Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/a1e5e2e1-8f04-30ff-8e9f-f149dffab83d.roa
File:                     a1e5e2e1-8f04-30ff-8e9f-f149dffab83d.roa (raw, json)
Hash identifier:          bzP52/0pPAgtdFG19+lR1lpr/BM/tdlbYcS/8Uo7XTk=
Subject key identifier:   66:28:F0:08:41:5E:20:4C:DE:E0:F2:CC:53:88:F9:60:35:48:9F:82
Certificate issuer:       /CN=ebad5283-db04-4fcf-81a8-4a09a38eb203
Certificate serial:       010D0C9F4328584BB02CFB8D50F639FCF4616380
Authority key identifier: 61:DE:A3:8E:F7:70:33:FE:F0:9B:F7:58:2B:E1:A8:29:FA:47:A5:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/a1e5e2e1-8f04-30ff-8e9f-f149dffab83d.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     16840
IP address blocks:        206.183.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:fb:8d:50:f6:39:fc:f4:61:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebad5283-db04-4fcf-81a8-4a09a38eb203
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=866cec56-e49c-4dcd-bf32-8cc176c18856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:bb:09:2a:a1:15:60:b6:2c:d8:15:ff:85:
                    48:06:b3:13:53:98:17:5a:5a:49:cb:ae:36:fd:de:
                    94:82:a5:cc:e6:af:3b:ab:ea:d1:aa:7f:fc:51:7a:
                    c1:08:86:56:ad:e3:a2:2d:23:9b:0c:c6:33:75:87:
                    d0:07:04:68:6a:f9:db:40:84:76:bc:26:dd:b5:02:
                    61:4c:21:a2:f8:a6:e0:ba:09:9a:9a:45:c6:3b:64:
                    1c:46:dd:c2:09:55:3e:0f:4e:c2:cf:72:b1:dc:28:
                    01:12:d0:6b:e8:81:b3:34:f6:6e:df:d4:17:98:62:
                    01:c7:97:3e:22:f3:1d:5d:36:3a:6b:1b:b9:27:94:
                    13:2b:09:6d:bb:62:f7:ac:43:c2:1d:55:70:c8:7c:
                    2d:60:f7:70:a3:a9:e5:00:77:c3:80:1d:4a:82:38:
                    f9:af:86:a2:d7:c6:11:6a:cd:c2:15:ee:1d:e5:03:
                    10:58:be:14:27:8a:75:5b:c5:84:7e:f2:5f:8e:f0:
                    00:3e:cd:68:00:1b:a3:52:6f:8f:60:50:d6:07:1c:
                    f5:97:9b:49:d7:d9:eb:14:53:5c:34:c2:85:65:34:
                    f3:5d:54:f1:43:b9:63:3b:0b:27:40:c9:77:45:52:
                    16:95:e3:93:f1:37:a6:24:64:ae:59:3f:bb:b4:5d:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:F0:08:41:5E:20:4C:DE:E0:F2:CC:53:88:F9:60:35:48:9F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/a1e5e2e1-8f04-30ff-8e9f-f149dffab83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:A3:8E:F7:70:33:FE:F0:9B:F7:58:2B:E1:A8:29:FA:47:A5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:34:70:24:42:a7:8e:91:32:c4:3a:7a:a9:28:ad:5c:90:
         0c:26:b7:75:5d:37:b4:41:3d:e9:5a:8f:4e:d0:10:70:c0:70:
         1e:d5:38:58:61:20:a3:bf:46:b6:a6:4e:4b:0f:78:f8:14:cb:
         78:89:c3:42:23:7c:ac:b1:43:aa:93:2d:e2:e5:37:da:4e:e0:
         f6:c5:8a:87:a5:fd:16:d3:d7:12:d9:72:23:e2:f3:50:b5:37:
         11:f9:f0:15:3e:59:be:a5:3d:b2:02:81:ee:21:3f:28:e2:dc:
         a0:49:60:77:66:6c:e5:df:aa:47:23:87:ba:ca:0f:39:2c:f3:
         de:17:30:2e:bc:59:87:e2:4a:10:a1:2d:a8:d1:5e:91:67:01:
         2c:70:83:50:f0:97:80:61:fb:1e:44:87:72:0f:e5:b9:64:61:
         da:17:c1:13:d5:92:b8:b3:53:35:58:ea:02:31:fe:1d:cd:27:
         cf:63:4a:ee:31:68:3d:e4:ba:e0:65:00:41:ac:a8:a5:dd:59:
         30:e8:30:52:75:7e:ee:a8:6a:d9:fc:bf:30:a1:65:46:38:73:
         49:3e:3c:2c:11:b3:e7:64:27:d9:50:23:2e:61:85:69:87:bf:
         ad:4b:8a:bf:57:b1:23:59:b8:a6:49:49:86:2c:27:69:a1:09:
         20:ac:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:21:39 2025 by rpki-client