Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa
File:                     aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa (raw, json)
Hash identifier:          ujIBRPEt9vfRrLnzVKvyGBx/hrvouFwktD/l9tJhrDQ=
Subject key identifier:   41:80:31:D9:67:0D:9C:F8:24:DE:F9:DE:33:1B:F6:C7:64:33:5A:E3
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584B4A4719F80F5EC062108FDB20
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     11260
IP address blocks:        71.7.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:19:f8:0f:5e:c0:62:10:8f:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=1eeaced1-9738-4307-93fa-328c41550575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:13:48:20:16:c6:26:c5:9f:80:69:9b:3b:80:
                    e0:58:d5:88:4c:60:6a:27:34:dc:eb:cc:ea:b0:ca:
                    89:5c:ad:03:a0:db:ac:2a:b7:98:06:be:2d:10:b0:
                    b4:d9:af:d6:0d:36:83:60:2a:e2:94:52:26:a4:f6:
                    c9:26:4a:7e:63:f8:d4:98:6b:34:78:19:fa:63:1f:
                    9f:36:c9:cb:dd:2a:9f:ba:ba:80:e5:cd:f7:2f:d7:
                    8e:2c:b5:25:ab:d3:8c:74:66:4e:c8:d4:92:46:15:
                    d2:37:2c:81:82:b5:a0:86:86:e9:1d:bc:81:72:70:
                    0b:61:13:5e:98:74:18:ed:36:dc:be:01:3c:9f:26:
                    75:3e:e2:5e:65:3c:dd:81:6b:ec:f7:ed:d7:46:47:
                    21:05:36:9e:d8:6d:53:0e:9a:fa:e0:41:d8:ba:e2:
                    a3:90:a7:ae:15:6d:15:9e:47:22:77:69:d6:e3:cc:
                    97:b8:f4:3e:0b:a7:76:b6:9b:82:97:26:d0:21:f3:
                    a4:f8:9e:69:69:e8:cf:c2:8d:57:dc:1b:92:85:11:
                    78:6a:bc:fb:ef:ed:22:7a:48:12:47:5d:9d:2a:0a:
                    e0:ea:a5:90:c0:34:fc:66:d6:86:59:5a:2f:06:16:
                    cd:c4:9e:3e:3a:6a:4e:14:5b:37:db:6e:61:33:01:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:31:D9:67:0D:9C:F8:24:DE:F9:DE:33:1B:F6:C7:64:33:5A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.7.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:09:a9:09:ad:9a:a1:f1:a5:2e:fd:da:99:24:9c:00:bf:6c:
         8c:97:60:15:98:a2:72:57:a0:32:9c:22:d2:3a:d7:77:f7:94:
         33:0e:ab:85:78:6d:ce:fb:71:a7:63:9d:cc:89:28:e4:08:ec:
         34:e1:4f:a3:ad:f6:11:af:3f:46:e6:fa:59:39:74:9e:2b:64:
         75:b8:a1:09:3a:7a:c3:41:98:7b:34:19:15:6c:b8:3c:7f:13:
         45:19:dd:a7:ca:89:66:7f:bc:02:5c:a3:36:fd:24:2a:76:33:
         fa:c8:c3:cb:29:b2:93:2b:51:a1:d6:86:fb:91:95:d1:c2:07:
         fe:df:c1:83:11:56:5b:98:40:81:e9:4e:c0:32:39:42:87:51:
         2c:77:04:c9:e4:0e:91:06:a7:86:52:4b:d4:bb:30:bf:cd:59:
         cf:6c:da:5d:b6:e2:4c:9f:4f:3b:e5:12:19:47:e0:a1:29:d1:
         e1:6a:84:72:88:c7:b7:ab:56:de:c3:bd:73:c9:39:79:32:af:
         d1:67:88:41:eb:4f:ad:dd:2e:7f:d5:e5:ea:7c:5e:14:7b:7c:
         18:2e:3b:c0:8b:f1:62:11:3b:ff:f1:5e:81:42:03:bb:8e:fc:
         c3:ea:aa:55:48:f4:d4:94:24:0b:c8:cc:16:19:d8:c7:ef:a7:
         5e:b9:41:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:31:11 2025 by rpki-client