Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/7001d8f6-98e6-325a-aa3f-85af31d48333.roa
File:                     7001d8f6-98e6-325a-aa3f-85af31d48333.roa (raw, json)
Hash identifier:          /4EUyqAnkv+XJFyYYYNNBZK6oscwQK7dVocuccMbA0w=
Subject key identifier:   83:BA:00:DD:10:E0:94:9A:36:DC:81:50:85:16:A6:98:2E:15:D5:7B
Certificate issuer:       /CN=e5a14f8e-0246-4348-b099-d30bc5afba9f
Certificate serial:       010D0C9F4328584B63673D42A74596C1B8660D00
Authority key identifier: BD:F7:0C:5B:43:16:14:25:87:D8:8E:C3:37:E9:E4:FE:D8:BC:2C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/7001d8f6-98e6-325a-aa3f-85af31d48333.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     6939
IP address blocks:        162.247.140.0/24 maxlen: 24
                          162.247.141.0/24 maxlen: 24
                          2605:f980:b001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/e5a14f8e-0246-4348-b099-d30bc5afba9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/e5a14f8e-0246-4348-b099-d30bc5afba9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3d:42:a7:45:96:c1:b8:66:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a14f8e-0246-4348-b099-d30bc5afba9f
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=b9bdc0f1-b903-49ea-85ea-744d027e4e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:7f:24:3c:84:80:7d:e3:eb:73:8f:d6:e2:
                    0a:60:c2:ff:fa:f0:c6:53:8e:f6:70:a2:d3:90:af:
                    cd:5d:4f:bf:42:34:cc:62:01:11:fb:60:f9:a1:11:
                    8b:bc:67:8f:3a:1a:55:b5:48:34:e6:c1:16:25:f7:
                    99:7c:ea:43:9b:28:15:22:02:be:e7:16:08:ac:9c:
                    e0:03:43:61:09:65:f0:f5:80:e7:30:38:1d:05:50:
                    09:f6:86:78:3c:c2:83:7a:fb:d2:9a:2a:19:58:23:
                    22:ec:9c:aa:cf:98:19:00:7d:17:c9:0a:39:05:c1:
                    4c:e4:87:76:25:e9:e4:ce:fd:50:5f:a6:0a:3f:86:
                    7f:52:9f:02:cb:e7:48:93:44:ba:5e:ff:fc:17:e5:
                    03:58:b4:b0:0b:1e:d7:42:32:93:f0:8c:cd:36:02:
                    aa:e2:c4:70:ca:26:47:9a:2d:6b:07:45:0c:e5:37:
                    0d:18:25:44:85:68:6d:a2:04:42:47:c7:9e:12:1a:
                    c9:ef:07:a6:82:6a:82:b0:2c:55:54:c6:56:d6:18:
                    23:78:46:c3:04:b1:92:65:53:55:a7:c0:9d:43:68:
                    b7:72:07:1c:b2:de:c6:df:20:28:43:f5:80:e6:14:
                    a2:72:60:14:8d:44:40:93:1b:7a:34:c9:4d:35:d5:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BA:00:DD:10:E0:94:9A:36:DC:81:50:85:16:A6:98:2E:15:D5:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/7001d8f6-98e6-325a-aa3f-85af31d48333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f/e5a14f8e-0246-4348-b099-d30bc5afba9f.crl

            X509v3 Authority Key Identifier:
                keyid:BD:F7:0C:5B:43:16:14:25:87:D8:8E:C3:37:E9:E4:FE:D8:BC:2C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e5a14f8e-0246-4348-b099-d30bc5afba9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.140.0/23
                IPv6:
                  2605:f980:b001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:aa:ad:58:2a:b7:4a:83:3d:30:90:fe:1f:a4:4d:12:88:
         a9:c1:35:b6:e5:83:b4:bf:78:64:1c:34:13:55:c8:be:44:62:
         52:65:c2:2b:a6:72:76:24:6e:45:d0:f6:3f:f2:fc:63:c3:01:
         86:a5:40:e8:bf:d1:cc:c8:d4:3c:41:cd:2a:fd:12:e3:81:5e:
         e5:52:6f:83:2b:87:2e:50:bd:2b:eb:98:c0:14:f4:3e:ff:df:
         c4:f0:a7:8d:88:0c:f6:b4:6a:af:4f:67:c6:74:e3:95:f8:80:
         72:90:d7:5b:3b:99:c8:e5:74:7a:5f:60:2c:b2:9d:73:26:f4:
         28:a2:fa:0f:c5:81:26:fc:72:bd:eb:ce:ff:2a:bb:81:ad:5e:
         1f:15:49:8c:d1:e6:e2:c9:fe:2c:d3:3a:b0:05:1c:e7:4f:1c:
         22:0b:2a:1f:e0:49:3c:e6:51:e3:d4:0c:75:ae:db:50:b5:53:
         aa:83:95:80:ae:28:6d:f7:84:9f:61:b0:96:26:aa:8b:a2:e7:
         e7:88:6d:45:a5:06:c9:f1:d9:0e:60:f5:fa:12:00:65:ca:5f:
         0b:c5:0a:5a:e8:80:41:0e:c7:03:f7:12:e7:f8:0e:de:a9:47:
         35:cf:2e:8d:13:73:88:c6:b7:84:2a:0a:30:8d:cd:f7:bc:cd:
         d4:00:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:36:33 2025 by rpki-client