Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/68eab5f4-d9fb-3859-b4cc-cd8244ff4c66.roa
File:                     68eab5f4-d9fb-3859-b4cc-cd8244ff4c66.roa (raw, json)
Hash identifier:          ZUhOUQ/vfaiyT0OtLwtyaEot7QgmemimjH5dacE2wF8=
Subject key identifier:   B2:4A:A1:FE:B5:89:96:91:C1:5F:01:1F:48:BA:9C:11:3F:9E:C7:F6
Certificate issuer:       /CN=53f93371-9395-4cf9-890d-3d0895304982
Certificate serial:       010D0C9F4328584B92DCE90084D61763FC10AB00
Authority key identifier: 3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/68eab5f4-d9fb-3859-b4cc-cd8244ff4c66.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        142.202.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e9:00:84:d6:17:63:fc:10:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f93371-9395-4cf9-890d-3d0895304982
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=4f6a9bc0-234f-479b-93fd-8ab328e54934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:df:65:0f:28:4b:f3:a2:7d:31:f3:4c:7b:
                    8e:71:c8:8a:a7:07:e0:15:98:af:cf:3d:01:3e:b3:
                    59:17:e6:3f:4c:8e:e9:ab:ab:20:aa:79:f9:ea:3b:
                    88:54:54:ed:8b:31:c7:cc:32:58:ab:aa:3d:af:20:
                    83:22:41:4a:14:ee:83:c4:39:fc:16:b0:a2:87:8a:
                    02:03:da:3c:7f:10:5e:d5:28:40:45:82:75:e9:f1:
                    9b:20:9c:6c:6a:e6:09:79:ee:de:d4:e4:2f:51:dd:
                    d2:bf:dd:4c:8f:ec:f1:9f:1f:8c:f6:8e:e3:85:21:
                    1e:48:5b:69:51:69:f4:af:bf:13:25:74:f8:36:8c:
                    d8:83:24:b3:4f:0d:75:70:81:d1:04:9e:a0:cd:92:
                    89:81:65:5b:7a:9d:b5:09:55:8b:54:c3:0d:8b:18:
                    e5:cb:4c:79:01:0d:45:63:42:8a:d4:98:0b:65:58:
                    9a:7c:64:e9:db:70:82:4e:80:b8:66:2b:ac:6d:a5:
                    a5:d6:be:10:60:a4:29:77:1b:21:8b:f6:df:4c:89:
                    12:a5:61:12:6b:d2:3c:88:bf:45:db:6b:14:4b:58:
                    61:cf:97:eb:78:03:ec:df:88:7a:f9:6d:a0:7d:46:
                    5a:8d:f5:5d:bc:cc:c5:18:d8:75:b0:8e:3b:dc:5f:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4A:A1:FE:B5:89:96:91:C1:5F:01:1F:48:BA:9C:11:3F:9E:C7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/68eab5f4-d9fb-3859-b4cc-cd8244ff4c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.crl

            X509v3 Authority Key Identifier:
                keyid:3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:33:2d:77:7a:26:d8:4a:23:18:6d:be:5c:47:8e:93:a2:
         2b:5b:89:d6:d4:13:3b:8c:17:83:35:69:ee:1c:e8:e4:d4:5c:
         c3:ed:45:8d:1f:77:47:7e:9e:2d:f6:06:19:72:b2:e9:cf:53:
         b0:6a:fb:da:3e:7c:ce:72:ba:74:b6:b0:e0:61:d3:b8:9d:df:
         71:a9:48:ea:cf:c7:cc:4b:21:74:e3:c4:8a:86:e1:af:c5:3b:
         b8:81:96:97:8a:a8:fc:0b:20:61:79:f2:cb:eb:f2:d9:fc:23:
         c4:a1:a4:c2:95:82:2d:b5:80:f9:0c:ba:f0:57:b0:2a:b8:b3:
         0b:eb:7d:f0:36:f0:0a:f0:a6:e3:bc:71:04:54:ec:7b:fb:93:
         d5:e7:4b:00:17:58:a4:a1:e2:38:f4:99:18:4b:f1:e9:02:ed:
         c9:90:12:12:67:6a:fe:65:e7:03:5c:5f:e9:29:0f:f5:0c:82:
         e7:94:2d:db:e8:5c:de:a7:37:43:aa:48:3c:86:1e:72:fa:2c:
         22:bb:cd:ab:fd:76:78:ac:a2:8d:88:6f:03:36:04:60:48:a3:
         1b:5f:9d:13:32:85:4b:e7:bc:26:a3:b6:bd:3f:ac:64:36:31:
         84:a7:36:a8:8f:f2:aa:5f:1e:66:50:26:cd:c2:d8:4b:2f:33:
         04:67:3a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:52:35 2025 by rpki-client