-b345f6031626.roa
File:                     514793aa-65fd-392d-a522-b345f6031626.roa (raw, json)
Hash identifier:          SEYOFjll8miEh6WDk3vkBZJYI8UYXcbkg8eEfAiOLs0=
Subject key identifier:   C7:E0:E6:E3:F8:EE:FE:71:28:93:45:BD:DD:84:BF:39:44:9C:12:7F
Certificate issuer:       /CN=3b467739-b4c0-4c0c-b3b2-7dd0afccf11b
Certificate serial:       010D0C9F4328584AFEE6A5F6F5C63B9D48719100
Authority key identifier: EB:86:6A:FA:59:67:69:74:36:D9:32:7C:E4:B3:0A:E8:F1:D6:C0:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b/514793aa-65fd-392d-a522-b345f6031626.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.123.48.0/24 maxlen: 24
                          206.123.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a5:f6:f5:c6:3b:9d:48:71:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b467739-b4c0-4c0c-b3b2-7dd0afccf11b
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=5b01cf0c-3d44-4ca4-969e-9c73ef889eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:71:dd:80:41:47:44:1b:bb:c1:cb:b2:ed:
                    2a:17:7b:5d:4e:f2:b2:2e:3c:89:e2:53:ae:25:f0:
                    22:6a:8f:3b:44:32:f4:4f:b8:55:f8:df:02:8e:2a:
                    97:c0:f0:96:9b:df:08:a3:6d:ac:25:db:68:9a:c0:
                    82:8d:e9:69:66:2c:8d:f3:7a:d8:51:ee:cb:91:56:
                    77:7c:2d:e7:1b:a7:20:70:03:1a:8a:5c:7d:3a:22:
                    19:a9:1d:77:68:7b:95:b8:16:03:d0:be:16:da:1f:
                    22:79:2f:db:0a:12:e8:76:88:e1:21:09:f2:a6:e9:
                    39:7c:84:0b:db:d0:fa:41:34:cb:2b:44:ba:a5:8f:
                    06:f8:e8:fb:df:31:0a:ff:90:54:f2:a0:7b:f1:40:
                    d5:52:39:65:9a:1f:45:e9:04:6e:ee:c6:57:7b:d8:
                    ef:81:15:03:80:59:5c:c7:0b:ef:94:9c:a4:e4:f4:
                    14:cc:28:6f:25:57:12:cd:53:83:10:0a:20:bf:0f:
                    84:ca:53:07:72:d6:d9:d3:f9:a8:91:85:51:c1:90:
                    2a:7e:22:a2:e1:07:d3:90:45:c4:2e:bb:d4:85:77:
                    1f:c1:31:23:09:ec:6d:44:b8:b7:1c:d8:ad:ef:23:
                    24:03:49:ea:ab:1c:22:2f:f5:71:12:88:a8:c3:9c:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E0:E6:E3:F8:EE:FE:71:28:93:45:BD:DD:84:BF:39:44:9C:12:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b/514793aa-65fd-392d-a522-b345f6031626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b.crl

            X509v3 Authority Key Identifier:
                keyid:EB:86:6A:FA:59:67:69:74:36:D9:32:7C:E4:B3:0A:E8:F1:D6:C0:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b467739-b4c0-4c0c-b3b2-7dd0afccf11b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8d:de:df:ed:65:28:16:55:57:7f:d6:ca:91:e8:14:43:d0:
         2b:61:59:f3:4e:68:ea:e0:ce:74:2c:cf:f2:1b:3b:9a:0c:2d:
         66:22:f0:96:05:95:53:96:87:93:69:74:72:0c:33:6d:f9:24:
         74:df:cc:8e:6b:91:7b:c4:bd:54:cb:e6:f3:e9:c0:75:95:d9:
         d7:b5:bb:14:17:0e:7a:c5:80:bf:d2:4c:cb:22:8c:c2:e0:33:
         52:32:26:9a:0c:10:b3:51:f0:2b:6d:ce:ee:17:32:be:c7:d9:
         87:86:47:96:c1:76:61:fe:47:a8:68:5c:68:35:da:da:43:80:
         e8:2c:2c:ff:63:b3:5b:14:0a:e3:09:91:d5:af:47:46:45:20:
         bb:43:d1:38:7d:9b:a8:c5:d8:f0:8c:88:01:ce:fc:ab:26:33:
         ac:df:a7:9f:ed:22:20:8c:01:f8:09:d8:6c:86:18:56:fc:d2:
         cc:46:25:59:27:0e:ae:0b:98:09:99:cb:96:1e:0c:95:22:0f:
         91:5d:98:2f:67:99:06:5e:4f:a7:17:0a:a4:1f:1a:99:ef:60:
         de:2f:5c:89:0b:5f:f8:43:a8:54:13:03:1c:f1:1c:68:dc:79:
         c4:95:db:3b:1b:4d:44:e7:2e:df:4d:f5:6c:ec:fc:63:85:39:
         49:08:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:56 2025 by rpki-client