Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67f653e5-2f20-3a90-a86d-5857cdca3e4b.roa
File:                     67f653e5-2f20-3a90-a86d-5857cdca3e4b.roa (raw, json)
Hash identifier:          Yo1GKbPpA/RuVpkrMUv8tQVxc4qdY8D2eZXY1zS+2m8=
Subject key identifier:   E0:97:4C:4B:58:5B:D8:1B:32:09:68:14:9A:93:9E:1A:E6:B0:F3:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10B08BEA360E8D60405FF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67f653e5-2f20-3a90-a86d-5857cdca3e4b.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        69.180.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:08:be:a3:60:e8:d6:04:05:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=ec353a5a-9000-4c90-b2cf-ef581a91f47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:a5:55:62:90:b7:ee:31:3f:0d:50:7a:6b:
                    33:36:0e:20:fa:03:cd:d4:93:5d:b4:25:a3:d0:37:
                    3b:2f:4e:7b:c5:31:fd:37:a2:d8:0a:b6:53:dd:15:
                    7b:99:bc:0a:99:26:27:8a:79:2d:e0:b0:bf:e2:79:
                    40:5b:98:05:d5:a8:21:06:37:39:01:98:36:cf:50:
                    9f:11:41:62:a1:66:dc:7f:1a:1a:45:2f:6f:f4:15:
                    94:df:0d:d5:fa:6d:2b:22:6c:9e:4a:81:34:42:77:
                    60:55:c3:35:b4:bd:ff:06:6e:bf:01:c6:bd:ef:a0:
                    3f:26:a4:8b:ff:81:34:ab:08:9c:21:5e:a0:51:79:
                    33:c0:94:99:64:c4:ab:6f:9d:4e:3f:b5:5b:b1:65:
                    66:61:b7:45:64:f3:68:fc:66:76:57:fe:d7:40:ba:
                    9f:17:b2:f7:d5:3f:9c:a7:94:ec:8c:97:18:a2:9f:
                    71:51:aa:36:0d:02:f8:ea:9e:d1:e7:57:da:6f:b2:
                    f2:00:20:95:da:c8:8d:90:cf:23:d7:a6:c6:07:7e:
                    b8:da:79:e9:25:14:02:07:a5:7d:d6:60:37:1e:e3:
                    f2:4f:b0:6f:a6:c7:de:32:3a:e6:19:af:03:b2:90:
                    85:b7:a6:f9:49:56:ea:4a:e4:5a:c2:22:c2:07:6d:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:97:4C:4B:58:5B:D8:1B:32:09:68:14:9A:93:9E:1A:E6:B0:F3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67f653e5-2f20-3a90-a86d-5857cdca3e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.180.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:9a:3b:ab:ac:93:f6:0b:af:64:2a:ce:9b:9b:86:08:ad:4a:
         ae:09:5a:9b:c7:40:8b:86:67:86:f8:7b:1b:e7:5c:c9:c0:14:
         fd:5d:33:11:07:e2:b7:79:48:01:b3:bc:8f:e9:b0:1a:a1:83:
         cb:35:85:74:fa:59:86:b7:67:ab:49:1f:20:50:a0:ee:a3:dd:
         dc:67:16:fd:56:cb:f8:10:f5:c2:f0:41:43:b5:39:35:cd:be:
         21:ab:5b:f1:04:ab:3c:49:76:9f:06:85:0e:90:48:f8:62:90:
         c5:b7:00:fd:fa:a5:ad:db:d9:a0:eb:9f:d1:4c:dc:f8:34:8c:
         c3:c5:27:71:58:9a:ce:f0:48:ce:5e:1f:4f:24:b4:18:fa:48:
         d0:4e:e6:8b:22:27:4e:b3:cb:2b:6d:17:44:21:0b:6f:3d:80:
         63:33:1b:e5:8e:40:39:a5:c3:11:4e:63:6c:6f:23:de:5b:b5:
         b4:ff:75:97:12:ab:c2:e2:91:16:8e:6d:43:a6:d8:ce:be:28:
         7f:b9:c4:6b:c2:38:f0:9c:6e:3f:f7:53:3c:ba:61:0e:b3:cb:
         92:5b:de:3b:58:cd:56:52:60:2e:ed:98:27:56:f2:66:ec:ef:
         c1:92:60:6d:09:bf:43:83:71:ce:76:d1:64:f8:b6:78:de:b2:
         85:89:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:17:48 2025 by rpki-client