Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/d1017d3c-d82f-3e0e-9ea5-727367ef04bf.roa
File:                     d1017d3c-d82f-3e0e-9ea5-727367ef04bf.roa (raw, json)
Hash identifier:          HnCQcCutIBP1tZVskn8akwjWiwrxoUvNw0YVdYgwzoI=
Subject key identifier:   91:91:CB:63:E0:02:7A:A0:D9:DB:CF:FC:8A:83:50:40:12:88:5C:71
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584B970D01A72D8EC4D3A38F1380
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/d1017d3c-d82f-3e0e-9ea5-727367ef04bf.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     1299
IP address blocks:        69.89.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0d:01:a7:2d:8e:c4:d3:a3:8f:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=dc3a5b9f-b3b5-460c-b725-b93b6f16c46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:95:d3:7b:ab:18:b7:70:ec:6d:71:31:b3:
                    cf:85:8a:9c:72:bc:80:88:2c:a1:bd:2c:e8:b4:16:
                    49:67:3c:5b:ab:b2:a1:ee:20:f5:4b:39:5d:1d:e6:
                    f2:98:a7:8c:a6:ea:0b:41:e6:2c:4b:02:55:70:14:
                    74:f8:2f:19:51:0a:25:6b:20:fc:8d:f9:12:6d:17:
                    c0:41:d2:50:ef:a0:3d:50:dd:78:d2:c8:f1:79:17:
                    bc:00:ac:c3:c2:4c:03:ef:b4:54:b7:4d:a3:1b:ec:
                    d1:94:a2:d6:73:c9:f6:56:d0:66:ef:3e:5c:44:18:
                    f8:27:5e:8c:54:27:6c:f0:cc:5e:fe:e7:13:c6:26:
                    53:cd:70:d8:55:34:e3:cc:5d:9a:a6:f4:e4:10:21:
                    b5:04:d3:ed:cc:44:74:fd:c9:c8:86:78:e1:11:da:
                    1d:9f:7f:01:c2:d6:b3:e8:58:31:6c:0e:7c:2b:a5:
                    90:fb:f6:79:f5:af:67:1d:b0:88:69:35:f8:25:c1:
                    1e:f0:27:b5:a4:dd:b8:76:1a:7c:48:65:ac:17:b0:
                    55:b8:e7:65:6f:b8:93:91:25:a1:fe:85:7c:c5:7e:
                    65:2b:ed:ea:58:81:bb:e4:b3:9e:0e:c1:f6:b6:fa:
                    1e:f7:98:88:63:15:c6:58:04:c5:55:82:3c:b9:ff:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:91:CB:63:E0:02:7A:A0:D9:DB:CF:FC:8A:83:50:40:12:88:5C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/d1017d3c-d82f-3e0e-9ea5-727367ef04bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:79:c1:53:6b:b8:38:8a:af:c6:1c:74:6f:8c:c2:d0:8c:22:
         30:50:80:94:6e:8e:59:f9:25:7d:45:39:a1:03:93:1d:a9:a2:
         ea:1b:95:50:4f:c7:c4:f1:63:65:ef:16:2f:cf:27:ea:2b:fe:
         66:e8:a0:d6:74:ad:fc:a2:89:76:88:cc:b4:7c:ca:5d:e0:6c:
         56:57:ad:e2:eb:17:e4:49:58:34:df:43:10:33:f7:65:75:f8:
         c5:b3:ac:98:a6:4e:88:7f:90:4a:fb:59:46:21:6d:31:c8:49:
         63:2b:0c:6b:32:9f:f2:4d:a9:a8:0f:08:30:35:b4:0e:5b:11:
         7b:ad:b2:d7:5f:fa:7f:6a:03:9b:f4:a3:7d:a1:7f:8b:90:87:
         70:41:13:27:65:d0:0f:76:ec:43:e4:42:84:ab:38:60:53:23:
         da:d9:f0:9c:36:d5:0c:81:87:4d:b1:45:70:79:7f:e1:7a:8e:
         b3:87:30:71:cd:18:9d:8d:f9:eb:31:ba:31:27:65:33:6f:1d:
         ac:3d:9c:80:d0:ef:7b:29:ff:8f:c7:e7:8e:e0:df:4c:21:da:
         67:20:b2:20:db:5f:30:52:f8:17:43:43:a2:d8:e3:86:80:96:
         f1:a5:ca:62:b4:44:82:78:b5:fc:2b:ec:69:a6:90:52:a7:11:
         67:9e:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 03:04:35 2025 by rpki-client