Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4f491007-6945-3aff-aa86-fb79c499bcc0.roa
File:                     4f491007-6945-3aff-aa86-fb79c499bcc0.roa (raw, json)
Hash identifier:          Xq6surHM8eKc8Uw03OJ7b5vaYNsKa/nyW20/rZeNqSE=
Subject key identifier:   F1:5B:0D:E0:E8:3E:75:56:C6:7B:EA:69:9C:65:44:0E:2D:FB:84:FD
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584BAF06B6926A282E741A1D68C0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4f491007-6945-3aff-aa86-fb79c499bcc0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     26337
IP address blocks:        50.87.0.0/16 maxlen: 24
                          66.147.240.0/20 maxlen: 24
                          67.20.64.0/18 maxlen: 24
                          67.222.32.0/19 maxlen: 24
                          69.195.64.0/18 maxlen: 24
                          70.40.192.0/19 maxlen: 24
                          74.220.192.0/19 maxlen: 24
                          162.144.0.0/16 maxlen: 24
                          162.214.0.0/15 maxlen: 24
                          162.240.0.0/15 maxlen: 24
                          173.254.0.0/17 maxlen: 24
                          198.57.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:06:b6:92:6a:28:2e:74:1a:1d:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e0f8f6c2-f11e-4e0a-a695-ee438cfb39cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:8c:eb:48:ca:21:29:d0:2a:10:5c:15:85:
                    6b:bd:07:08:fa:31:23:b3:7f:40:b1:e9:f0:dc:78:
                    40:6b:a2:85:54:9d:33:e9:f8:07:9f:18:da:45:d8:
                    83:f9:ec:88:79:57:cf:6e:1c:c7:4e:e2:c3:f1:df:
                    d8:12:21:06:e8:b3:09:81:a3:a9:11:a7:89:15:58:
                    83:c6:d3:82:7c:c6:fb:0c:9b:79:68:e2:7a:a5:90:
                    00:e6:e3:2a:84:a2:44:a3:15:28:fa:53:bf:0c:01:
                    c7:ec:03:66:5b:94:94:e3:2b:95:b0:c8:d6:b5:b1:
                    12:27:06:d9:00:fe:0b:2a:7b:ad:e0:3b:6a:53:3e:
                    e6:9a:28:76:7a:90:aa:d5:10:9b:d6:ca:7b:aa:a1:
                    b5:82:88:7b:33:f8:f5:fe:03:ad:63:0c:f3:af:5a:
                    d1:7a:fe:77:36:35:c3:26:8f:cf:56:c1:c5:6f:f3:
                    d9:5a:65:96:65:a8:fc:2d:d8:a1:12:a9:6a:7e:23:
                    f2:3b:57:8d:97:e2:96:52:0b:2e:55:82:8d:3c:00:
                    12:ca:dd:e9:76:8b:16:d2:24:40:fd:04:79:0b:f6:
                    22:87:d9:0c:f8:e7:25:2c:90:65:48:b0:38:49:97:
                    b1:44:c7:ea:30:50:87:f3:24:f4:66:bb:1a:09:5b:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5B:0D:E0:E8:3E:75:56:C6:7B:EA:69:9C:65:44:0E:2D:FB:84:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4f491007-6945-3aff-aa86-fb79c499bcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.87.0.0/16
                  66.147.240.0/20
                  67.20.64.0/18
                  67.222.32.0/19
                  69.195.64.0/18
                  70.40.192.0/19
                  74.220.192.0/19
                  162.144.0.0/16
                  162.214.0.0/15
                  162.240.0.0/15
                  173.254.0.0/17
                  198.57.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:ad:85:09:ec:22:28:aa:a8:3f:9a:e6:35:55:0b:8a:e9:
         27:df:ed:7c:31:c5:ff:d1:ba:ae:7d:31:9f:9e:ac:dd:38:2e:
         65:b1:17:81:f1:9b:c4:31:ed:29:42:20:fa:0d:cd:6e:33:65:
         75:a5:ea:ff:be:ea:aa:3e:f0:b9:77:c5:57:cf:67:32:20:c6:
         d0:3f:ef:c8:18:de:aa:9b:6c:41:40:5b:88:1b:ea:2e:dc:f1:
         4f:88:0a:92:3e:82:67:19:df:15:a2:e9:ba:68:89:15:da:a6:
         b3:6d:52:0e:38:fe:35:dc:ed:8a:cb:d5:f3:e5:a2:f3:0a:e1:
         80:39:d6:78:a6:4a:a0:39:87:ba:ca:b1:27:bd:bd:eb:2b:ba:
         bc:32:b9:e9:f7:a0:0d:91:e9:cf:be:29:81:72:bf:d5:94:71:
         40:bc:6b:50:b3:a0:03:ef:b3:5e:57:04:ca:48:84:76:90:4a:
         a4:60:a1:15:51:68:25:46:ec:ff:b5:58:b6:9d:6a:96:f0:ea:
         7e:23:90:eb:10:17:87:36:08:f7:3b:10:f8:6b:bd:fe:0f:ca:
         ea:d4:3f:b1:48:84:26:b7:f2:6f:a3:83:c4:a4:dc:b1:fd:95:
         b6:42:1b:d6:b3:b3:08:a1:1f:52:a8:26:67:bb:65:cb:40:28:
         3b:bc:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:33:14 2025 by rpki-client