Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/65c28fc6-f7ff-39de-81cf-9e3c85bf7fcd.roa
File:                     65c28fc6-f7ff-39de-81cf-9e3c85bf7fcd.roa (raw, json)
Hash identifier:          gd6TXu9PipsxM6Sh+w7JlWeOktqG8Wu2Jftthkv/J7k=
Subject key identifier:   82:2E:EE:B5:5A:0A:28:97:36:46:D6:40:09:72:50:7A:43:86:EA:57
Certificate issuer:       /CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
Certificate serial:       010D0C9F4328584B99D781157F65E72E7B5C6480
Authority key identifier: B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/65c28fc6-f7ff-39de-81cf-9e3c85bf7fcd.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     33083
IP address blocks:        69.166.8.0/23 maxlen: 23
                          192.34.80.0/21 maxlen: 21
                          199.217.104.0/22 maxlen: 22
                          208.89.60.0/22 maxlen: 22
                          2602:ff65::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:81:15:7f:65:e7:2e:7b:5c:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=5442035b-89fe-43af-92cc-275d30604ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:29:f1:18:d3:43:88:08:6c:31:72:85:a4:
                    78:67:bc:0c:39:e5:62:f4:bf:e1:ac:27:21:4e:06:
                    0f:1e:20:36:e6:c5:52:9f:83:96:ac:ad:c0:af:94:
                    56:c9:22:1f:55:5a:f3:e8:58:2a:f5:87:ac:a7:f9:
                    f9:7a:57:9a:29:d6:9b:e2:60:ff:05:b2:f8:00:5a:
                    1b:58:f4:48:25:b1:24:5b:22:79:26:a0:76:b7:22:
                    17:ed:7c:32:9c:41:30:d3:ae:67:93:22:1b:2c:45:
                    40:67:15:fd:fe:7c:2b:af:c1:47:d9:d4:13:ca:c7:
                    40:e2:a5:77:8a:3b:65:51:05:fa:3f:d2:37:78:62:
                    5a:d5:00:07:ae:ce:5d:46:2b:4b:22:fe:3a:fa:63:
                    a0:33:57:82:78:59:cc:54:6b:23:4d:e4:ef:be:95:
                    e2:0e:d9:69:4e:0e:08:80:c0:74:17:5e:ea:68:70:
                    94:ee:6a:49:83:c8:b1:57:7d:ca:bd:a4:fb:c2:3a:
                    b7:c4:73:30:0f:e6:93:cc:51:3f:94:7c:b1:1a:e7:
                    08:32:88:b8:3e:ef:84:33:39:be:cf:ee:2b:ca:1b:
                    92:c2:6a:8a:d3:0a:e9:39:84:0a:e1:71:68:8d:60:
                    0d:41:05:78:aa:1d:99:10:16:8f:75:94:31:80:a3:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2E:EE:B5:5A:0A:28:97:36:46:D6:40:09:72:50:7A:43:86:EA:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/65c28fc6-f7ff-39de-81cf-9e3c85bf7fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.crl

            X509v3 Authority Key Identifier:
                keyid:B3:72:04:BD:57:C2:41:F9:3B:8D:BA:5B:61:B2:CB:86:A7:3F:29:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5c4944c4-0456-4c3c-9ba7-90e3bcbe47b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.8.0/23
                  192.34.80.0/21
                  199.217.104.0/22
                  208.89.60.0/22
                IPv6:
                  2602:ff65::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:7e:52:d0:c5:e3:b5:89:7e:a5:33:14:cd:e2:01:e3:2d:f9:
         36:c9:8c:27:6e:1f:9d:55:f0:a2:db:92:44:0b:29:96:9c:d0:
         d9:11:ef:59:85:70:0d:f0:e2:57:da:f6:8d:6a:a3:21:6a:b0:
         f1:d4:3a:2c:bf:38:3e:55:35:95:98:d7:8b:ea:32:6a:fa:b0:
         ab:17:c8:ac:55:fa:30:97:b2:4a:c7:ea:4b:80:79:6e:60:ff:
         f4:5d:d5:49:7b:87:94:c4:85:9d:2b:03:f2:a8:cc:d3:05:39:
         89:27:fe:3b:c2:c0:6e:36:50:b7:c6:e5:76:cd:56:c9:f6:14:
         19:49:3b:e0:c9:5d:05:99:d7:c1:39:23:9e:6e:7f:d6:de:99:
         c0:e5:cc:47:41:1e:53:fe:1a:17:b2:f8:d0:ec:e5:2d:08:d1:
         5e:da:85:21:56:32:2c:c5:dd:c0:51:c3:1f:09:8e:06:82:d3:
         6a:f7:88:7c:49:30:48:e4:cc:c2:3b:3b:21:78:1f:d5:2d:99:
         b0:a1:0c:5a:3d:7b:21:c4:c4:e4:2f:d5:07:a9:49:2b:f0:9c:
         db:e9:36:32:6e:01:fc:ea:08:1b:8c:a6:ce:15:b7:6d:ce:a0:
         9b:cf:f7:df:12:b7:60:51:da:5d:72:b1:9e:93:d9:d3:76:d8:
         7b:76:06:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 22:22:38 2025 by rpki-client