Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa
File:                     650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa (raw, json)
Hash identifier:          fpnUjz6P2xQ1FGO0UPSQmfbVxxAV5YoaD3UwOX3s7C0=
Subject key identifier:   E5:B2:02:40:19:40:AF:B8:49:0F:8C:A5:94:FF:78:74:AE:BD:F2:33
Certificate issuer:       /CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0
Certificate serial:       010D0C9F4328584B719E15D9B81F750265DD98C0
Authority key identifier: 52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa
Signing time:             Tue 07 Oct 2025 15:12:34 +0000
ROA not before:           Tue 07 Oct 2025 15:12:34 +0000
ROA not after:            Mon 05 Jan 2026 16:12:34 +0000
asID:                     0
IP address blocks:        170.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:9e:15:d9:b8:1f:75:02:65:dd:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0
        Validity
            Not Before: Oct  7 15:12:34 2025 GMT
            Not After : Jan  5 16:12:34 2026 GMT
        Subject: CN=04d9c507-eda2-406c-af50-f9b27acc84fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:3f:cc:7e:ff:e7:54:6a:af:47:6d:dc:59:
                    09:3a:b5:9d:44:92:6f:b7:96:51:d1:f5:ef:76:e4:
                    05:91:ec:12:3d:58:d2:0b:1c:41:5a:90:71:04:f1:
                    bf:be:d3:5c:13:f6:31:f9:8d:e1:f0:f6:cd:a3:83:
                    69:7e:c0:9a:ad:40:a8:4f:3c:df:7a:34:64:95:f7:
                    da:ff:cf:52:79:d8:09:f5:49:a5:a0:ca:3d:67:92:
                    4f:32:7d:a8:5e:06:81:28:69:3a:92:22:85:95:57:
                    bc:0f:f7:30:57:57:30:1c:93:e4:e6:27:07:35:b9:
                    a7:92:2a:81:13:63:d7:72:6e:d5:fa:c7:d5:0b:7e:
                    1f:b1:23:ea:15:d5:50:c8:d9:d5:4d:ea:05:d2:05:
                    03:d4:7a:63:99:13:07:bf:cc:39:4c:e5:ae:2c:c0:
                    e6:be:59:8d:78:11:82:be:d3:cd:01:70:e3:a9:57:
                    96:74:74:1b:9b:07:cd:bf:42:e0:27:b9:81:58:a5:
                    69:6e:02:3e:da:51:21:47:1f:8a:07:e8:bf:e9:2c:
                    22:e3:3c:4c:a3:8a:db:a6:e5:89:a0:c6:31:64:2a:
                    8c:54:32:69:c9:05:e8:0d:db:ac:5e:30:60:5d:03:
                    90:b0:b5:00:21:30:98:22:a8:e7:c7:ed:c3:b8:b6:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:02:40:19:40:AF:B8:49:0F:8C:A5:94:FF:78:74:AE:BD:F2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl

            X509v3 Authority Key Identifier:
                keyid:52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8e:33:0a:1f:77:74:f9:32:95:ad:0d:d2:55:80:47:31:06:
         06:df:ca:81:e0:91:1d:99:86:3d:47:0c:d8:54:0b:41:ab:4b:
         df:ff:37:89:94:f2:82:d7:e9:68:aa:33:45:b2:27:cb:79:70:
         76:d1:c8:c1:e0:2a:d5:1d:59:a4:6a:81:99:03:25:5c:59:28:
         4b:80:42:84:ca:34:52:2e:74:dd:af:29:dc:ca:ed:03:34:65:
         ca:fe:7d:34:6b:88:9b:38:27:38:a4:49:d9:d6:4f:f2:58:49:
         a9:02:5a:4d:d0:d7:1f:98:24:32:64:2e:8d:eb:41:6e:8c:a2:
         f6:33:9c:d8:f7:12:9a:71:81:5b:cd:d0:41:96:56:b1:1e:2a:
         90:ec:66:5e:a8:64:9a:fe:74:17:00:f3:64:7a:ef:81:ba:46:
         09:ee:be:a5:33:d0:0e:09:15:3d:af:f4:d4:e9:97:e2:32:e0:
         55:5e:5a:ac:95:c9:0a:e5:74:52:58:25:2e:a0:ea:d1:3a:8a:
         49:1f:df:c8:64:86:20:b1:e0:28:7f:ab:d5:22:01:06:1b:1c:
         ce:34:09:47:c0:e1:90:45:b4:e2:1d:88:78:69:9b:1d:ee:8c:
         f4:7e:81:20:13:54:2b:c6:85:5e:78:43:bd:04:5b:d8:73:05:
         05:51:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:19 2025 by rpki-client