Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
File:                     62dd0302-3085-3f70-8edd-449ecdbc6149.roa (raw, json)
Hash identifier:          qAUtFT2UHpGdzd9u6k3XP6NhIjB75sLXd6vwCOLPfp8=
Subject key identifier:   92:A7:82:CF:1E:DD:2F:C0:0F:16:45:62:68:CB:20:3D:86:D9:F2:72
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584B80B76DA2E6B335F320215D00
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     33211
IP address blocks:        206.41.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:6d:a2:e6:b3:35:f3:20:21:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=76d3208e-7278-4dad-93d6-705cdd4062f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:db:b1:1c:3d:20:3d:6d:23:04:14:f2:70:
                    af:62:04:d9:df:ff:53:e2:88:07:93:c2:76:65:9c:
                    8e:32:e7:0a:25:7a:3c:aa:92:28:0b:9b:ec:6f:e3:
                    63:7c:76:40:3e:e8:50:df:e4:ef:1b:b5:b3:19:af:
                    c4:51:7b:35:2d:73:d8:88:10:e2:e0:19:05:9c:89:
                    5f:9d:b1:b7:a2:36:33:bb:c9:cb:75:e3:4b:a4:0b:
                    7d:4a:2c:9f:86:46:f8:76:6c:17:3c:00:f1:c7:8a:
                    29:74:f7:ae:98:a1:ac:2a:0d:2e:0d:c6:d4:6c:3d:
                    b8:f0:50:d6:dc:04:c6:30:60:4b:d8:77:d2:29:20:
                    7d:48:f9:9d:4f:09:91:08:f9:aa:88:0c:89:b0:0d:
                    e6:5c:c2:28:1b:46:72:41:c9:1f:8e:d3:ce:c2:aa:
                    08:59:a0:99:bd:99:fe:b1:b7:1f:87:3a:3d:5c:52:
                    91:49:fd:e7:90:af:89:a3:7e:34:e5:21:3e:fc:0c:
                    73:a9:3a:5d:b7:d5:02:65:99:5d:52:e3:75:d8:51:
                    f7:54:bb:14:ac:ed:25:17:c9:53:5f:6c:83:d2:63:
                    e1:5d:8b:2f:55:0e:81:1e:42:9f:04:a1:7f:24:18:
                    c6:38:53:ef:88:32:1f:14:ab:49:5a:58:59:8a:ee:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A7:82:CF:1E:DD:2F:C0:0F:16:45:62:68:CB:20:3D:86:D9:F2:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:02:22:b7:5d:a4:2c:d9:67:39:ae:0f:53:1a:5a:27:89:
         60:5f:9d:aa:4a:99:49:2e:fc:d4:9b:7c:d7:15:b3:3d:78:35:
         f8:4d:14:62:0c:67:49:a7:91:19:b6:47:1d:85:fe:74:6f:f2:
         85:d5:e7:bc:43:1a:63:c4:b7:f8:88:88:4e:a3:47:05:c4:a2:
         68:09:aa:62:d0:1c:6d:9a:37:03:88:7b:dc:8b:1f:a0:db:61:
         85:ad:20:af:0e:db:40:cb:2f:d5:ae:18:27:b3:aa:45:45:3e:
         55:bb:8a:e4:f7:c4:1f:13:63:15:ce:5b:87:de:7e:63:3c:68:
         15:db:42:80:f5:86:99:b3:ec:1d:71:ca:86:1f:76:c5:cb:f6:
         db:84:68:da:1c:10:c1:e1:a0:eb:88:52:d5:96:ef:cd:07:68:
         5a:a9:d0:59:76:27:16:b9:26:93:12:02:e3:f9:2f:2d:47:28:
         d0:29:e6:25:be:5e:48:44:9c:35:8a:82:f6:f6:6e:91:5a:42:
         4e:e1:8c:0e:5c:c2:42:a6:03:e6:d6:7b:b4:f3:1c:4b:eb:c7:
         94:02:82:57:26:a4:e4:8c:a5:1b:06:41:ca:cd:3c:42:18:ef:
         ca:1c:1d:f5:b9:e1:6b:43:e3:86:cf:ad:7b:d0:f5:0c:03:a9:
         83:fc:76:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 11:38:22 2025 by rpki-client