Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/7b5cc1f6-b19e-36fe-8700-8675c8cf8cf4.roa
File:                     7b5cc1f6-b19e-36fe-8700-8675c8cf8cf4.roa (raw, json)
Hash identifier:          jEStVv+Hik3ghKz5KB/huTtHCW0ycUmQQZzAZvGEfGE=
Subject key identifier:   29:48:86:2F:DA:54:37:25:75:11:06:6F:84:47:89:19:DB:06:AC:63
Certificate issuer:       /CN=a6460218-3a41-487d-a351-7e888c417b40
Certificate serial:       010D0C9F4328584B110C0EA1D57C4F86FA034E00
Authority key identifier: 68:A7:6C:A5:99:9B:E2:2B:09:9A:F7:EB:74:18:77:F1:CD:07:AF:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/7b5cc1f6-b19e-36fe-8700-8675c8cf8cf4.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     400067
IP address blocks:        205.236.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/a6460218-3a41-487d-a351-7e888c417b40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/a6460218-3a41-487d-a351-7e888c417b40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:0e:a1:d5:7c:4f:86:fa:03:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6460218-3a41-487d-a351-7e888c417b40
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=328e6277-2ccc-4627-bab4-2c902d44686c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:b5:38:9c:f8:cc:c8:f6:e5:30:82:f4:1d:
                    ce:4e:23:73:e4:36:9a:d9:da:93:6c:f8:b8:ba:d9:
                    f6:30:29:af:7e:27:e8:16:77:a8:0d:dc:95:6d:d5:
                    ae:8c:fc:89:f2:0e:98:b3:38:48:14:52:7d:fb:73:
                    d8:a4:21:f1:4e:34:85:b6:af:e5:6a:67:6d:cf:53:
                    03:94:d7:4d:cb:85:ea:04:0c:0d:38:12:a1:dc:91:
                    d9:24:a0:f4:5c:96:57:12:98:e8:d7:9e:47:eb:08:
                    7c:5e:91:73:49:67:c5:1f:f9:6f:75:6a:0d:a4:58:
                    53:7a:40:49:ab:83:06:8e:08:1d:df:c5:ce:e7:ed:
                    8f:59:1d:84:35:69:50:7f:89:c7:23:b4:cc:73:53:
                    8d:e7:d1:0f:53:01:e4:54:90:3c:18:8a:72:2d:4e:
                    80:c3:4b:03:c3:ce:35:ad:7f:e6:37:1f:aa:9d:9c:
                    2f:5b:e7:94:d7:f2:81:6d:77:1e:da:62:b7:80:cc:
                    46:95:8c:23:96:21:40:1f:31:6f:c7:34:46:fe:19:
                    7b:dc:26:b4:47:1c:aa:6d:a3:19:88:83:ad:df:2e:
                    8e:d1:13:de:92:c0:04:41:70:fa:3a:49:54:cd:7f:
                    2b:14:e6:28:9a:80:0b:ff:cc:b5:a8:7d:b1:9a:1e:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:48:86:2F:DA:54:37:25:75:11:06:6F:84:47:89:19:DB:06:AC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/7b5cc1f6-b19e-36fe-8700-8675c8cf8cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40/a6460218-3a41-487d-a351-7e888c417b40.crl

            X509v3 Authority Key Identifier:
                keyid:68:A7:6C:A5:99:9B:E2:2B:09:9A:F7:EB:74:18:77:F1:CD:07:AF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a6460218-3a41-487d-a351-7e888c417b40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:46:56:b2:95:4a:8e:36:40:26:29:af:a4:67:49:70:4b:4c:
         82:6e:53:1f:c2:c3:46:83:da:4c:56:2f:7a:0f:d2:75:0e:3d:
         52:99:a3:fa:15:36:f2:50:bd:e4:26:e1:dd:d6:e4:10:8f:c5:
         4d:db:64:1c:8f:ad:27:28:43:cb:d2:80:e4:c1:4e:3c:af:80:
         b9:2f:71:e8:32:50:0f:89:55:a9:6e:22:0d:c6:ce:91:42:ba:
         7d:f8:6d:09:53:f8:80:5c:05:e1:1d:27:79:5a:6c:1b:e0:0d:
         6d:63:73:e4:c3:00:2a:62:18:a5:c3:d3:89:72:7d:ad:f4:cf:
         8e:35:a8:de:ce:a8:cc:01:cc:d5:73:47:6a:ad:07:21:0a:7f:
         4f:0d:1f:b4:4b:b5:b6:4f:aa:7b:5a:b1:d1:c0:df:56:14:55:
         9a:57:02:29:87:26:e1:83:3e:fe:c2:43:7f:65:5b:6e:82:77:
         24:1b:72:ea:f5:5b:1c:09:89:3f:61:7c:f9:ec:77:d7:6e:1a:
         56:6b:29:d8:21:a6:57:ee:df:4b:c8:d6:03:dd:77:fb:4d:a8:
         a5:05:90:c1:e7:00:33:ec:11:9d:a4:ba:37:63:d2:b5:bf:27:
         77:6d:4d:ec:4e:c3:85:a2:fc:ae:14:2c:7c:61:cc:e0:c2:24:
         c8:9b:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:05 2025 by rpki-client