Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/ff52da54-7b83-3464-971d-3fa488d617dc.roa
File:                     ff52da54-7b83-3464-971d-3fa488d617dc.roa (raw, json)
Hash identifier:          QYA9juTz5DkA6sFxT5yKKaREBize1mRvBcz47Js6+gI=
Subject key identifier:   17:FC:DA:99:C5:68:4A:09:AB:0B:72:69:1E:5A:80:A0:F2:7C:14:33
Certificate issuer:       /CN=62bab34c-4821-43e9-b275-c29729ce9c1f
Certificate serial:       010D0C9F4328584BB19259B3C4E20F5F7ED834D0
Authority key identifier: A3:10:DD:04:2F:3A:3D:59:7F:76:23:79:FE:15:79:2B:77:45:EB:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/ff52da54-7b83-3464-971d-3fa488d617dc.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     16794
IP address blocks:        162.253.204.0/24 maxlen: 24
                          2602:809:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/62bab34c-4821-43e9-b275-c29729ce9c1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/62bab34c-4821-43e9-b275-c29729ce9c1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:59:b3:c4:e2:0f:5f:7e:d8:34:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bab34c-4821-43e9-b275-c29729ce9c1f
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=5250a81d-c5f7-42ad-ae22-aa5975bf077b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:a4:f2:1b:67:f3:02:c3:06:19:6c:c4:b9:
                    4a:b3:ca:be:bf:ac:8e:aa:97:89:94:da:b4:85:66:
                    f7:2b:9d:b7:a1:73:b9:99:ec:ea:60:2c:54:40:93:
                    00:85:ff:90:47:5e:b2:2b:61:65:87:7e:62:bc:3d:
                    29:35:e2:40:0f:82:39:26:dc:ac:4e:31:b2:94:74:
                    60:74:e3:60:7c:44:3f:42:64:49:e7:c8:8a:59:14:
                    d6:fa:d8:e1:2c:a0:0c:01:12:b9:d0:67:8e:a2:47:
                    a8:d8:a7:4e:b7:92:cd:55:58:07:48:06:9b:5d:19:
                    9d:eb:10:e8:83:0d:d2:97:ff:03:3f:4a:4e:ff:a8:
                    4d:b3:c2:48:a2:2d:c6:2a:c0:a1:75:60:ef:b2:ae:
                    98:53:f7:9d:8d:9e:47:f0:0f:1a:1f:7c:1e:58:95:
                    43:b5:b8:b4:b5:a7:16:3c:41:bd:aa:95:ef:f1:8b:
                    a7:49:52:89:96:3e:63:36:b6:ab:5e:98:cf:4c:20:
                    8d:78:97:89:19:c7:67:34:29:4a:08:00:56:47:10:
                    c4:40:2f:33:aa:81:1a:03:5f:ee:82:27:a0:6e:80:
                    e5:df:3a:97:b6:42:c7:5c:ae:d2:0f:58:84:7e:0a:
                    2a:ec:2a:d3:59:73:3a:0d:d7:46:e4:a2:89:6e:67:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FC:DA:99:C5:68:4A:09:AB:0B:72:69:1E:5A:80:A0:F2:7C:14:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/ff52da54-7b83-3464-971d-3fa488d617dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/62bab34c-4821-43e9-b275-c29729ce9c1f.crl

            X509v3 Authority Key Identifier:
                keyid:A3:10:DD:04:2F:3A:3D:59:7F:76:23:79:FE:15:79:2B:77:45:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.204.0/24
                IPv6:
                  2602:809:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:68:65:bc:02:17:46:e8:26:fe:f3:27:fc:2d:c9:c7:64:a0:
         2d:6f:59:92:01:a1:65:c6:65:bd:58:cb:d6:0b:39:4d:bd:38:
         33:4b:03:4d:a9:be:23:ab:6f:65:77:70:90:09:99:4e:7f:67:
         c7:34:23:f3:8e:f7:a8:f1:0a:a3:61:b9:12:cb:01:f3:b8:65:
         86:15:3b:6a:92:28:e1:51:3f:2d:ba:c2:5d:3e:1e:22:c3:bf:
         30:0f:11:85:d2:7b:d6:81:0e:48:e2:77:ea:95:ec:c2:83:95:
         af:e5:70:e5:8a:7d:12:73:ed:c4:1f:92:db:db:fa:e5:b7:c9:
         8b:e4:5d:a1:ab:34:08:97:ca:c5:7c:cb:6b:40:b2:f9:1a:0b:
         4a:06:8d:af:0d:ae:18:e4:99:b5:9b:17:eb:79:51:b3:a2:b1:
         7e:ee:f4:14:c8:5c:ba:91:b3:6c:0f:66:1a:1c:c5:49:db:06:
         3d:8f:52:f4:87:7e:a3:7d:72:0e:ed:ec:62:7b:c8:65:1c:66:
         68:c5:a6:03:cf:d4:7e:de:8c:97:15:6d:3a:ce:76:c7:8b:54:
         96:12:2c:a1:d6:99:23:c7:07:49:d8:13:fe:1c:db:a8:51:71:
         43:89:04:27:5c:b9:b5:fb:28:ad:96:f4:f9:d7:b2:56:63:79:
         7e:7e:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:05 2025 by rpki-client