Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa
File:                     d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa (raw, json)
Hash identifier:          SCFEOi56QpaN0u8vIUcDtPUwseKzaYitCTski8/Zg30=
Subject key identifier:   34:88:CB:5D:AB:81:BB:CB:B5:CA:3E:66:36:6A:AD:79:8F:8B:D7:BF
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584B970CE3789E95CE1603676F00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     12129
IP address blocks:        216.109.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:e3:78:9e:95:ce:16:03:67:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=0de10b06-90a1-4f54-803c-00f2d468afdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:a1:bd:34:d1:80:53:44:95:07:f0:27:25:
                    c6:aa:cd:25:17:29:64:12:64:97:a6:0d:83:e2:bf:
                    3f:62:77:59:fb:c0:0d:d8:69:4d:13:98:55:7f:ae:
                    36:2d:7a:4b:fa:0e:d9:ce:30:8d:c5:23:d7:82:6b:
                    64:e3:c4:f2:97:3e:5b:f7:2e:0e:f4:ba:cc:06:fa:
                    d0:f7:e2:2a:37:0c:de:b3:74:88:d1:6c:22:1b:df:
                    19:b7:72:a8:ed:ff:b3:93:91:f3:56:06:32:d9:52:
                    77:99:2d:ef:01:fa:6e:ed:81:54:62:dd:41:43:ad:
                    5f:3b:aa:a6:e8:6e:ca:09:e2:fd:7d:a8:b1:dc:1b:
                    54:d4:15:78:12:fd:8a:d5:3b:1f:15:52:47:14:b1:
                    3a:38:e7:1a:0f:9b:9d:be:ca:6e:47:73:fb:7b:2c:
                    e3:95:31:e4:b2:60:4c:30:d6:b4:55:28:a0:57:c3:
                    73:d7:cd:22:6a:7a:6b:60:23:d9:ce:90:27:3f:7d:
                    db:d1:c5:57:8f:08:91:70:7c:84:58:a6:00:58:5c:
                    d1:84:b8:06:8e:43:b6:a6:70:da:25:d8:8f:64:8e:
                    33:8a:cb:40:e1:a3:31:72:28:6e:5c:f9:25:db:a9:
                    1e:13:b8:32:c8:cd:51:92:a5:e0:c8:0f:76:5f:78:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:88:CB:5D:AB:81:BB:CB:B5:CA:3E:66:36:6A:AD:79:8F:8B:D7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a1:a6:a1:01:f2:e3:ea:5e:de:ab:44:2d:34:a7:51:6b:f9:
         ad:c4:b5:0f:62:6c:71:8c:64:6a:f9:07:55:56:0b:a8:3e:16:
         81:e8:f3:32:ce:d6:31:a9:9a:29:62:99:84:21:ab:de:28:0e:
         50:39:f9:ef:e1:3f:64:67:d2:f7:57:da:9e:ba:49:83:02:85:
         df:1e:18:15:b3:57:ca:1a:c3:07:ee:7b:82:12:16:1d:c8:f9:
         70:ed:e3:54:12:78:74:ba:2a:e7:28:1a:06:41:65:32:c7:54:
         23:4d:75:3b:ec:e0:46:c5:72:0e:f3:80:0b:60:8c:a3:9d:43:
         5a:9b:8d:80:2f:8e:fd:1c:eb:05:70:18:0a:80:8b:2e:d6:a2:
         f4:f4:19:a1:17:9a:a3:2a:c8:80:6a:a1:f6:0b:dc:46:28:fa:
         72:b3:1e:e6:6a:d1:26:db:cc:d9:ae:cf:3c:f0:4f:31:a9:03:
         12:e0:8f:93:3c:98:8a:c0:53:20:7c:4f:06:70:64:6a:30:23:
         4a:df:bb:b1:3d:5b:3f:b6:7f:b5:09:de:80:41:15:f5:a6:6d:
         be:22:9c:9c:93:56:b3:50:9d:5b:2e:d8:55:1e:c4:86:3b:ec:
         42:9f:3e:86:3c:3b:39:0d:f1:58:2d:82:28:c6:a2:c9:11:46:
         d8:43:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:07:31 2025 by rpki-client