Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/490085e2-0b2e-37b4-b315-f98a0fd78285.roa
File:                     490085e2-0b2e-37b4-b315-f98a0fd78285.roa (raw, json)
Hash identifier:          BHKnWCQvVaVRDHnCGZ1S1CadIGQWiwQEqb0l9jCxRN8=
Subject key identifier:   44:02:9A:A4:C3:0D:67:03:70:B1:24:37:98:AD:DF:C4:0F:AF:3C:F6
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584BB88D2846A4159CF712AED700
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/490085e2-0b2e-37b4-b315-f98a0fd78285.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     18973
IP address blocks:        207.111.76.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:28:46:a4:15:9c:f7:12:ae:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=f52a1579-dac3-4555-80e9-550a81a35aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:80:e1:35:69:dd:4a:a9:3d:39:fd:c5:73:da:
                    a3:3b:07:6a:9c:78:c2:87:84:43:df:cb:bb:6c:38:
                    15:21:41:a4:20:89:59:7f:2e:4e:c3:41:38:d7:d3:
                    34:f6:58:73:db:ef:a9:4e:37:c6:fc:e2:e7:81:6d:
                    56:d7:f5:e9:8c:ac:69:46:bc:90:0a:3f:4c:46:5d:
                    f0:29:f2:28:1e:63:14:e3:79:26:db:24:6b:6f:e4:
                    18:34:f0:d6:05:03:8d:94:f4:17:c1:e2:42:6d:80:
                    8c:80:6b:94:75:9f:96:9d:0e:eb:bb:89:0f:b3:7a:
                    08:23:20:7e:92:68:94:9a:4d:a9:51:b4:0c:e7:47:
                    94:1e:47:11:ec:84:b4:9a:13:5a:bf:da:75:d6:eb:
                    87:33:3a:c1:b1:87:14:35:18:86:e3:9b:30:d1:79:
                    a2:40:d7:a1:92:99:a4:2c:c6:5d:fd:6f:12:79:9e:
                    4e:c4:16:b1:31:15:bd:d6:58:da:cc:d9:bf:b6:3b:
                    09:06:11:60:bd:be:4e:1a:97:4c:b8:43:8d:f4:54:
                    83:b7:e4:62:4d:e8:e4:2a:23:94:30:9c:e6:c8:ce:
                    69:73:76:b6:fc:7d:f6:ec:62:a3:e5:2c:b6:bf:12:
                    b3:6e:28:9e:c9:c0:46:38:66:9c:91:3b:66:59:12:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:02:9A:A4:C3:0D:67:03:70:B1:24:37:98:AD:DF:C4:0F:AF:3C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/490085e2-0b2e-37b4-b315-f98a0fd78285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.111.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:bc:97:56:c9:9d:91:24:82:c2:71:80:a6:4a:0e:10:57:fa:
         9e:39:c8:b2:58:ef:d2:1b:89:c1:f6:05:3e:3a:a3:ea:53:be:
         5c:97:db:7c:98:1a:66:06:ba:8a:50:a7:52:b6:49:95:97:19:
         f8:e7:1b:e6:d5:13:97:ca:bb:cf:f8:a0:98:34:95:d6:41:bf:
         8f:d5:cb:76:62:a1:e5:76:57:81:2c:fa:36:19:d3:ce:80:5e:
         72:c4:a7:03:9c:f3:c4:e1:52:ad:a0:cd:c8:f1:d2:32:0b:66:
         ed:fd:28:d4:3e:0d:a8:d0:4d:34:3c:8e:ec:4b:10:a4:11:5a:
         d4:88:11:91:49:ba:f0:27:98:f8:a1:4b:64:91:c8:9e:4a:8d:
         f0:ab:bf:f7:f2:5b:b8:7c:51:d5:b4:ac:86:65:7a:55:22:48:
         53:75:e7:69:4f:6d:4a:fc:6e:c8:6c:3a:90:68:76:46:c2:22:
         50:e5:00:25:1f:f3:e7:8b:84:20:40:45:2b:a5:e5:d2:b0:cf:
         cc:81:5f:d0:91:4f:0d:6e:f9:47:ab:77:94:c2:1f:0b:36:37:
         66:79:49:5d:da:fc:33:2e:7d:b2:b6:a5:75:9c:d8:80:07:e6:
         dd:e6:af:47:36:7f:de:c7:de:3d:1b:43:38:2e:a9:c8:dc:04:
         83:3d:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:14:57 2025 by rpki-client