Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/9a4fa7ef-2d0a-3f3c-aa3f-5b8be8c805d7.roa
File:                     9a4fa7ef-2d0a-3f3c-aa3f-5b8be8c805d7.roa (raw, json)
Hash identifier:          9HhMeEXIk+arJwSjtV7u+2edwV4myWqmtWB5rK2Av9Y=
Subject key identifier:   6F:6F:82:4E:09:9D:59:9F:D7:E9:8F:75:1C:A7:AB:CF:05:56:01:D5
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F4328584B2E5C4CD3E081E21BB0042600
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/9a4fa7ef-2d0a-3f3c-aa3f-5b8be8c805d7.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     15171
IP address blocks:        64.203.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:4c:d3:e0:81:e2:1b:b0:04:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=120f82fb-b407-4010-9031-8054f635c2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:f2:b7:4a:ba:74:7f:82:1a:21:d7:fc:99:
                    38:26:5d:0f:fa:a9:bf:11:b1:29:81:61:41:7b:7e:
                    3b:c2:8e:ef:f3:f5:79:1c:b5:d9:3e:7c:83:27:38:
                    88:2b:50:1e:40:e8:43:8f:b3:ce:67:8b:f5:fc:cd:
                    08:72:ae:26:57:6f:e2:a1:a4:99:06:da:7f:e9:fd:
                    ac:c5:a9:fe:f7:4f:3c:33:7e:7c:fe:52:f9:94:1c:
                    a1:14:c1:82:88:fb:4e:59:94:18:04:f6:60:36:3e:
                    48:e0:3d:3a:95:6d:3e:70:8e:93:99:32:b6:ad:40:
                    ad:55:c3:de:04:1c:76:c4:74:a5:31:b3:7f:0e:3e:
                    65:be:6e:94:46:18:a2:7b:e9:2c:cd:bd:d5:86:ab:
                    88:cd:1e:f7:bc:17:a2:fc:7d:b4:37:ed:93:fc:fa:
                    65:7a:e8:d1:11:33:91:a8:dc:a1:2e:1f:12:f6:97:
                    43:5c:95:8b:b2:59:6b:34:4b:38:1f:f0:c6:1b:fb:
                    7b:af:78:bb:eb:32:3e:91:91:34:77:56:39:38:84:
                    92:c5:2c:e7:54:63:48:4a:98:e4:77:d6:67:c4:ea:
                    76:01:fe:aa:7d:43:45:4b:fd:5f:01:7d:2a:7e:39:
                    c4:a9:bf:50:31:43:78:75:c4:23:d0:d7:32:1d:b0:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6F:82:4E:09:9D:59:9F:D7:E9:8F:75:1C:A7:AB:CF:05:56:01:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/9a4fa7ef-2d0a-3f3c-aa3f-5b8be8c805d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.203.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:93:f1:a3:ea:08:ac:85:1d:bc:a9:fa:37:df:6a:af:e3:0a:
         72:ee:a9:d1:94:77:31:54:43:e2:d3:c9:aa:14:ee:ef:7f:ae:
         12:db:5d:d8:c8:b0:a3:7b:5f:48:b7:95:37:17:92:ec:38:73:
         eb:ce:cd:d3:e4:1c:aa:a7:0f:11:c5:f3:f4:40:19:3d:b6:fd:
         7c:89:fe:88:0f:bc:ed:ff:57:11:4f:9d:84:f4:84:f2:a6:7c:
         17:59:42:1d:17:7a:24:89:64:ff:d1:91:59:ad:ef:16:08:9b:
         d7:24:16:6b:8f:39:bb:8e:76:a3:99:28:8f:f4:dc:eb:b3:41:
         ea:4e:e1:6a:c4:aa:ef:7a:74:0d:c7:8f:a2:7a:f0:80:e7:ae:
         87:37:79:a0:52:c8:d1:b3:af:c0:33:4f:15:04:1f:aa:33:41:
         a5:61:ea:65:de:4e:77:ec:ff:c8:13:a0:2a:b2:28:42:35:8c:
         ec:a5:e4:9a:3d:9a:bb:02:9f:8f:56:07:fa:5e:2d:84:3f:b7:
         8d:69:f5:72:b9:24:2a:28:08:41:8a:b7:75:44:71:ac:26:5b:
         db:74:ae:b0:d7:c9:52:0b:a7:ae:16:cf:31:67:46:52:54:ed:
         2f:b7:0c:1c:95:30:93:a8:84:9d:c8:73:77:6f:f4:e2:75:09:
         a9:00:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:39 2025 by rpki-client