Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/94ceadef-1e5b-31a7-a38d-5365f1cab273.roa
File:                     94ceadef-1e5b-31a7-a38d-5365f1cab273.roa (raw, json)
Hash identifier:          D4iCik2yD3CnDcAzd5+9NXGL98wmkuJdpZCkacQvss0=
Subject key identifier:   6E:AE:F2:EE:96:19:47:BA:DB:13:C5:32:FF:91:3C:A5:67:CA:8D:8A
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584B4D11D9EEDCAE7DFD1EC370A0
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/94ceadef-1e5b-31a7-a38d-5365f1cab273.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     399575
IP address blocks:        206.204.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d9:ee:dc:ae:7d:fd:1e:c3:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=48d081f1-dd77-4ea0-888a-fba8f77f0505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:d3:41:9a:81:d5:c4:c1:b3:16:f6:65:43:
                    b9:50:08:de:73:44:1c:c4:d5:3c:63:c0:9e:f4:24:
                    bd:9a:b0:28:71:97:1f:7a:8e:a9:84:71:ba:84:eb:
                    97:32:58:74:fb:48:f7:3f:43:04:b0:31:5c:bd:dd:
                    fb:f3:61:26:5d:cb:03:81:94:80:5b:0f:98:c8:e0:
                    51:77:bf:25:ca:c2:70:a1:a1:a5:71:47:53:15:f3:
                    f1:e5:01:f0:0b:98:77:bd:64:ac:37:99:e3:82:d0:
                    b3:65:12:25:0f:82:c3:e6:da:30:97:61:b8:cf:a2:
                    1f:a9:14:80:ee:f3:95:11:05:46:74:4d:a7:60:da:
                    eb:3f:e6:0f:ea:4f:a1:b3:2b:80:04:73:ae:a5:e6:
                    f4:b4:6c:fe:d9:78:6b:2b:14:df:a7:95:a2:14:43:
                    fa:a5:fb:65:74:68:60:34:65:bc:03:16:90:ae:aa:
                    7a:05:b1:a6:8e:76:fe:22:68:55:78:f1:c4:a1:32:
                    81:75:7f:85:a0:32:a7:0b:4d:2f:f3:1d:b9:43:96:
                    ce:9a:74:1b:7a:1a:eb:99:fe:0e:f8:67:f2:b7:7d:
                    56:f8:67:ca:27:90:16:51:32:fc:2b:54:2e:b1:d4:
                    fc:39:6a:cb:57:a3:51:5d:7c:0b:5e:95:50:64:e6:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AE:F2:EE:96:19:47:BA:DB:13:C5:32:FF:91:3C:A5:67:CA:8D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/94ceadef-1e5b-31a7-a38d-5365f1cab273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:28:5f:f9:73:e2:9d:20:8e:8b:e4:54:d9:7e:52:20:55:
         c5:82:0e:1d:cc:d9:71:9a:e6:51:50:70:16:80:4e:da:a6:73:
         43:47:9a:0e:f9:45:3f:76:35:02:03:ac:7e:c6:34:38:18:4b:
         1c:1e:d5:1e:a4:0b:4a:bd:9d:4e:bc:d1:d1:69:c4:66:ab:cf:
         71:5e:46:47:b7:82:2c:df:a3:e0:8c:62:dd:f1:11:a3:1b:14:
         5a:ba:cb:da:92:64:7a:68:db:ae:44:4f:60:fe:65:aa:28:13:
         8b:55:23:25:d1:de:a2:0c:97:89:ba:ac:13:8b:f5:bd:81:e4:
         d0:8a:e3:2d:24:80:b5:ea:65:1f:3f:e1:66:c9:4c:57:c3:4c:
         0f:93:df:24:75:47:7d:3d:9f:e2:34:b9:fd:ca:0f:bb:e4:45:
         96:10:95:88:7b:d8:fa:8a:27:d1:e6:7d:21:15:a2:e3:ff:4b:
         21:95:ce:89:7a:6f:18:e1:e9:28:a8:f0:dc:73:15:45:c8:ec:
         b6:f2:f1:8b:1d:81:34:36:05:7d:31:e0:2d:f3:6c:17:11:e2:
         b8:4f:ff:4c:11:9a:46:0c:e4:a9:7e:fd:7a:b2:15:7f:36:98:
         68:3b:74:92:0e:76:3a:4f:a7:fd:5a:1e:7d:4a:a5:7b:af:d7:
         71:b0:61:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:06:12 2025 by rpki-client