Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa
File:                     6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa (raw, json)
Hash identifier:          4I7WvdA7/YdHTnm2tyml7qfKbJiX+xGZfwGjv4ymDXw=
Subject key identifier:   FE:B4:7B:01:D9:8A:A2:9B:26:58:90:0B:93:B6:D5:F1:A3:35:47:12
Certificate issuer:       /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial:       010D0C9F4328584B41E722FB19B33555F81A5200
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     27628
IP address blocks:        198.169.125.0/24 maxlen: 24
                          198.169.127.0/24 maxlen: 24
                          198.169.132.0/24 maxlen: 24
                          198.169.133.0/24 maxlen: 24
                          198.169.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:22:fb:19:b3:35:55:f8:1a:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=408a84ff-a8b1-4bc3-b1a8-5beaa77bc4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:c0:59:39:2e:c5:e2:79:97:9f:84:46:3b:
                    1f:3e:0a:7b:ac:f9:03:fb:ff:28:fc:97:7c:62:64:
                    cd:d5:4f:61:53:9c:33:66:4c:ad:23:25:84:36:1b:
                    ae:b4:aa:73:df:ab:1c:91:b9:49:e3:73:6b:98:bd:
                    cd:a8:81:11:7a:e7:bb:ca:93:ef:06:49:66:28:84:
                    d7:be:d4:9c:02:eb:cc:d8:08:99:a6:03:c4:c6:74:
                    e2:d2:ff:02:35:91:cf:ae:72:5a:68:50:4b:92:aa:
                    1b:d2:8b:c2:b2:53:b4:36:96:0d:2b:89:e7:93:da:
                    2a:37:5e:67:96:76:85:1e:21:86:91:5d:88:a2:dc:
                    e2:1d:30:14:ed:7f:fe:4c:91:51:5a:9c:4b:e9:1b:
                    7f:98:60:1d:24:3a:78:cb:29:3e:1d:e6:68:47:7d:
                    52:eb:e8:8b:05:3c:8a:3d:be:d1:2a:3f:0f:bb:6a:
                    eb:de:1a:48:63:de:37:0b:5c:a0:aa:c4:d6:9b:c7:
                    8d:0d:ca:98:50:de:95:4e:15:15:33:e9:fa:a0:4b:
                    99:65:4f:35:fb:b6:98:79:bf:f8:22:f8:c5:16:47:
                    50:55:14:f9:07:0d:fd:71:36:94:db:57:b9:56:46:
                    e5:46:c4:de:f9:21:99:5f:71:a5:9b:a7:7b:80:93:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:7B:01:D9:8A:A2:9B:26:58:90:0B:93:B6:D5:F1:A3:35:47:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.125.0/24
                  198.169.127.0/24
                  198.169.132.0-198.169.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:31:6d:1c:ca:2e:aa:83:0e:d9:c5:3c:69:7e:18:da:28:ea:
         56:22:a3:c4:35:02:f7:ee:ba:99:69:94:00:40:4a:4f:3d:d5:
         b0:92:c7:73:7e:bd:73:73:51:60:f8:6e:67:bc:73:a9:9e:77:
         e0:a8:ba:9d:59:4a:69:b4:ce:7d:69:ce:52:92:6b:ee:52:e8:
         80:a7:95:c0:f8:ac:f1:2e:5e:2a:f5:ab:5d:9f:af:18:d9:fb:
         6b:97:6e:68:96:86:37:a6:78:46:0c:70:c4:ae:15:e9:31:db:
         59:55:40:56:b4:09:b8:32:9b:c0:96:85:9a:5a:de:91:f7:da:
         10:84:a6:43:26:8c:71:55:a9:35:4c:71:7f:c6:58:01:36:29:
         62:c2:5f:f2:26:a8:65:b4:78:62:29:c7:1f:a7:62:97:41:33:
         1f:a7:f4:1e:00:48:40:4e:19:5f:8a:25:90:08:f9:1e:b2:e3:
         2c:1c:98:c6:c8:3c:7e:51:75:34:ac:d2:94:cd:6a:b1:14:25:
         37:3a:2b:ca:92:07:0c:dd:48:99:0d:49:57:5c:e9:66:08:b2:
         56:8e:42:6a:a2:fb:ef:aa:00:6c:4f:24:a7:a1:5a:3a:b7:aa:
         fe:69:70:cf:fb:32:56:d2:c4:20:fd:54:c4:08:98:4d:64:aa:
         9d:1f:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 09:00:05 2025 by rpki-client