Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa
File:                     e9195c1c-eac2-3b7e-9493-9fcabda112be.roa (raw, json)
Hash identifier:          eUdHXc+rxpzLu9/sJ1ZoiMI44MSPI5F648YF6BJ54Qw=
Subject key identifier:   F0:E8:FB:89:90:C0:91:87:FD:7B:1E:EE:5A:24:4F:CC:35:D7:35:0E
Certificate issuer:       /CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
Certificate serial:       010D0C9F4328584B6EA0CA81DDD89180CE377080
Authority key identifier: DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     397546
IP address blocks:        67.210.0.0/22 maxlen: 24
                          162.249.184.0/22 maxlen: 24
                          2602:fde1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:a0:ca:81:dd:d8:91:80:ce:37:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=bac0e2be-c9c6-4ba8-be66-a20b87e6dc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:3e:71:e1:65:a8:0b:c0:86:67:73:49:d9:
                    23:c3:87:fd:bf:c7:02:54:ed:b7:e4:f6:98:1f:54:
                    e6:ef:7b:94:34:bf:5a:b3:ed:00:99:d3:16:c6:b3:
                    81:8e:5f:a7:84:dc:54:ae:f3:8f:ee:da:63:50:03:
                    18:be:f7:35:07:f7:21:97:fb:7f:aa:1e:2e:0a:08:
                    36:75:c8:e8:8f:a0:74:b0:1b:d4:71:00:41:df:bf:
                    60:ae:8b:ce:6b:12:18:0f:50:c7:79:4b:b7:cd:a5:
                    8a:c7:66:5b:84:ff:37:d7:c7:f3:fa:34:2e:4d:8c:
                    1c:78:8f:04:c0:a4:70:2f:d2:5f:a0:4d:ba:26:32:
                    e9:f7:7a:1f:1d:85:16:7f:63:73:e2:5e:49:c4:21:
                    97:56:99:1b:86:f8:0e:63:66:43:09:1d:16:78:fb:
                    a2:2d:53:0f:d2:18:95:70:ea:0c:d3:2a:c4:a7:c0:
                    90:6e:76:ed:4c:49:cb:0b:8f:3f:02:08:82:8d:ca:
                    20:87:39:46:bc:d7:cb:7d:51:e3:1f:8c:2e:b5:55:
                    44:28:ba:eb:51:99:0f:73:07:a2:7d:3d:f2:e9:e6:
                    bd:57:ed:6a:92:70:b3:b5:aa:e0:c1:f3:de:c4:b5:
                    99:62:46:aa:ef:a5:f5:9a:6f:d4:3c:2c:7f:49:3c:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E8:FB:89:90:C0:91:87:FD:7B:1E:EE:5A:24:4F:CC:35:D7:35:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.crl

            X509v3 Authority Key Identifier:
                keyid:DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.0.0/22
                  162.249.184.0/22
                IPv6:
                  2602:fde1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:a0:0d:02:c4:fc:89:7c:a1:02:01:12:cc:d2:cb:16:6b:
         f6:cf:1b:db:bb:b9:d2:94:03:20:25:dd:44:6d:17:13:1c:f5:
         c3:da:9c:42:f6:31:cd:c1:0a:95:01:8d:0b:ab:4f:ef:76:46:
         62:e3:7d:34:16:99:f3:19:92:62:e1:9e:97:e0:16:a1:66:99:
         3c:2e:57:1f:70:1b:63:72:66:25:7a:da:e3:e0:37:c7:66:e7:
         73:25:a7:b4:94:14:f4:01:47:e2:e6:11:b1:3c:f4:fa:a2:11:
         e2:9d:7e:33:af:f9:70:2e:31:db:4d:c1:1f:f6:a1:50:ca:bc:
         5c:77:9f:a3:2f:39:d9:4c:0e:20:e8:02:32:5b:03:2b:42:ec:
         bc:70:71:c6:58:77:bc:dd:f6:71:79:2f:d2:99:9e:c2:46:36:
         e5:be:d0:4c:9b:68:52:2d:75:ac:8e:7a:11:dc:08:44:62:48:
         67:31:6f:8b:0c:bf:d1:dd:37:35:90:66:c2:1f:98:c6:a8:9e:
         e3:79:56:25:54:bb:c7:3f:61:7b:00:3c:ab:b6:83:97:b8:9e:
         33:25:c6:d1:18:1b:6b:3a:f9:72:48:b3:4c:eb:25:a6:6e:2b:
         20:52:0c:46:a7:8a:37:29:0d:05:d0:3e:02:43:36:f8:64:e5:
         3e:bd:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 18:20:18 2025 by rpki-client