Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4c6fa256-56c5-3d60-8844-419c8aa16499.roa
File:                     4c6fa256-56c5-3d60-8844-419c8aa16499.roa (raw, json)
Hash identifier:          Zgrr+9N6kMVvhzW0w+CstQBefyflM5zNrB2bN7+CRXk=
Subject key identifier:   4E:6C:EB:5B:10:7E:8E:82:F2:99:3D:F3:2E:24:60:0B:41:84:2E:D8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B2719D5A0991B7220B4721A80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4c6fa256-56c5-3d60-8844-419c8aa16499.roa
Signing time:             Wed 10 Sep 2025 22:36:17 +0000
ROA not before:           Wed 10 Sep 2025 22:36:17 +0000
ROA not after:            Tue 09 Dec 2025 23:36:17 +0000
asID:                     54253
IP address blocks:        151.104.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:19:d5:a0:99:1b:72:20:b4:72:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 10 22:36:17 2025 GMT
            Not After : Dec  9 23:36:17 2025 GMT
        Subject: CN=bb081a6c-9eec-4df1-9d94-3d6dfd712821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:4b:ca:29:73:c5:e1:f7:77:e8:45:4b:ef:
                    00:54:74:37:f1:cb:4e:95:9d:14:4c:e9:05:c7:78:
                    47:b3:0a:34:a7:df:d0:f9:d8:7e:1e:da:6b:7e:b0:
                    df:46:3c:72:4c:af:d1:df:5d:ec:37:ab:52:5e:0f:
                    7f:5a:b6:2e:7e:aa:21:d8:34:4d:3e:e3:06:1c:e8:
                    63:91:c2:6a:5a:ea:a2:84:97:e5:4f:be:0f:bc:2d:
                    5e:6d:39:5f:f2:07:e6:32:e7:98:cd:1a:48:eb:91:
                    e8:39:b1:99:c2:77:6c:35:43:17:c3:dc:6c:ac:57:
                    5d:b7:c6:2e:0f:98:2c:28:e6:27:0f:7b:22:23:40:
                    3b:ce:7b:18:85:a3:9a:92:8a:67:c8:a9:a3:d7:51:
                    fa:56:9c:4e:5b:ec:dd:83:11:77:92:e2:c1:6a:f6:
                    b1:0f:e5:5d:a8:ad:8e:7f:00:a8:bc:8e:03:29:71:
                    18:9e:47:05:c2:fc:0e:96:ea:5b:31:0c:45:a2:50:
                    c8:4b:31:ff:e0:0d:f6:6d:9a:b8:ab:93:63:0e:9d:
                    13:36:72:03:20:99:17:de:9f:4c:99:9e:97:2a:c6:
                    86:ee:a2:06:a4:a6:cc:d5:77:ec:3f:d2:f9:5f:cc:
                    c9:ae:18:e2:9d:6f:ae:e4:72:b4:57:cc:0c:cc:9f:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6C:EB:5B:10:7E:8E:82:F2:99:3D:F3:2E:24:60:0B:41:84:2E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4c6fa256-56c5-3d60-8844-419c8aa16499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.104.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fe:30:75:52:e9:70:99:05:6b:d5:0e:74:83:d2:f2:fc:24:
         aa:13:35:ea:ff:72:cc:77:36:89:14:6c:39:37:57:50:75:80:
         74:54:05:88:94:7a:15:92:3c:c4:d2:82:c5:7c:e3:38:53:81:
         be:1a:8a:a7:7d:c4:19:99:7c:4b:f8:2f:52:47:0d:79:96:7f:
         55:23:ac:35:8b:fb:fb:e5:eb:06:63:7c:64:9f:83:d2:d8:33:
         ab:a3:53:02:65:b8:49:20:24:a2:b3:7a:ce:ac:d2:29:ae:1b:
         c9:71:84:3c:6f:12:d6:88:4a:f2:fa:61:f9:a8:8f:e7:7f:4a:
         a1:61:87:96:ab:84:e1:5c:92:fc:c3:ed:46:10:5c:f3:29:0b:
         ff:0c:97:df:e0:e5:16:73:0e:60:8c:3d:f9:27:90:7a:40:4a:
         3a:c9:a3:00:a0:17:c4:25:59:c2:8f:82:49:75:14:78:e9:ad:
         a9:9e:53:8d:1f:4b:0d:97:2a:fe:83:f5:c5:ad:f9:6a:21:53:
         91:f1:ac:ab:a1:8e:9c:8b:eb:ea:51:60:56:65:64:cf:64:9e:
         da:45:e0:9a:28:22:af:91:f4:65:05:6a:7f:44:95:de:84:0b:
         1d:ec:75:ba:98:64:26:9e:c1:b6:d5:e1:97:ec:f8:1a:5c:37:
         1f:24:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:12:41 2025 by rpki-client