Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4079f4bb-2c2e-39ff-a740-529dd5eed514.roa
File:                     4079f4bb-2c2e-39ff-a740-529dd5eed514.roa (raw, json)
Hash identifier:          pXg8vsQDgO7ID/mGYTajjPFvys6CGDCKzOOUaYYncAE=
Subject key identifier:   84:CD:E3:DF:40:38:55:BB:5A:D8:10:66:88:A3:4A:14:2E:B2:B8:13
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584B76F215BC0882D37CAC8D3080
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4079f4bb-2c2e-39ff-a740-529dd5eed514.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     7018
IP address blocks:        65.110.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:15:bc:08:82:d3:7c:ac:8d:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=359c7be9-6b35-4981-a85e-7e2c43de28a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:07:37:ba:a4:72:c5:99:75:9a:dc:2d:01:
                    21:8c:c4:e7:57:ba:bd:28:ee:34:a7:76:ad:86:0a:
                    2f:3a:42:55:6a:8d:00:fe:8e:99:ff:b0:77:4b:5d:
                    17:62:d0:14:83:b9:b6:7b:c9:4c:9e:3a:bc:97:d5:
                    5a:17:52:28:e0:9a:d2:18:1f:7d:7f:9e:d3:29:1b:
                    b9:17:8c:1d:78:74:fb:89:02:c4:32:8b:8b:d4:61:
                    ae:4d:be:16:41:42:5a:4a:49:53:d1:0e:75:73:91:
                    f5:72:13:4a:a1:3f:f6:ec:75:60:fc:9c:21:85:f6:
                    ab:35:22:03:b2:68:d3:2e:36:a1:43:90:4d:fd:63:
                    31:72:71:c8:c6:47:23:74:88:1c:1d:c0:0b:04:08:
                    29:38:52:72:a0:48:1a:82:56:07:de:70:48:82:6a:
                    79:9a:80:f6:4c:d0:10:ad:73:43:16:7c:01:8c:2e:
                    dd:0b:95:58:95:31:5b:10:de:80:a9:a0:6d:22:58:
                    84:31:a1:29:b6:92:80:10:75:21:15:5e:ed:9f:0f:
                    19:ac:50:0d:9d:12:98:08:d3:57:55:cd:ed:98:1e:
                    04:23:01:4d:ed:2d:2f:ec:d8:2c:55:1e:4c:39:07:
                    73:40:39:61:77:6a:24:9e:ac:75:c8:cd:df:5d:11:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:E3:DF:40:38:55:BB:5A:D8:10:66:88:A3:4A:14:2E:B2:B8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4079f4bb-2c2e-39ff-a740-529dd5eed514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4b:c2:4e:d6:d4:95:40:02:53:0d:c2:59:89:07:38:8e:ef:
         e7:d7:2a:51:cb:eb:4c:d6:69:14:b8:bf:de:5b:13:c2:3d:ae:
         4f:05:b2:76:60:f5:ec:a4:fb:72:48:5a:e3:54:15:d3:bf:b9:
         84:78:4e:27:ef:d2:4b:46:79:d0:a1:7e:68:0c:5d:85:01:52:
         30:9b:6c:bc:ae:c6:13:b9:42:c9:cb:36:bc:0e:16:b6:40:24:
         4a:3b:3c:b9:7d:fe:cc:c8:42:77:1f:29:f4:36:7e:e9:50:02:
         b9:85:e1:88:3d:b8:a0:a7:c5:e9:f7:f2:9a:cc:35:33:38:02:
         de:b3:98:2e:91:65:be:d0:2b:71:b5:03:b9:2b:aa:e2:74:5f:
         75:9e:4d:e8:45:f7:9d:f6:11:25:27:ec:59:89:cf:37:7f:75:
         9f:05:93:ae:8d:b3:0c:ab:a0:fe:e1:e1:86:36:93:0f:e2:dc:
         1d:1d:1a:f9:e0:77:87:4e:7e:04:b4:a9:db:71:f5:80:a1:fc:
         a6:b0:22:ec:4b:91:91:67:e4:e5:46:c2:8f:6b:54:b7:bb:b7:
         ba:7c:38:fe:42:69:e5:33:7a:01:e7:29:fb:73:bf:d5:be:0b:
         2a:4e:6d:c9:be:f4:02:5b:b1:93:25:97:9e:f5:d9:ca:18:8c:
         fc:37:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:30 2025 by rpki-client