Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
File:                     470b542c-40cf-3926-b91f-b6e750f55345.roa (raw, json)
Hash identifier:          lXoLd1AYkwgTCERJTx06ibiObNsngyzPGNPrxX0E+nk=
Subject key identifier:   D8:B0:05:C9:7C:25:12:2A:19:88:50:34:B5:6E:38:89:89:D1:12:2A
Certificate issuer:       /CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
Certificate serial:       010D0C9F4328584B1D9C1E92F862533561E7C6B4
Authority key identifier: C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     19885
IP address blocks:        206.214.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:1e:92:f8:62:53:35:61:e7:c6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=7870ea2c-927f-481e-ba2e-2931373530ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:86:83:0b:a8:4c:68:7d:8c:16:a4:dc:f1:
                    e5:08:2e:66:33:50:1d:ea:56:9f:e6:f8:66:18:70:
                    0d:be:31:57:54:11:3d:d5:a8:87:63:a5:f9:0c:62:
                    79:49:f2:0c:5f:b6:f1:02:0e:c7:52:c8:47:98:3d:
                    c1:7e:99:0d:5c:e1:2b:d4:b8:63:b0:14:fd:59:99:
                    c7:6a:ab:6d:cd:bd:78:7b:bb:69:10:bb:4e:f4:1a:
                    b9:70:2c:b4:7f:bd:3e:c4:5e:d0:15:63:96:4f:50:
                    bf:88:57:b5:0d:e2:99:7f:07:06:e7:a1:30:b4:16:
                    a7:62:17:b3:da:31:8d:cb:b7:f9:c2:81:1a:6f:39:
                    fd:2d:50:1b:94:1a:67:28:1f:57:e3:49:9c:41:61:
                    a7:61:eb:58:a8:0d:cc:91:eb:45:f7:1b:6c:ac:d0:
                    0b:5c:9c:96:09:e7:1d:ff:6d:9d:62:b4:f9:3b:84:
                    23:73:14:c6:10:a9:a1:b9:b9:d6:19:b2:4c:4a:6f:
                    21:6e:19:95:a2:18:7f:b6:88:d6:74:d5:ca:c9:6a:
                    2e:04:cd:b4:43:65:c9:c1:81:83:a4:76:8d:b7:44:
                    5b:ea:f4:62:bc:f1:80:86:d7:f5:49:f1:3d:06:22:
                    6e:e5:d0:e2:ad:3d:ee:ac:5c:21:b2:2e:17:70:9d:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B0:05:C9:7C:25:12:2A:19:88:50:34:B5:6E:38:89:89:D1:12:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.crl

            X509v3 Authority Key Identifier:
                keyid:C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.214.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:21:88:b4:1b:24:69:e2:d5:c4:8a:0c:4b:2a:1e:ec:79:8c:
         e7:b3:3c:ff:c8:0f:72:ca:29:90:88:36:3b:ba:84:27:0f:48:
         f2:61:6a:90:55:50:28:5f:40:ce:68:5d:f7:58:c9:cf:de:21:
         ab:f1:44:26:c7:19:93:8d:a7:73:46:86:a5:96:bb:25:ef:d6:
         c1:09:cb:00:4d:26:20:ca:cb:9f:92:5b:e9:e5:d1:16:44:76:
         4d:4b:d8:76:21:fd:ec:16:3b:12:f8:bf:4c:8c:74:dd:fb:7b:
         e6:9f:f0:01:fb:8e:b6:42:36:60:78:23:d4:bf:32:4d:b0:60:
         6c:d2:8d:fb:07:4a:7f:96:11:28:23:15:0f:33:b9:16:6c:0d:
         b4:8d:2b:23:d7:d8:4e:e7:cc:37:5c:00:18:b8:fc:21:94:a8:
         06:a4:54:25:c3:a7:c4:9e:35:6d:9f:04:75:07:1b:4e:15:36:
         22:dc:d7:a6:75:44:d9:a2:89:cc:91:d2:93:46:f0:a8:7c:c8:
         4d:0a:ad:45:fa:e3:3b:d6:93:55:d7:fa:c5:e6:ad:95:93:7d:
         c5:6d:31:5e:d5:71:8b:ff:d2:c7:83:51:24:85:d0:33:b9:62:
         7e:d9:25:6d:4b:da:07:7e:c9:8d:30:43:bd:82:70:f9:9f:60:
         8e:53:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:47 2025 by rpki-client