Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/fea04f34-07b4-3082-99e9-e332389caf7c.roa
File:                     fea04f34-07b4-3082-99e9-e332389caf7c.roa (raw, json)
Hash identifier:          s1pH/6BWu1ABp5TDD9PCJ/pdJYeZf+uefGzZv5VvdjA=
Subject key identifier:   27:74:8F:DB:C6:AC:E8:E9:33:56:37:EC:67:92:A6:45:C1:CE:92:1C
Certificate issuer:       /CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
Certificate serial:       010D0C9F4328584B89177C1AB76CB3AFDD31F800
Authority key identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/fea04f34-07b4-3082-99e9-e332389caf7c.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        206.201.168.0/24 maxlen: 24
                          206.201.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7c:1a:b7:6c:b3:af:dd:31:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=d8b01102-ec99-4f0d-a7e7-992ce8bc2163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:97:e0:a6:8e:2d:ef:a3:76:f8:df:c8:10:
                    fc:3e:c3:6f:80:87:cc:84:e9:24:c4:c9:8d:cd:b5:
                    9c:78:b6:8d:90:c3:65:9c:1d:11:19:6b:bb:75:7a:
                    82:32:41:9c:9b:e0:c6:c1:f7:c6:05:83:8e:db:fa:
                    55:2f:14:1a:c6:f7:eb:ce:c6:0d:2a:33:ff:51:2a:
                    e7:85:31:55:9e:2a:71:b6:a6:31:bd:82:10:c0:97:
                    bb:20:86:42:35:c5:cf:4b:8f:a1:dc:6d:a9:94:83:
                    c4:03:6a:1f:a9:fe:4a:64:93:08:4c:6b:34:22:eb:
                    6c:ad:43:c9:7b:ee:49:c2:7b:cc:7a:a2:34:9f:6c:
                    fd:a7:0d:5d:63:d9:f9:74:c7:35:bc:00:64:d4:18:
                    08:f8:bb:ca:7c:62:0c:07:fc:e6:f1:73:23:a6:7b:
                    b2:eb:dc:a0:0b:19:52:0d:cc:f1:e8:50:5e:5a:03:
                    8d:5c:cd:63:c9:fc:fc:ee:9d:80:20:0d:b8:e1:e8:
                    ad:50:cd:05:67:c1:38:9f:d1:53:f7:91:65:d0:07:
                    1c:0e:91:6c:2f:9e:d8:d6:fa:b5:3f:8e:ee:1c:bf:
                    06:41:81:19:bd:c7:48:e3:92:f4:d7:0f:14:69:8a:
                    5c:94:49:01:7e:d8:2e:ae:d4:bb:7f:ca:ff:4a:bd:
                    c6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:74:8F:DB:C6:AC:E8:E9:33:56:37:EC:67:92:A6:45:C1:CE:92:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/fea04f34-07b4-3082-99e9-e332389caf7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl

            X509v3 Authority Key Identifier:
                keyid:A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:cb:8d:21:f3:2b:29:aa:79:4d:02:30:83:e5:a4:f9:44:
         ca:73:c3:d2:5b:5b:7a:d6:40:9e:a0:39:09:ea:1f:5d:c8:60:
         e6:07:98:e1:a0:3e:35:30:e0:55:00:06:c2:93:99:f4:a2:69:
         34:5d:d5:7e:ee:1a:77:66:86:9f:2c:c9:77:64:aa:e8:22:76:
         e6:57:06:e9:5c:c8:32:62:15:29:b3:21:39:8f:91:c0:26:50:
         65:1d:4b:6e:77:74:d7:7c:5b:9a:4c:bd:c4:37:de:18:92:ea:
         17:27:ff:f4:2e:0c:a2:09:6a:d8:3f:3a:5d:71:d0:b3:94:6d:
         e4:ad:cf:a3:86:eb:76:5c:9f:85:b6:99:a4:6e:ef:41:27:c6:
         88:6b:c7:19:0b:70:21:8b:9c:8e:b6:bd:14:2d:6d:6b:68:2d:
         87:2c:91:74:62:cb:1d:30:23:98:a6:b8:2e:75:58:3a:6f:74:
         cd:66:a1:70:17:9c:ba:13:27:e8:4c:0e:54:48:ce:6e:ce:5a:
         62:a7:6c:39:54:b3:87:2a:64:55:78:d5:2d:5d:9b:61:5f:5e:
         61:ff:8d:a0:4f:7c:9e:bf:a8:29:a6:62:9a:bf:e6:2b:ea:54:
         82:2f:17:3b:d8:ba:28:f8:b0:37:7a:6d:1e:72:d2:fd:6f:5e:
         2b:f0:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:48 2025 by rpki-client