Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/c4585719-a34c-39e8-9dc8-b4d6e495ce87.roa
File:                     c4585719-a34c-39e8-9dc8-b4d6e495ce87.roa (raw, json)
Hash identifier:          UjfkESX6e1Jp/EFHdfw/6tDILURnjnSMNDV7UyYDOHU=
Subject key identifier:   10:D5:E6:B2:5A:C1:95:E9:05:9C:06:99:E5:49:CC:16:8B:62:9D:12
Certificate issuer:       /CN=903ec3cf-858a-457b-844f-8c6283f5e5d9
Certificate serial:       010D0C9F4328584B0A116C34B7D15EB0E757CAC0
Authority key identifier: 3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/c4585719-a34c-39e8-9dc8-b4d6e495ce87.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     30255
IP address blocks:        69.80.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6c:34:b7:d1:5e:b0:e7:57:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903ec3cf-858a-457b-844f-8c6283f5e5d9
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=5f78390c-be25-494b-84dd-4e8b6412ecbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:a8:94:ed:5a:2c:82:24:bd:3b:c7:a7:4d:
                    a7:d2:cb:30:79:7a:1c:38:b9:96:e0:e0:86:0d:68:
                    78:8b:67:75:f4:14:ff:4a:eb:c1:19:a5:03:d9:4b:
                    68:77:e5:3a:e6:10:94:ec:64:f4:27:f1:0a:3f:79:
                    c2:96:a0:e2:e6:79:19:30:c6:17:59:67:97:f5:62:
                    c8:5c:a2:0a:d2:ad:64:72:f1:50:15:a5:4f:42:78:
                    2b:12:60:05:3b:a2:5f:4d:28:24:f0:7b:b1:59:ae:
                    9b:35:67:aa:43:3a:62:40:f6:42:44:92:98:6a:b3:
                    d6:2f:71:21:de:9f:a2:ab:b6:da:73:62:c4:9e:72:
                    42:c2:ef:1e:26:3b:84:0a:8a:14:13:01:77:23:99:
                    8d:50:df:d5:1b:c7:7b:46:fc:cc:98:f9:79:1e:01:
                    cc:a3:c3:e4:d2:69:ca:14:da:db:db:6d:d3:d9:e8:
                    5b:55:b0:6d:cc:43:25:c2:5c:2c:47:88:74:cd:80:
                    fc:72:dd:11:55:91:de:ae:6c:77:6f:d0:ff:ae:8c:
                    b0:06:74:5b:c0:91:76:df:60:74:58:e3:17:31:b0:
                    b3:fd:51:75:f9:d0:42:3a:88:17:32:85:e8:12:44:
                    b9:f6:f1:7f:03:ed:ac:e6:26:08:d4:1a:fa:d5:62:
                    22:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D5:E6:B2:5A:C1:95:E9:05:9C:06:99:E5:49:CC:16:8B:62:9D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/c4585719-a34c-39e8-9dc8-b4d6e495ce87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl

            X509v3 Authority Key Identifier:
                keyid:3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:95:a7:93:03:1a:b6:aa:7c:d9:a7:d1:85:43:aa:57:c0:b1:
         62:c8:6f:95:e4:26:9c:8e:25:2f:0a:7d:ae:0d:ab:27:bb:12:
         ae:e2:c2:67:0d:63:8e:26:ba:57:34:02:a0:25:88:9a:bc:5d:
         c6:8b:98:a6:9d:59:05:66:2f:67:e3:87:58:3f:6f:97:77:8e:
         d0:82:59:00:e8:56:a3:be:29:22:77:47:1c:7b:88:eb:6c:42:
         cc:f3:5f:12:6e:c2:1c:c5:da:99:0b:7e:35:2b:57:f7:cf:97:
         95:26:ac:bd:17:6c:81:ad:18:28:06:65:96:9e:00:55:23:f5:
         95:03:a5:ec:cc:10:75:2e:6f:a2:83:23:fe:08:c9:0a:d8:a1:
         74:65:5e:fa:48:26:f8:22:be:ac:0b:de:04:b1:46:27:90:3b:
         ce:d4:22:98:4d:1a:5b:ee:b1:4e:c6:68:3a:96:f3:11:be:b3:
         c1:37:d3:f3:7a:6a:2c:99:58:38:97:15:e5:8d:1e:25:b0:6e:
         d6:87:17:6f:50:cb:87:a0:5a:93:48:fd:a9:af:be:b0:eb:64:
         58:25:fe:60:a8:0f:e5:5c:27:4f:d9:18:38:43:2f:f2:27:85:
         bf:8b:6a:41:56:1a:e5:0a:93:60:bb:50:a2:ec:cd:69:11:ac:
         4e:25:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:12:15 2025 by rpki-client