Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/d73d5130-b175-3424-9613-7aa84a352c90.roa
File:                     d73d5130-b175-3424-9613-7aa84a352c90.roa (raw, json)
Hash identifier:          YorCrbJimL4YvUKRVwMPGPq2vFzj624oqmmR8mcf6AU=
Subject key identifier:   52:AC:5D:E3:B9:6E:71:73:55:DA:85:B3:DF:68:A6:72:7C:C6:2B:74
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584B59A1C5A28B5C8EE7B35F3A80
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/d73d5130-b175-3424-9613-7aa84a352c90.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     54103
IP address blocks:        206.246.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c5:a2:8b:5c:8e:e7:b3:5f:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=98f7f9bf-3203-4be3-bf5f-6c0b14042b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:43:e2:d0:d1:af:23:d8:b0:f8:ac:71:82:
                    5d:57:8e:b8:29:56:c4:ef:f1:f2:17:c7:ef:9f:aa:
                    9f:50:5c:71:0a:b6:7c:c3:27:a7:9f:48:cf:ce:3c:
                    7d:ae:88:63:92:f9:a2:9a:23:6f:15:e9:09:98:0a:
                    4f:9b:79:4f:fa:65:a0:17:4c:ce:cd:31:c0:81:6b:
                    45:2f:d8:f5:3d:da:e9:0c:1d:db:3b:83:db:d4:1c:
                    90:c3:8d:e8:a6:b9:7b:b1:a1:17:93:46:05:69:79:
                    75:36:46:c3:c7:e4:a9:60:8a:4a:33:da:22:a8:ed:
                    99:1a:7a:15:a7:52:1f:ca:7b:a5:35:57:8c:e8:ef:
                    2a:b3:98:1a:e2:74:11:20:68:dd:8c:3d:3d:0f:61:
                    c9:7e:38:ef:f5:7e:2b:c6:bf:48:45:f0:a2:5b:67:
                    33:1d:de:0b:9f:52:2b:91:1e:b1:bd:52:d3:54:95:
                    6a:01:93:fd:a6:72:5f:74:3c:6d:b7:63:00:f3:8d:
                    3b:c9:d4:72:f0:7a:c7:7c:67:a5:19:e6:06:ff:e1:
                    90:c3:35:60:28:1a:9b:a0:fb:68:d9:60:d5:6d:ab:
                    f7:d6:f8:1d:3d:43:2c:41:1a:e5:be:7c:25:d0:33:
                    e1:b2:33:02:94:96:56:fc:56:47:fe:b9:31:c3:e4:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AC:5D:E3:B9:6E:71:73:55:DA:85:B3:DF:68:A6:72:7C:C6:2B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/d73d5130-b175-3424-9613-7aa84a352c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.246.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a1:25:a2:3d:ac:bc:a0:b2:3a:b5:50:2d:20:9a:aa:b8:84:
         77:ae:de:2e:9a:38:26:bc:95:3e:30:fa:26:b7:f7:00:46:c1:
         4c:45:a5:90:7b:ab:d8:30:c6:8d:8b:ad:c5:d6:6f:96:11:10:
         7c:76:71:8c:1d:b7:79:49:ae:20:ab:97:ef:3a:70:9d:f5:bb:
         ce:b4:b3:db:bb:ac:76:93:bd:61:96:cf:e3:75:a0:ff:94:bc:
         4d:3f:bd:2d:34:ec:83:d7:24:fa:0a:be:68:34:85:ea:d4:68:
         27:42:b4:bd:13:df:5b:55:b4:d3:37:20:3f:58:01:3a:89:f7:
         3d:1f:52:dd:6f:09:98:f2:17:4e:2a:8c:b3:b7:9e:06:6e:fe:
         b0:b8:4e:76:b6:66:df:45:f6:22:0f:c5:88:a6:68:61:76:d3:
         a8:7a:94:9b:fb:f3:13:e6:7e:b5:71:75:b9:c4:3c:82:1f:d7:
         32:08:7a:d1:f5:a5:7e:c4:fe:7d:72:1c:9f:a9:c0:d2:41:12:
         77:80:ed:07:e2:dd:8f:86:b7:45:3e:5a:cb:31:bd:ec:c1:ae:
         7c:9d:4b:40:55:09:85:d1:7d:af:51:0c:83:52:2d:d3:5c:ba:
         a6:3e:17:8f:0a:40:f4:52:d1:bb:9b:7b:21:d0:0b:34:db:b9:
         f6:08:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:50 2025 by rpki-client