Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/c0272f09-36e0-3a9d-bcc9-ce1439b98b9e.roa
File:                     c0272f09-36e0-3a9d-bcc9-ce1439b98b9e.roa (raw, json)
Hash identifier:          iF0ghpdzf2kLaDyq4UzLz5ypgFDaEgkZrrwSMs/pWw8=
Subject key identifier:   FB:A9:94:9F:12:1C:B6:F6:EC:87:75:17:51:EB:73:CC:F8:89:10:48
Certificate issuer:       /CN=9204022c-f46f-419c-8180-40b9005a833e
Certificate serial:       010D0C9F4328584B72C1F8EDB9606B3004C00520
Authority key identifier: 65:8A:C4:93:A9:45:7B:BC:8A:75:0A:F2:F3:08:B4:39:FE:7A:D2:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/c0272f09-36e0-3a9d-bcc9-ce1439b98b9e.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     393648
IP address blocks:        72.46.76.0/24 maxlen: 24
                          72.46.78.0/23 maxlen: 24
                          204.156.176.0/23 maxlen: 24
                          209.222.65.0/24 maxlen: 24
                          209.222.66.0/23 maxlen: 24
                          216.41.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/9204022c-f46f-419c-8180-40b9005a833e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/9204022c-f46f-419c-8180-40b9005a833e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f8:ed:b9:60:6b:30:04:c0:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9204022c-f46f-419c-8180-40b9005a833e
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=69abc09b-389c-459c-822c-bb9ed7b9e84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:16:12:67:1a:a3:22:62:e3:f1:cb:cb:18:
                    45:29:d6:3f:f0:22:4a:59:dd:d6:e6:80:96:06:c5:
                    62:87:aa:32:14:f2:f3:f9:3f:f6:cf:0c:d9:47:ea:
                    a3:33:1a:38:ec:b0:38:d5:2a:ec:d6:ff:d3:2a:57:
                    1d:56:aa:72:9f:3b:24:c3:59:92:79:4e:ee:62:9e:
                    29:be:19:ca:64:13:57:ef:e0:5b:a2:4c:ad:8b:4e:
                    7d:be:ee:5f:5c:26:69:05:b0:24:43:e8:31:e8:40:
                    d7:bf:b0:dd:a1:a6:83:3f:8c:b1:cc:e0:a3:f6:97:
                    0b:ca:da:58:53:b8:10:26:f8:a8:0c:53:76:df:18:
                    73:c1:66:91:c4:06:21:0a:0c:78:42:af:18:bd:91:
                    0b:05:a9:b6:30:69:88:70:85:58:f2:6d:fb:dc:bd:
                    7a:9b:7c:af:b0:dc:06:b3:68:43:7c:84:7c:7c:5e:
                    b5:00:96:9a:ea:9e:a4:1d:51:b7:25:76:07:50:ec:
                    ba:e7:b6:c9:63:2a:81:ef:5d:f2:f4:e4:24:b4:07:
                    9c:c6:bc:73:04:1e:1b:11:d3:ca:c4:a4:a2:39:00:
                    11:d9:86:71:e8:67:0a:9c:f3:35:84:7d:46:3f:37:
                    8e:64:d2:77:00:c8:09:cd:86:bb:9c:0d:34:10:56:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A9:94:9F:12:1C:B6:F6:EC:87:75:17:51:EB:73:CC:F8:89:10:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/c0272f09-36e0-3a9d-bcc9-ce1439b98b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/9204022c-f46f-419c-8180-40b9005a833e.crl

            X509v3 Authority Key Identifier:
                keyid:65:8A:C4:93:A9:45:7B:BC:8A:75:0A:F2:F3:08:B4:39:FE:7A:D2:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.76.0/24
                  72.46.78.0/23
                  204.156.176.0/23
                  209.222.65.0-209.222.67.255
                  216.41.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:81:0f:90:72:71:b9:0e:f7:95:14:f0:b9:e0:58:b0:6f:36:
         32:38:c8:84:e2:c1:35:1f:0a:b7:46:97:d2:49:22:a2:19:e9:
         4b:2b:9b:0b:09:4e:1e:34:6b:53:8c:a8:02:2b:7d:fb:23:72:
         80:bf:98:f4:b4:9b:f0:d8:46:05:fa:dc:72:da:fc:1e:76:98:
         68:3a:07:d1:dc:c3:4c:08:69:3c:55:da:3e:9a:5d:30:e7:2b:
         35:2d:d7:e9:1f:e5:cd:32:ab:64:3f:82:fe:f8:3f:bb:2f:f9:
         74:03:4f:0c:54:4e:42:f1:e1:bc:4a:83:76:d3:e8:c1:6a:d1:
         a5:9a:7b:b1:ab:66:a6:42:17:28:8f:da:53:23:f3:a1:27:0e:
         0a:8b:3f:63:39:91:a2:ec:3d:2f:8a:25:da:68:64:16:d1:ca:
         77:ca:1f:57:ed:da:80:b6:25:f6:2c:ff:3b:c8:ec:a0:db:91:
         bf:25:20:a6:26:e2:a6:fe:a1:6e:b8:4a:e8:ce:41:bd:e9:f4:
         5f:01:7c:4d:ea:d5:85:5d:92:1e:75:36:30:11:ac:3e:c6:43:
         63:97:77:b7:21:ae:a4:69:a9:46:bb:e2:48:34:ae:52:6b:aa:
         09:3d:f5:92:d3:62:80:2d:17:f1:b8:bc:ff:d1:72:f0:99:a8:
         ae:22:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 02:58:19 2025 by rpki-client