Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa
File:                     658f8956-451b-3b57-883e-5ede69e83e94.roa (raw, json)
Hash identifier:          szmrJi+XvPgwEWAS08wXVFclMaXaGSklvB9/dE10NUU=
Subject key identifier:   BC:6F:63:E8:88:49:DF:19:97:07:B2:4C:44:7D:8B:3F:6E:98:D4:BB
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584B99D7907BA869339CE5DAC180
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     3737
IP address blocks:        204.186.0.0/16 maxlen: 24
                          209.50.128.0/19 maxlen: 24
                          209.173.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:90:7b:a8:69:33:9c:e5:da:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=daca9114-7ea7-41bb-92fc-dee6462926eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:07:af:15:f5:ea:4c:a6:f1:d1:a0:b0:2c:d0:
                    81:bb:99:3a:8f:64:c9:b6:bc:fc:d9:26:91:90:01:
                    79:e9:ef:82:46:50:58:7d:50:3c:ba:c4:f6:37:56:
                    2d:21:5f:43:a9:51:0c:93:f2:9b:fa:8c:fa:6d:18:
                    55:fd:8d:ea:47:c9:dd:09:6e:dc:80:07:c8:f9:4d:
                    40:8d:84:25:b0:fd:d7:ac:d0:1d:2c:03:b0:62:0e:
                    b2:f5:c9:22:9b:1a:77:d3:64:28:eb:1d:17:6f:5a:
                    0f:47:05:d9:09:22:24:b0:d3:48:a6:fa:c3:6a:93:
                    c8:b2:60:79:25:90:59:41:d1:23:21:f3:c0:91:f5:
                    26:03:36:19:dd:f2:0f:d4:7a:55:6c:30:88:8f:cb:
                    3b:80:c3:66:f0:9c:96:5a:a7:4e:fd:2a:08:f4:9d:
                    a8:3a:41:3f:92:c5:a5:dd:68:1f:d5:c2:8b:f4:3e:
                    8d:fd:61:4e:b5:88:90:6b:bc:1f:8d:2c:45:23:3c:
                    e8:9b:ac:f2:28:02:8b:69:3c:2d:20:c1:47:3c:91:
                    1e:64:d7:f2:44:e5:be:d3:3a:2e:b0:62:d3:89:cc:
                    5b:97:db:33:8b:03:2e:5e:7c:db:e4:54:28:62:5f:
                    e1:10:b4:82:2e:97:af:6e:02:6b:0c:76:0f:0c:3e:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6F:63:E8:88:49:DF:19:97:07:B2:4C:44:7D:8B:3F:6E:98:D4:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.186.0.0/16
                  209.50.128.0/19
                  209.173.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:ad:06:e5:78:ef:ab:bd:61:63:ed:ba:36:d6:ed:a3:5a:
         49:e5:97:46:ca:f8:cc:74:74:49:d4:32:ae:ff:ee:65:8d:89:
         09:62:42:44:39:9d:f2:0b:eb:45:7a:f7:b6:68:cb:6d:1b:57:
         16:5e:93:f8:29:80:b0:9d:7a:b9:37:56:e1:94:f6:7f:54:7d:
         c1:ff:70:64:e1:98:1a:d2:10:fa:54:5b:5c:cd:c2:14:e9:ba:
         30:90:20:f2:ae:bb:94:73:3e:89:67:0f:58:a8:5f:83:f8:a7:
         a5:ff:9b:d3:e4:06:63:98:85:54:2d:e8:54:38:f3:a2:c4:97:
         5b:4b:5b:bc:84:69:05:60:5c:df:b8:29:d9:02:c3:3e:43:53:
         b1:0c:d3:cd:b3:6b:67:8b:88:6c:cb:e3:c8:00:c4:75:ba:c2:
         bd:eb:9b:a8:ca:bd:d9:6a:25:24:52:63:7b:35:68:2c:7a:57:
         08:b0:d1:88:9d:d2:a9:72:c9:14:10:cf:38:e9:6c:d4:b2:14:
         66:95:d9:1c:7d:8e:08:93:49:42:2a:e0:af:2b:88:32:51:5a:
         09:ad:90:fd:2d:d9:58:94:25:dc:59:e5:69:55:c3:5d:af:3d:
         53:2d:22:e9:18:10:92:3b:84:b0:39:c5:ae:9c:52:d0:30:ce:
         85:d4:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:49 2025 by rpki-client