Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/d9bb59e5-c792-3b6f-86d7-414bf2fed0ef.roa
File:                     d9bb59e5-c792-3b6f-86d7-414bf2fed0ef.roa (raw, json)
Hash identifier:          lMCf3OdQnR3bD7elDTtcw2EKIVEfsUJbE0p6fO9Fjfw=
Subject key identifier:   FC:77:E3:BE:B5:A5:F3:9B:DD:F1:5D:AA:8B:F6:06:4E:AE:6C:B4:98
Certificate issuer:       /CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8
Certificate serial:       010D0C9F4328584BB45D3669A105834C69361B00
Authority key identifier: AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/d9bb59e5-c792-3b6f-86d7-414bf2fed0ef.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     25948
IP address blocks:        216.10.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:36:69:a1:05:83:4c:69:36:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=2381e33c-070a-474a-a0d9-f15bffadf87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:cd:8a:9b:ef:30:0b:2f:81:4f:f6:b0:06:
                    65:e6:5f:b1:6d:ce:fc:b1:b9:03:b3:ab:b6:fe:02:
                    66:72:d3:39:c8:35:74:d1:10:b4:11:e0:e4:92:9d:
                    d8:56:9d:a7:bb:ce:09:d3:8f:13:33:44:3c:c7:1f:
                    91:0b:68:a6:9b:de:f0:7b:42:17:a7:d9:d1:1d:5f:
                    c9:5b:da:ae:bd:10:91:34:f6:c5:7e:4a:c5:ce:25:
                    e2:9d:3f:98:45:d8:9b:c2:11:4a:58:cb:b6:ee:2d:
                    20:7b:95:a4:8d:fc:4a:02:29:0c:83:c7:66:45:c3:
                    14:09:62:6a:64:a6:ad:c8:84:29:f7:12:71:08:00:
                    90:a8:95:92:1d:fe:2d:14:27:0b:22:c4:4c:ff:57:
                    0f:a6:f2:fb:05:b1:b0:ea:3c:ca:ea:6f:08:1a:35:
                    2a:99:85:f4:85:94:49:3e:cd:01:f4:80:23:72:9c:
                    0a:aa:4b:b9:35:39:ed:33:04:fe:c3:68:56:cc:f8:
                    70:70:60:3d:e9:25:31:16:be:9e:24:b2:62:a0:dd:
                    5c:89:d0:a9:77:ed:eb:a9:9f:d6:0b:62:f6:6b:01:
                    58:a1:87:02:42:0b:8f:90:18:09:2a:58:83:90:5b:
                    fc:e8:c9:f2:d1:cb:40:2a:2b:69:1a:04:56:22:fc:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:77:E3:BE:B5:A5:F3:9B:DD:F1:5D:AA:8B:F6:06:4E:AE:6C:B4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/d9bb59e5-c792-3b6f-86d7-414bf2fed0ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.crl

            X509v3 Authority Key Identifier:
                keyid:AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:29:7b:db:67:79:7e:f9:3e:85:95:f9:d9:59:59:3f:2f:88:
         cb:26:32:84:77:0b:a2:c3:4f:5c:86:6f:63:42:34:94:04:b2:
         0b:9b:96:a5:f3:f2:07:75:d8:c1:86:86:88:c0:f3:30:66:28:
         98:46:4c:3e:08:be:db:a7:63:25:5d:49:11:2d:91:7e:93:ad:
         a0:cb:0b:62:23:de:82:15:80:b6:93:79:ae:6c:00:50:5c:90:
         e9:80:b4:26:78:fc:1b:fd:15:83:2b:92:b2:20:a0:7b:dc:48:
         14:5b:58:2d:10:88:ea:81:a4:b5:63:5b:6b:29:db:49:1f:6a:
         28:6f:9f:c0:0c:20:f2:fe:f4:b5:d1:c5:9d:bf:00:77:1a:98:
         c7:37:1f:a2:cf:40:df:53:77:4f:3e:b7:e6:e5:7c:b5:28:06:
         e6:b1:6c:81:2e:63:10:82:8a:3c:17:10:57:5b:19:53:3f:ae:
         8c:a8:81:f8:33:fe:cc:40:e3:7e:ae:3f:32:a7:49:ac:a8:7c:
         f8:0d:2b:75:e0:f5:be:ce:5f:69:e8:cd:03:68:50:e7:34:4b:
         97:7c:c1:53:08:83:57:25:3c:73:b6:91:18:9b:39:e3:dc:69:
         5a:75:0e:4b:13:89:60:15:0b:2d:c0:16:4c:36:1a:df:81:b7:
         e9:b4:74:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:38 2025 by rpki-client