Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/8bf91cf8-27b5-328b-8f66-68984985c101.roa
File:                     8bf91cf8-27b5-328b-8f66-68984985c101.roa (raw, json)
Hash identifier:          C6Cy4CUrpnasnQb/ePUqmtWG4LYrBIT/pmlGe4r2PpU=
Subject key identifier:   28:51:14:A5:04:41:5A:F9:D2:77:47:63:1A:DC:5D:77:2E:54:60:12
Certificate issuer:       /CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
Certificate serial:       010D0C9F4328584B68FCABE08D6A17F7E4BBC870
Authority key identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/8bf91cf8-27b5-328b-8f66-68984985c101.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     15176
IP address blocks:        204.14.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:ab:e0:8d:6a:17:f7:e4:bb:c8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=cce14695-11c7-450f-b7a5-f71e942223b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:0d:4e:d8:1c:56:db:b5:d7:81:35:12:fa:
                    11:db:c9:39:d2:45:d0:29:f5:31:c6:d1:6a:97:97:
                    80:70:cc:08:9a:a0:bf:f3:43:d0:ef:5f:03:c1:9f:
                    f0:7e:fa:7a:12:6f:21:ab:21:ce:a8:e8:24:fd:c8:
                    be:1e:22:d5:59:9e:9d:65:a3:94:a9:ed:ae:6c:f2:
                    ca:34:84:da:dc:86:ca:a5:98:95:77:83:d0:76:20:
                    b1:8e:c0:ac:70:86:4a:96:85:43:70:31:bd:50:22:
                    9c:c0:83:11:50:18:d7:cb:82:de:96:8d:6c:1f:f6:
                    b5:21:08:56:16:71:6b:d1:cf:63:2a:00:40:18:ba:
                    1f:15:29:fc:e1:dc:92:1c:d4:a1:bf:f0:e2:be:a0:
                    c7:8f:8c:d0:23:9b:bd:d6:fe:e6:14:25:c6:fe:0e:
                    74:c6:52:e3:f3:99:19:e4:9a:da:c1:21:bc:92:d4:
                    56:13:95:7c:34:e5:2b:dd:17:6f:cf:57:78:d9:1e:
                    1d:53:83:94:ee:e1:b3:e4:47:da:ce:fd:8f:7f:54:
                    69:4e:e6:ca:62:24:bd:59:8b:f5:84:1a:5e:a5:77:
                    61:04:9a:ac:15:fc:1f:cd:9f:05:c1:cb:76:ed:aa:
                    7c:60:a6:96:9c:f9:e7:1a:ce:0f:10:b6:5d:06:5e:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:14:A5:04:41:5A:F9:D2:77:47:63:1A:DC:5D:77:2E:54:60:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/8bf91cf8-27b5-328b-8f66-68984985c101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:b7:91:85:8a:10:7b:e4:5e:8c:ef:b5:97:42:fa:8d:55:
         b4:77:5b:5f:7d:8a:67:e2:5b:ab:22:e7:1d:e3:3e:a5:a0:fa:
         ea:de:f8:04:f0:d1:ae:08:c9:67:8d:97:84:15:22:76:e6:4e:
         94:2f:2b:54:24:50:a0:6e:6e:1c:55:80:95:e1:35:c9:51:1f:
         a5:b0:a5:da:12:e3:10:0f:6e:4e:b0:64:3a:d9:08:bf:50:ac:
         0b:02:43:fd:a4:c6:96:52:2e:16:df:b7:47:7e:90:b9:c1:b1:
         ab:9c:4e:61:bd:4f:32:08:2a:18:ba:aa:7e:b5:6a:20:47:79:
         d3:dd:98:1c:07:ac:b8:83:58:99:79:3d:32:b3:66:55:3e:af:
         5e:89:77:a7:46:d3:e1:f2:07:d5:fb:27:fc:f7:7a:b2:30:7b:
         d1:ef:ca:f3:4d:7a:19:1e:b2:3c:9b:7b:3c:57:11:0a:65:0d:
         05:2b:b2:0b:ad:49:b0:81:59:80:6e:7e:04:d1:65:85:94:b4:
         33:04:96:5c:42:05:5a:9c:87:fa:8d:f7:af:54:d8:64:3c:c9:
         40:d1:5f:c9:7b:07:ed:11:4c:03:8c:b1:24:3f:23:44:fa:0c:
         0a:2a:5e:5a:17:bd:c8:f2:6b:88:04:17:ea:ed:c7:81:8a:00:
         2f:bc:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:22 2025 by rpki-client