Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb93ab63-617a-4ba2-8324-6eab15c0037a/26a4a71c-a284-3dca-a2b3-5bc55d4053d4.roa
File:                     26a4a71c-a284-3dca-a2b3-5bc55d4053d4.roa (raw, json)
Hash identifier:          iQ3/SSAgG1K8I8oibksq98TISNyyAZeLCJsSXtbEWOk=
Subject key identifier:   2B:82:DF:CE:BD:78:11:7E:7A:23:4B:1F:39:51:F9:A6:66:13:CB:C4
Certificate issuer:       /CN=eb93ab63-617a-4ba2-8324-6eab15c0037a
Certificate serial:       010D0C9F4328584B3821A23B9A919D1397713180
Authority key identifier: 61:C6:9A:3F:D8:B6:B0:4E:38:47:D0:42:67:61:CB:B4:5F:BA:4D:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb93ab63-617a-4ba2-8324-6eab15c0037a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb93ab63-617a-4ba2-8324-6eab15c0037a/26a4a71c-a284-3dca-a2b3-5bc55d4053d4.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     33743
IP address blocks:        204.13.144.0/22 maxlen: 24
                          2607:f168::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb93ab63-617a-4ba2-8324-6eab15c0037a/eb93ab63-617a-4ba2-8324-6eab15c0037a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb93ab63-617a-4ba2-8324-6eab15c0037a/eb93ab63-617a-4ba2-8324-6eab15c0037a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb93ab63-617a-4ba2-8324-6eab15c0037a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:a2:3b:9a:91:9d:13:97:71:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb93ab63-617a-4ba2-8324-6eab15c0037a
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=b8341701-2fd4-4f1d-8f08-f5200528c121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:a5:57:a5:4e:1b:57:c5:ef:d1:4f:fd:70:
                    ee:a7:70:96:70:0b:d6:8d:7f:7d:5f:25:23:e9:ca:
                    38:7e:5a:cc:80:a1:0a:4c:59:12:56:16:c8:1f:1e:
                    7c:4a:f5:eb:d1:3e:38:03:56:fe:7b:85:d9:f2:1e:
                    28:e9:28:1e:1c:c9:50:34:9e:9b:f5:ae:41:9e:d1:
                    05:ec:53:64:e6:e8:03:16:f5:2a:d0:d2:2d:3a:90:
                    e6:6d:61:4a:e0:8d:db:c5:84:a1:4f:10:08:9f:0b:
                    67:20:b5:78:06:d4:e5:ae:5e:41:45:59:c8:3d:6f:
                    31:cc:06:c5:5e:a4:86:52:70:ab:f5:8e:8e:ad:d3:
                    62:f2:d0:4b:51:f5:26:2c:14:a8:68:38:51:73:c8:
                    ad:1e:da:4e:8d:03:7d:04:76:72:52:23:cb:2a:45:
                    dc:b6:1b:0b:e8:95:be:6c:b1:22:12:c9:4f:e7:d1:
                    d8:35:c9:fb:3f:9f:38:be:34:6b:33:ec:bc:a7:a3:
                    0d:81:be:33:45:f4:0c:f0:f9:f0:b4:0f:1c:ff:13:
                    f4:12:3c:37:09:c8:dd:05:0b:37:96:04:14:c2:a9:
                    f7:df:63:56:8b:4a:48:c7:c9:44:99:66:f3:c7:69:
                    c9:16:17:79:52:1c:0a:ef:77:b8:fc:84:54:57:41:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:82:DF:CE:BD:78:11:7E:7A:23:4B:1F:39:51:F9:A6:66:13:CB:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb93ab63-617a-4ba2-8324-6eab15c0037a/26a4a71c-a284-3dca-a2b3-5bc55d4053d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb93ab63-617a-4ba2-8324-6eab15c0037a/eb93ab63-617a-4ba2-8324-6eab15c0037a.crl

            X509v3 Authority Key Identifier:
                keyid:61:C6:9A:3F:D8:B6:B0:4E:38:47:D0:42:67:61:CB:B4:5F:BA:4D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb93ab63-617a-4ba2-8324-6eab15c0037a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.144.0/22
                IPv6:
                  2607:f168::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b2:e5:44:a9:62:61:f4:17:bf:0a:ef:f6:ec:3d:3f:32:a6:
         85:4e:b7:31:1a:37:02:fb:98:34:b2:39:44:c5:8a:86:25:ec:
         96:b8:e7:d5:8e:01:23:3f:e0:f4:1b:d6:a5:a9:ae:7e:bf:58:
         7d:6b:47:39:01:6b:f4:4b:15:cf:f4:b9:50:0d:22:f4:2c:87:
         43:e9:ed:90:eb:24:93:74:fe:5e:a1:2a:ca:23:f6:57:d4:ce:
         e4:06:b3:ed:ea:cb:1b:54:c0:c4:76:45:1e:f3:6b:fd:2b:11:
         57:04:02:b1:fc:8d:c7:71:65:42:1c:d4:9b:85:50:c5:42:09:
         35:9f:db:e7:de:dd:e8:3e:9b:18:61:ee:3c:03:50:65:b9:e9:
         61:e9:97:ac:7b:52:18:c8:f7:b1:47:84:f6:a7:d6:84:0f:0d:
         8e:af:24:0d:93:72:d9:ba:39:4b:a1:1b:19:33:58:79:85:6a:
         b4:c1:28:9d:85:f2:a7:dc:60:87:ee:e2:94:d1:05:52:c2:11:
         b0:c3:a7:52:ae:a4:01:5e:cd:1d:2a:e1:6e:bc:10:19:1d:17:
         f4:93:3d:eb:1f:8c:f4:50:2d:b6:16:cc:ca:5a:f1:0a:d0:54:
         1e:c2:6b:26:c4:8d:48:54:6e:95:ba:89:0e:ee:08:70:5e:04:
         cd:ad:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 11:31:42 2025 by rpki-client