Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
File:                     1e6d92e5-d123-30be-b170-e56ac208e478.roa (raw, json)
Hash identifier:          VVAvvpZQvMMr3SKx4BKG7JKvmLaOjJLtanQs8PZZ+Dc=
Subject key identifier:   2D:27:63:09:A3:4C:A0:28:8C:6F:63:7C:9B:88:A3:AE:64:F8:0A:6A
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584B0CDC1DF12B897A4945138380
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     20473
IP address blocks:        70.34.192.0/19 maxlen: 32
                          70.34.240.0/20 maxlen: 32
                          208.72.152.0/22 maxlen: 32
                          208.76.220.0/22 maxlen: 32
                          216.238.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1d:f1:2b:89:7a:49:45:13:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=02558ac5-8446-4c83-a1b2-1b0c17d778d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:48:d5:89:54:6a:62:48:59:ac:f8:2b:58:42:
                    a8:e3:9e:da:a9:cf:6f:2f:e4:d1:74:f8:51:d9:7f:
                    bc:9a:a4:44:6f:1b:ae:86:31:78:66:e0:48:5d:14:
                    95:23:58:f9:4f:cb:84:93:f3:8a:17:12:b8:96:80:
                    7d:1f:c7:63:06:5d:eb:d3:0c:0a:bb:2d:de:73:75:
                    c0:7f:5f:d2:ee:1f:30:2f:71:b7:a2:c0:b4:3c:0f:
                    e1:69:f6:31:f6:1e:7d:d3:13:79:7d:ae:6d:b7:17:
                    29:04:5a:0e:f7:4c:b1:d3:3c:01:49:b1:83:a8:dd:
                    48:eb:fe:17:18:e7:83:ae:b1:c9:d3:c2:8f:96:3e:
                    2c:a3:bb:e4:f1:cf:23:92:88:00:f4:ca:ad:28:f7:
                    82:36:3a:9c:00:df:e7:66:4e:3a:fb:ce:88:4f:74:
                    a2:af:a7:3f:63:04:39:22:fb:53:f9:48:2d:7d:ae:
                    7b:1a:cb:f8:47:a1:50:93:21:eb:8c:01:e7:13:b5:
                    60:47:7e:22:7b:d2:47:6f:af:13:99:92:4c:77:ab:
                    47:8f:88:41:95:31:0a:2a:d1:71:c5:fb:e8:1d:d2:
                    cc:8c:d4:d1:86:04:3a:83:6c:d3:53:7c:0c:18:57:
                    07:05:1a:6d:4a:b6:60:fc:87:d2:2e:a6:77:32:e6:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:27:63:09:A3:4C:A0:28:8C:6F:63:7C:9B:88:A3:AE:64:F8:0A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.34.192.0/19
                  70.34.240.0/20
                  208.72.152.0/22
                  208.76.220.0/22
                  216.238.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:04:3e:8e:96:c4:2b:86:56:fe:00:f5:0e:38:52:d2:96:0a:
         94:54:ae:b5:c3:fb:72:53:9b:58:43:e5:71:98:ea:fb:87:f0:
         79:df:80:d7:87:a4:20:dc:e0:bd:52:27:0a:56:3a:ba:fe:35:
         32:f0:75:43:01:cb:69:ea:06:66:0e:8d:ed:33:9a:28:ca:46:
         6b:6c:50:6e:ff:6f:89:09:cc:84:52:fb:f9:6a:b0:24:7a:bc:
         51:3a:55:0c:22:69:c5:38:12:67:7d:b5:7b:e4:57:17:31:47:
         98:91:41:8c:46:22:c5:df:de:16:36:0f:fd:83:26:e3:7b:0f:
         e7:30:f1:f1:74:c9:9a:88:5a:ce:06:42:c6:54:ee:4d:48:e3:
         72:6c:ca:81:1c:90:95:de:e1:9d:30:1a:54:60:2f:b8:54:8f:
         49:f8:43:c9:d1:a8:4c:32:30:e9:84:cf:30:56:85:cf:58:e4:
         90:4e:42:a2:c2:3d:0e:c5:24:c3:be:26:44:63:5b:c0:ed:86:
         a0:4b:a9:a6:54:81:f1:4f:7a:a5:5f:69:7c:74:d7:59:bb:8e:
         19:aa:c1:c9:bb:e5:4e:0c:20:d4:f0:9a:2a:4c:40:7f:2c:74:
         83:19:a2:8e:ec:9e:fb:77:01:17:0b:cd:5a:c5:61:7e:b2:99:
         af:cc:cb:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 13 22:12:30 2025 by rpki-client