Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa
File:                     f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa (raw, json)
Hash identifier:          3GzAZ+/zZOTyiFxwJQELqr4kulyBsiU2m/7dkLNz8Ac=
Subject key identifier:   0D:37:E8:D9:5C:00:50:39:C8:9C:2E:96:28:37:F6:F8:A9:E6:31:3E
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584B1D9C345FF0264A62796F5A80
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     54004
IP address blocks:        206.246.71.0/24 maxlen: 24
                          206.246.74.0/24 maxlen: 24
                          206.246.84.0/24 maxlen: 24
                          206.246.113.0/24 maxlen: 24
                          207.199.131.0/24 maxlen: 24
                          207.199.136.0/24 maxlen: 24
                          207.199.156.0/24 maxlen: 24
                          207.199.165.0/24 maxlen: 24
                          209.147.71.0/24 maxlen: 24
                          209.147.73.0/24 maxlen: 24
                          209.147.87.0/24 maxlen: 24
                          216.107.0.0/24 maxlen: 24
                          216.107.1.0/24 maxlen: 24
                          216.107.18.0/24 maxlen: 24
                          216.155.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:34:5f:f0:26:4a:62:79:6f:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=48df4bc2-5ea5-4e85-bac7-afeab776b839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:4a:01:69:7a:4b:51:2a:ba:90:11:1a:d0:
                    a7:97:49:5d:9b:c6:99:3d:61:87:de:20:4d:f2:47:
                    88:87:78:66:0c:d8:2a:19:0b:57:5e:9b:45:3d:d6:
                    d6:cc:3d:c0:9a:ca:3f:30:9e:66:ff:df:8a:21:7f:
                    d1:74:b6:ae:6c:37:ba:c9:36:af:5e:49:55:9b:a4:
                    fb:52:38:57:18:b7:3d:59:a0:9c:75:6d:ea:fb:e0:
                    d4:07:17:52:07:61:91:48:4b:4b:9d:28:ff:75:6c:
                    db:4c:02:5d:7c:f4:08:76:8b:8c:2e:24:63:f2:a5:
                    24:6b:2d:a5:a5:13:07:a2:e6:73:c4:8d:fd:8e:0a:
                    9e:21:ff:3b:ba:43:82:58:1d:3b:3a:cc:51:42:cb:
                    e7:17:d0:6d:09:85:76:6f:d1:22:76:12:81:02:dd:
                    c4:f2:55:44:c8:2f:1d:3c:6a:4c:04:1f:72:d1:0e:
                    80:23:f0:d6:4d:c5:b8:44:46:90:e7:c1:f4:c9:18:
                    82:1c:b7:19:b5:c5:ed:dc:fa:21:de:9e:c9:a1:3f:
                    22:da:a2:f0:ff:f2:31:b4:31:fb:70:0b:fa:2a:3c:
                    a4:63:51:7e:76:ea:8c:51:d0:4a:69:ae:9d:bd:05:
                    40:3e:3a:ff:50:1e:e4:6f:dc:e7:3c:d1:33:42:38:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:37:E8:D9:5C:00:50:39:C8:9C:2E:96:28:37:F6:F8:A9:E6:31:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.246.71.0/24
                  206.246.74.0/24
                  206.246.84.0/24
                  206.246.113.0/24
                  207.199.131.0/24
                  207.199.136.0/24
                  207.199.156.0/24
                  207.199.165.0/24
                  209.147.71.0/24
                  209.147.73.0/24
                  209.147.87.0/24
                  216.107.0.0/23
                  216.107.18.0/24
                  216.155.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:12:74:ef:da:8b:fb:2b:a3:89:b8:07:8c:91:3c:b0:e4:0b:
         ae:e8:f9:40:9d:81:15:76:55:22:97:b1:8d:8c:6c:91:91:3b:
         82:21:ef:47:5c:7b:d6:f2:7a:42:24:06:2f:d4:e9:de:95:af:
         06:7c:2f:a6:69:16:e0:81:91:ed:b5:3c:16:83:4e:72:1a:9a:
         d4:83:13:f6:33:1e:b0:ee:35:39:0f:a3:68:b0:a2:c4:55:be:
         b7:41:44:31:06:0d:bf:bc:c0:4b:8a:43:53:41:e6:08:d0:42:
         99:dc:51:b6:c9:38:c0:bf:92:be:4f:36:ab:68:4a:d7:c9:e3:
         b2:87:79:f4:4a:5b:cb:28:bd:a0:37:ea:26:5e:81:66:d0:70:
         bb:27:95:65:93:2e:c2:7a:d4:8a:4a:0f:38:ff:9a:48:57:ff:
         6a:7e:dd:96:2b:3e:f9:bf:8e:8f:cf:ba:c8:c3:99:a9:9f:5f:
         58:ff:19:42:22:9f:b3:ad:20:be:cd:35:a2:70:49:5a:47:61:
         5d:5f:00:bd:af:18:a2:d8:2a:9b:18:7f:1d:6c:cd:7b:4c:13:
         8a:74:81:4e:a8:00:e3:92:79:6c:4b:a2:8f:a7:12:4b:2d:0c:
         c7:2d:c6:06:95:3a:3a:39:bb:4a:80:4b:14:f6:c7:82:4e:93:
         67:91:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:52 2025 by rpki-client