Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/80626a19-56e7-398c-b1fc-6a0d24fa2e0e.roa
File:                     80626a19-56e7-398c-b1fc-6a0d24fa2e0e.roa (raw, json)
Hash identifier:          Y2w8NSC7+EMyyMGWLaev/lq749ZW09aGq24CfnAtEbw=
Subject key identifier:   E2:67:6A:50:DF:11:3A:34:02:E9:EC:17:1E:50:B4:F5:F7:F6:10:5C
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F4328584BB45D14A7FC7A6C311203CF40
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/80626a19-56e7-398c-b1fc-6a0d24fa2e0e.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     394893
IP address blocks:        203.20.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:14:a7:fc:7a:6c:31:12:03:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=7508b58d-453d-4f87-9a0d-fff0efe7ade2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9c:e7:95:a2:56:8b:bd:9a:37:09:a0:82:5d:
                    00:7a:76:0b:4b:05:40:1b:4b:35:73:33:ea:be:27:
                    64:68:9f:74:f7:87:ad:a8:6e:36:c5:53:90:7d:c9:
                    59:e0:a3:4a:e5:44:b8:92:ce:ef:41:11:d3:09:75:
                    7c:f6:b2:0f:3e:bf:43:65:c6:83:39:a7:9d:4d:46:
                    21:bd:09:a7:7a:05:58:a0:c1:c7:31:cd:a1:14:7c:
                    d4:2c:4c:fc:e2:fb:4f:6a:5e:18:8e:92:49:a4:b7:
                    96:91:7c:d9:b7:56:c0:26:01:b4:1f:13:13:56:b2:
                    fa:ce:4d:f0:7b:06:98:6b:70:b7:32:f6:b7:27:97:
                    f0:27:2c:4c:71:55:e8:46:ba:5d:37:88:2b:78:dc:
                    8d:c7:46:31:ba:c5:ee:94:e8:ba:e3:bb:b8:15:d5:
                    a9:b2:b4:38:e4:42:d3:e7:44:7e:fb:f8:79:11:b4:
                    e8:46:b1:41:c3:89:b5:b4:be:24:a8:3c:3c:8f:d2:
                    70:00:a5:34:7f:38:44:cc:27:c6:7b:19:f9:70:9f:
                    5b:62:3c:72:62:2b:4b:48:7d:7d:38:9e:76:d5:9e:
                    86:04:28:66:39:e0:52:85:d3:7f:a8:04:e8:d2:e6:
                    e5:22:10:fa:72:1d:ae:42:d4:43:54:59:34:57:b1:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:67:6A:50:DF:11:3A:34:02:E9:EC:17:1E:50:B4:F5:F7:F6:10:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/80626a19-56e7-398c-b1fc-6a0d24fa2e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:59:40:12:5f:c7:42:62:9b:f6:a8:70:37:3d:1c:9f:73:
         ff:09:99:33:29:48:bb:65:7b:63:4b:3b:51:2b:1c:da:62:2f:
         41:91:4b:f7:0e:b6:4c:a0:77:5e:d5:13:65:06:b9:f2:91:ef:
         36:db:6b:c4:75:0d:53:cd:1f:e1:0e:a0:6d:96:7d:d8:f0:12:
         6a:ae:98:7a:75:4a:d4:87:8e:6a:48:ed:66:d4:97:c4:54:d3:
         42:ae:17:86:10:d6:5c:3a:66:82:c8:3a:00:79:d5:04:fe:c5:
         3d:eb:0d:ec:e5:55:cc:dc:b2:6e:7e:c9:42:2c:7a:ad:0a:ab:
         c3:e1:6d:8e:75:4d:b7:60:e9:5d:26:93:d8:c3:22:82:69:b7:
         d8:3b:6e:10:77:64:e6:1b:22:90:c3:d3:eb:b9:7c:be:ea:d6:
         b6:0d:bc:34:17:09:e1:91:cb:da:dd:ec:44:ec:00:a4:c9:7e:
         20:5d:62:ac:ad:29:62:f9:07:dc:f0:d5:8c:ed:25:a1:47:1a:
         1a:65:20:bb:16:44:ad:10:b7:f7:f0:3d:60:fe:40:e9:94:b3:
         6a:0f:6f:41:50:f4:74:ab:b8:c9:fb:01:a3:43:db:26:f4:59:
         0c:20:bf:fe:d6:5f:f6:ac:50:a2:b8:b5:a5:b5:9e:a5:b4:ba:
         9b:bd:bc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:43:54 2025 by rpki-client