Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/93b01601-df72-3eaf-a64a-71145f132bfa.roa
File:                     93b01601-df72-3eaf-a64a-71145f132bfa.roa (raw, json)
Hash identifier:          LdB/vg8mA5U4UfvYqgHvZ+pdRcVYxyfcjzJ+nHpWoAk=
Subject key identifier:   06:61:6C:0E:D8:14:48:42:62:A3:64:B4:96:8D:60:2D:18:F8:B5:64
Certificate issuer:       /CN=c43d9850-d596-4753-8190-8f123f903f5a
Certificate serial:       010D0C9F4328584B964C83D61A8549F0A9B98C60
Authority key identifier: EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/93b01601-df72-3eaf-a64a-71145f132bfa.roa
Signing time:             Mon 20 Oct 2025 18:33:07 +0000
ROA not before:           Mon 20 Oct 2025 18:33:07 +0000
ROA not after:            Sun 18 Jan 2026 19:33:07 +0000
asID:                     376
IP address blocks:        204.19.30.0/23 maxlen: 23
                          204.19.30.0/24 maxlen: 24
                          204.19.31.0/24 maxlen: 24
                          204.19.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:96:4c:83:d6:1a:85:49:f0:a9:b9:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43d9850-d596-4753-8190-8f123f903f5a
        Validity
            Not Before: Oct 20 18:33:07 2025 GMT
            Not After : Jan 18 19:33:07 2026 GMT
        Subject: CN=f7a6f501-f8df-4377-ab54-bfa0c91320c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:70:a0:ee:d0:22:a8:5a:c3:fb:f5:e8:aa:
                    5e:dc:9b:27:df:a7:09:6f:1c:c9:0b:17:e6:88:6a:
                    6d:64:65:78:2c:92:f6:5f:9d:94:2b:2c:30:c9:95:
                    f0:0e:04:0e:64:07:2a:bd:64:b7:ed:3e:48:f4:72:
                    8a:09:0b:d1:ab:59:b2:5d:1d:1a:cd:4e:3e:01:81:
                    69:9e:2d:a5:f8:aa:12:f2:02:0b:c9:47:be:80:3a:
                    8d:b0:6f:20:69:ba:c9:93:37:ae:3f:87:78:dd:54:
                    e9:ff:0c:54:5c:3c:66:94:3a:28:da:97:0e:a0:22:
                    b1:65:c0:12:ac:17:63:26:96:54:62:f4:0d:ab:be:
                    ac:5f:f3:c9:5c:68:21:66:e6:32:4b:29:69:c9:7e:
                    90:aa:73:d3:2b:b7:46:3e:97:74:ed:3d:4a:e6:e1:
                    81:42:2d:ad:0f:92:dd:2f:2c:94:d4:33:3b:86:2a:
                    72:3f:56:e3:1e:f8:32:8d:02:e8:ba:0b:c6:82:ea:
                    1a:71:c6:2d:87:30:af:c6:ff:d0:ee:4e:37:17:26:
                    b0:4d:31:b9:7d:a8:29:92:1f:f2:a3:04:8a:de:f2:
                    39:e9:b6:be:52:40:93:04:bd:70:f4:da:62:91:a1:
                    e8:93:02:6f:5d:b0:71:f4:c8:38:85:f1:14:d1:52:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:61:6C:0E:D8:14:48:42:62:A3:64:B4:96:8D:60:2D:18:F8:B5:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/93b01601-df72-3eaf-a64a-71145f132bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a/c43d9850-d596-4753-8190-8f123f903f5a.crl

            X509v3 Authority Key Identifier:
                keyid:EE:95:41:53:95:D7:0A:A5:DB:F0:5A:16:49:DC:B3:52:57:D8:5A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c43d9850-d596-4753-8190-8f123f903f5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.30.0-204.19.32.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:72:04:64:43:ce:b5:0d:f1:aa:36:2e:23:ad:3d:f3:a5:08:
         67:f3:ff:cd:7c:ce:73:35:fb:41:21:65:f5:56:61:1c:8a:45:
         69:00:19:c1:11:27:79:e8:2d:45:6a:40:3c:52:cc:b0:69:0d:
         d4:48:cf:67:e9:d7:c7:ef:62:80:66:76:83:b6:8e:24:42:9c:
         15:d5:c9:65:d3:0a:ed:a9:37:ef:94:10:e3:19:bb:02:11:42:
         7d:f8:b0:5b:03:f7:9c:68:fb:62:ec:ce:d9:8d:80:12:ac:f1:
         7c:7e:fb:92:38:dc:58:1f:3a:94:7d:b4:08:a0:fb:41:60:9e:
         98:2a:2c:27:0d:c4:b5:3a:ed:d6:d4:e3:78:86:d4:1e:e3:06:
         bb:dc:19:be:c9:b3:38:b7:0d:6b:06:be:a9:03:29:37:8f:28:
         e5:0a:ce:a7:3d:96:94:b1:bc:fd:a2:32:f5:f6:79:98:6c:59:
         69:15:c4:2a:e9:a8:da:67:3b:f2:24:fa:d0:07:a8:6e:2b:9c:
         3f:fd:61:da:c9:25:26:96:9e:1a:74:b2:4e:e0:95:c0:27:86:
         15:ed:da:c8:ff:68:eb:45:76:85:cc:18:8f:8f:4d:cb:90:fd:
         38:f6:c8:7a:b0:92:28:04:2b:b0:6b:03:55:a4:5d:f9:10:fb:
         8d:46:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:16:32 2025 by rpki-client