Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ee67a749-231e-3e89-a610-265ff62e0f05.roa
File:                     ee67a749-231e-3e89-a610-265ff62e0f05.roa (raw, json)
Hash identifier:          DbdJnKr9lPJ162YEqq4AI9O/DayU7vZ5ZqQ0d2+sxuQ=
Subject key identifier:   58:EA:CF:BA:C9:E3:F9:30:A1:6F:AE:09:50:91:25:EF:A6:E6:97:B5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D02B98E2C8C0746CA5C00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ee67a749-231e-3e89-a610-265ff62e0f05.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        170.85.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:02:b9:8e:2c:8c:07:46:ca:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=1912a58f-cf96-4d4b-91a2-3e4f2fcb009b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:dc:be:fe:8d:32:aa:5f:44:07:60:16:5a:
                    07:4a:f5:77:3f:ae:a7:87:00:93:9f:ec:63:85:8b:
                    54:87:fe:91:8f:e8:8c:7c:f8:fb:4f:70:ab:f9:78:
                    ec:dd:6a:a6:af:0c:9e:8c:62:02:06:f7:c7:bd:88:
                    c7:b1:6e:e4:ed:c6:32:32:08:e4:ff:7a:d7:f6:df:
                    b8:3d:52:26:c4:3a:9e:b1:41:03:2d:4d:0d:76:d0:
                    dd:79:05:77:ec:0c:ed:21:14:6a:5d:82:69:ab:b0:
                    ac:95:d5:f3:83:dc:06:ac:5c:fe:6a:3b:c6:1d:bd:
                    14:12:a6:03:44:6f:63:f8:d9:a5:df:e5:4f:06:3b:
                    ab:e2:a5:c2:e4:05:72:0c:96:f1:84:c2:b5:7b:5c:
                    6a:f2:44:5f:67:8b:93:b0:a8:80:cd:83:c8:b7:d9:
                    03:03:3c:83:60:cf:83:e3:85:17:6e:f0:f2:8b:0d:
                    b5:dc:c0:78:7a:77:34:c4:5c:2a:b8:76:c1:f8:56:
                    5e:c1:c5:5b:16:4c:39:e5:3a:09:80:f3:e6:6d:0c:
                    94:50:ee:25:0c:6c:58:2a:24:e2:6a:8a:d0:c6:1f:
                    bd:89:16:28:8c:65:3f:be:a7:41:15:f3:9f:3f:a6:
                    fd:bd:3f:87:ef:dd:ad:8d:f0:f0:49:67:71:bb:6d:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:CF:BA:C9:E3:F9:30:A1:6F:AE:09:50:91:25:EF:A6:E6:97:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ee67a749-231e-3e89-a610-265ff62e0f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:dc:92:9d:68:72:47:c8:67:9b:2d:57:57:4f:44:1e:76:
         9b:8a:ff:11:09:f1:76:e1:50:17:c6:c8:41:85:e4:6a:75:e4:
         53:0d:d1:fe:c1:de:b4:f5:67:02:9d:3b:bc:eb:1a:9c:a3:5e:
         38:df:84:a4:50:99:42:7e:1a:8c:07:f0:ba:0e:7b:39:0b:4b:
         08:d0:81:47:78:1d:3b:76:b4:9e:97:87:d9:73:63:50:bb:7d:
         c3:4b:54:0c:b2:9f:b4:b3:09:09:5d:b5:e4:1c:04:87:62:3f:
         e4:3b:4c:2e:65:3a:1e:21:2c:e0:e4:b3:7f:9f:23:6e:79:9a:
         54:0f:db:11:dc:45:89:c2:98:25:27:4f:94:3e:b4:88:6b:07:
         14:e8:f1:97:6e:57:ef:8f:33:19:09:53:eb:63:ed:16:f6:16:
         14:c9:dc:b1:fd:76:42:8c:41:2f:cd:7f:81:80:4e:ef:d8:dd:
         4b:fe:60:ad:ae:f4:15:e4:ae:9c:eb:1d:cf:f6:c9:8d:df:f1:
         1a:75:90:ea:8c:ed:c2:12:ac:d3:af:76:ee:5d:ac:31:8b:bf:
         33:17:f4:c7:6d:8b:00:54:22:0d:6c:a2:de:9e:f2:b6:13:37:
         70:4f:f7:bd:75:e6:7a:1e:3b:40:0d:bd:7a:2a:61:18:f7:30:
         44:d2:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:52:47 2025 by rpki-client