Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa
File:                     a8644137-6b60-3be7-b264-80e3e2c1a315.roa (raw, json)
Hash identifier:          iQMdjK3F9w6+bxzY0aCoSS1M05AbmeHzdqjSVSQopHM=
Subject key identifier:   19:05:13:78:ED:82:FD:DF:3E:BE:29:7F:27:FC:47:97:4F:21:96:4E
Certificate issuer:       /CN=17c62883-899d-4b86-8800-e9715d10a482
Certificate serial:       010D0C9F4328584BAEC7B5CBD35D60B8156DC740
Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     30305
IP address blocks:        74.113.192.0/21 maxlen: 24
                          204.86.64.0/19 maxlen: 24
                          206.201.64.0/20 maxlen: 24
                          208.93.241.0/24 maxlen: 24
                          208.93.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b5:cb:d3:5d:60:b8:15:6d:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=57fa71a4-e05d-4d43-959d-6c9d14a4ce33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:96:9f:0e:9f:66:3e:25:45:3c:a5:d0:fc:
                    1b:43:76:0c:4d:d2:1b:71:3f:25:5b:d7:2d:c6:5d:
                    51:7c:a6:28:0e:ff:41:26:92:27:57:60:6f:bb:e2:
                    d5:06:0e:ea:4b:86:4d:69:5d:7e:6d:04:dd:6d:e6:
                    3a:6d:8f:82:d8:69:13:92:c5:23:c6:96:b2:5a:96:
                    c4:21:6e:7c:82:bb:81:8d:fc:45:26:59:93:a0:b6:
                    96:ca:ea:63:01:71:a8:75:ce:53:7c:dd:6c:1d:9b:
                    fc:3b:16:ce:06:dc:a0:08:2f:99:1b:f3:4b:c4:79:
                    6a:ac:b4:b9:9b:16:ea:57:cb:c3:d2:5a:66:d1:f8:
                    74:7e:fd:f7:77:f0:00:74:77:ed:e4:6a:83:22:18:
                    a5:e1:49:92:ca:88:09:a8:f9:ab:6e:29:26:59:26:
                    90:3a:fb:d3:e7:14:a0:6c:3b:0a:2a:72:3e:13:e9:
                    0d:b6:b0:0b:32:47:f0:d9:33:00:a3:b5:60:54:b8:
                    8d:e2:94:bd:d1:50:97:aa:d9:06:8d:f2:26:4b:59:
                    b4:9a:e6:f0:17:8c:9d:99:2e:70:81:4e:1a:41:11:
                    f7:1a:72:5f:d4:08:c9:a2:d9:b4:fb:26:29:e2:4b:
                    97:08:a8:ec:56:da:10:d0:35:21:f9:d7:2e:ec:27:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:05:13:78:ED:82:FD:DF:3E:BE:29:7F:27:FC:47:97:4F:21:96:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl

            X509v3 Authority Key Identifier:
                keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.192.0/21
                  204.86.64.0/19
                  206.201.64.0/20
                  208.93.241.0-208.93.243.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:93:a0:93:f3:10:e0:1a:e3:e1:b1:04:4c:3e:c3:c2:ae:71:
         bd:81:d2:3d:c7:ce:1a:83:fe:01:40:c9:67:e4:94:6c:d6:e6:
         49:67:ed:fc:24:58:3d:e0:46:cc:ab:85:51:9a:0e:39:8a:d2:
         18:84:97:99:a9:ea:94:6e:6d:f8:1c:4b:6b:b7:0b:ff:f2:3c:
         70:c1:5c:61:b9:99:84:f5:e5:d3:dd:e5:ff:2c:9d:a3:67:a3:
         6a:77:09:9c:39:ff:39:61:72:29:97:3e:19:40:48:e2:ab:c6:
         15:c3:e7:27:a7:89:a0:aa:d2:ae:7e:b6:3e:31:67:f0:9f:15:
         41:d3:df:bc:c1:c3:94:d0:7a:71:ee:00:5a:40:f9:3a:0c:4f:
         69:6e:ed:fb:f1:32:a0:ee:b0:70:fa:f8:81:f8:a6:8d:57:93:
         02:52:81:5e:82:d1:03:b8:7b:a6:0b:50:13:d7:ea:3a:c8:8d:
         10:db:71:55:c8:ac:f9:d3:f7:01:fd:68:a5:fc:34:ea:36:59:
         b9:22:cc:e4:8d:14:9c:7f:b1:2f:e8:70:2c:6b:48:1b:7b:b5:
         d5:3e:fd:74:1b:0f:4b:53:6b:34:f8:a4:57:e5:d4:30:97:9b:
         8e:bd:31:fd:17:02:bf:77:0c:fe:da:e0:6d:89:fa:29:b8:42:
         92:be:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 21:24:47 2025 by rpki-client