Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/67cd6099-53c3-392f-82e2-ea8f384913d7.roa
File:                     67cd6099-53c3-392f-82e2-ea8f384913d7.roa (raw, json)
Hash identifier:          lV96eofvCoXFmMOlr1OSFkmqg4rc50Nou+JNgAdozgQ=
Subject key identifier:   3F:53:B0:6D:65:B4:FD:3A:B3:4E:86:74:0F:87:B3:04:EF:30:34:69
Certificate issuer:       /CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
Certificate serial:       010D0C9F4328584B1F017C2AE9685DA04257C600
Authority key identifier: 63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/67cd6099-53c3-392f-82e2-ea8f384913d7.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     16557
IP address blocks:        204.152.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:7c:2a:e9:68:5d:a0:42:57:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=c2738462-4df3-43e2-9781-38de6fafd69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:b3:a4:d7:77:a3:71:f9:5c:05:2a:92:43:
                    d0:b5:2f:e0:31:24:a6:3a:43:3c:f8:dd:be:cc:8d:
                    8e:e9:fb:c0:37:79:2d:c8:44:a1:20:74:e0:11:55:
                    5a:91:d9:34:55:83:b2:6c:4b:a3:6e:79:99:7e:a1:
                    bb:39:88:71:9d:5f:77:8a:35:6b:01:24:5d:b3:e8:
                    3a:86:5a:36:a0:f4:d6:3c:72:5a:ed:aa:db:28:b6:
                    e3:ff:27:c2:ac:55:d3:7c:55:24:66:4d:4f:88:03:
                    c8:aa:c4:11:9e:e6:e7:07:18:7e:05:a4:93:22:1b:
                    6e:dc:83:9d:ed:96:e7:ee:91:b6:02:d4:c2:20:7c:
                    85:df:b5:ec:a0:b4:54:3b:c6:f4:be:33:ec:19:95:
                    77:9b:75:55:a3:a1:f0:fc:3b:87:0b:60:71:d5:de:
                    b0:55:c2:8a:9c:5a:b5:8f:33:4c:ef:8c:93:8c:72:
                    a8:15:8a:09:c0:c7:b0:d1:87:ef:44:60:b5:70:2b:
                    98:b0:78:f4:11:8f:48:a3:f3:35:29:7b:d8:6c:b7:
                    bd:27:a2:ff:09:5f:ee:75:4a:7d:5f:13:13:97:3d:
                    51:a4:38:3e:a5:a8:29:88:bf:de:6d:64:bb:1b:5c:
                    62:8d:8f:4c:ef:5c:52:94:4c:26:9e:1f:b7:46:ae:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:53:B0:6D:65:B4:FD:3A:B3:4E:86:74:0F:87:B3:04:EF:30:34:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/67cd6099-53c3-392f-82e2-ea8f384913d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl

            X509v3 Authority Key Identifier:
                keyid:63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3e:3f:c9:a0:a6:4f:f9:81:e3:98:94:ed:36:ea:db:55:3a:
         6f:38:22:16:71:b3:8f:3c:f0:97:66:f9:c0:7b:b9:5a:2f:c8:
         3d:59:c3:95:7f:aa:d1:3b:98:21:3d:80:d1:4d:51:2a:18:18:
         f5:78:ea:2f:ad:16:0c:2b:1a:63:b4:10:63:25:56:5e:89:93:
         b2:34:a8:b0:10:ea:ef:78:68:43:08:a7:20:35:19:29:6e:05:
         74:3c:18:c0:78:04:b8:d8:69:eb:94:7c:6b:59:42:1d:4e:4f:
         99:31:99:b8:97:f1:ac:35:b0:da:c9:04:14:1b:80:2f:cd:6c:
         24:5b:58:f9:8c:37:14:2e:68:c5:57:f4:58:ef:6e:b8:75:3f:
         4e:a1:96:89:7a:71:06:60:c1:bb:d0:dd:91:3e:da:6a:d2:04:
         c2:97:f5:82:64:37:b9:3d:bc:14:7e:bd:64:2c:2d:3c:8d:08:
         fd:ae:50:a2:0e:89:9a:59:a5:dd:40:21:13:49:e1:67:d8:02:
         40:0c:05:37:a6:bb:fb:39:f7:76:66:cc:52:b1:22:b6:77:5f:
         a2:41:51:e9:a8:da:c6:77:a1:31:31:63:fd:c0:04:2e:d6:b2:
         7b:cb:b8:ed:d8:bb:a8:d6:bc:b5:c8:de:42:87:48:98:cb:3b:
         64:04:0f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:20:05 2025 by rpki-client