Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
File:                     b405fd56-7238-35e1-ab4d-25811983c86a.roa (raw, json)
Hash identifier:          amJHsYRI3gkYUSQvuWMLKyPDYglS7kFYMQuFedFcQIk=
Subject key identifier:   07:5E:AC:19:29:C3:EA:8E:66:07:45:D2:E8:62:09:2D:58:85:56:40
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F4328584BB2F7D0BFBE6454E7D2861E80
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     393398
IP address blocks:        170.75.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d0:bf:be:64:54:e7:d2:86:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=41d17a00-1d60-4850-8816-def64937e5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:98:80:fa:3d:26:95:37:1a:c8:2f:1c:23:df:
                    3e:a8:8b:e0:0f:c0:1f:bc:f5:e1:da:54:83:6f:0a:
                    59:e4:fe:2b:ef:6d:54:ae:89:b2:d0:86:95:0c:76:
                    49:5e:af:44:ee:c1:01:ba:4a:0e:3c:0f:9a:fe:b6:
                    87:2e:4f:ca:5b:22:f0:72:9f:28:a8:4b:d4:69:14:
                    8d:9f:b7:e0:b8:31:78:24:32:71:8e:e5:cb:52:23:
                    1c:d2:cd:9a:7d:f9:d6:1d:96:fa:6c:7e:e2:e7:0a:
                    94:d4:f7:e9:1f:e3:56:5e:10:e2:17:fc:5f:03:6c:
                    d0:d1:5b:eb:ed:6c:ba:87:2c:24:8a:cb:04:21:9a:
                    37:a9:02:ca:4f:bf:85:aa:a8:3f:af:f4:46:1a:9b:
                    c1:43:50:66:7b:e9:21:15:d4:9f:e8:e2:db:41:5c:
                    35:e1:ad:b3:1e:f1:cb:42:bc:2e:95:af:56:19:87:
                    47:4d:e8:7a:7f:e3:7d:db:5c:69:32:da:73:0d:b3:
                    61:25:fb:11:63:69:e0:65:86:68:9e:52:2a:fc:e6:
                    2c:19:10:3b:46:b7:9f:a2:36:fb:ae:97:3b:da:f9:
                    c1:22:7c:92:3c:ab:aa:52:16:e3:ee:2b:f7:7f:a4:
                    99:98:d5:1e:e1:cc:d5:e1:09:de:69:3a:d2:dc:96:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5E:AC:19:29:C3:EA:8E:66:07:45:D2:E8:62:09:2D:58:85:56:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:e6:c0:13:e2:3f:d7:5c:89:13:ee:68:94:07:bd:a2:59:
         71:55:e9:a1:04:23:50:a5:01:5e:77:08:0f:30:74:99:28:ce:
         cf:fa:11:a6:74:93:e8:5a:7e:52:f1:10:61:c2:c5:b4:5b:66:
         e2:c6:ec:ae:d8:57:11:0c:e7:9f:74:51:da:0d:9e:73:33:18:
         55:c4:51:8d:bf:75:99:72:93:9a:98:c5:3b:84:95:ea:e7:0a:
         11:ef:3c:71:c4:59:be:d7:af:38:81:32:e9:02:60:7e:d8:22:
         1d:e7:b4:f4:d2:e7:a9:fc:2e:9e:63:01:e1:f1:be:aa:c2:0f:
         0e:85:93:2a:aa:dc:ce:04:ba:70:b9:7a:2b:11:ef:46:45:71:
         09:8a:35:96:81:96:78:33:07:c6:89:b7:33:8a:d0:38:07:54:
         42:4b:29:8a:eb:1a:db:33:89:f6:61:77:f7:21:64:9a:f9:10:
         44:7c:cc:ec:db:83:5e:5c:93:80:a7:f0:56:75:3b:f0:fa:4a:
         ea:8b:2a:1b:99:69:2d:a3:d0:bd:38:be:81:7d:d7:40:e9:2f:
         22:a5:d8:b3:f6:7c:a7:b8:0b:fe:d8:ab:00:5b:ac:bb:b9:9d:
         7c:26:ac:ee:2b:bb:d6:d7:1c:c9:e0:a0:db:98:8c:10:5e:6a:
         44:26:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:12:39 2025 by rpki-client