Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/7fb468a9-a644-325f-8326-ae2a2f605495.roa
File:                     7fb468a9-a644-325f-8326-ae2a2f605495.roa (raw, json)
Hash identifier:          dDM+1uNHcFke0jX7Txa5nJu8wZyRp24I7aweEpzzE18=
Subject key identifier:   20:9C:CA:07:A3:50:8D:8F:13:86:92:AE:3E:4D:34:B9:52:97:42:40
Certificate issuer:       /CN=111eedbe-f68d-42f2-84d7-0e90b6634d0a
Certificate serial:       010D0C9F4328584BBFA59CF61D7777CBFD097A00
Authority key identifier: 6A:08:C7:3B:B2:DE:D4:60:5C:37:53:E8:20:6C:2D:C6:6A:3E:2C:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/7fb468a9-a644-325f-8326-ae2a2f605495.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     63276
IP address blocks:        184.171.144.0/20 maxlen: 20
                          216.93.144.0/20 maxlen: 20
                          2620:e4:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/111eedbe-f68d-42f2-84d7-0e90b6634d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/111eedbe-f68d-42f2-84d7-0e90b6634d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:9c:f6:1d:77:77:cb:fd:09:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111eedbe-f68d-42f2-84d7-0e90b6634d0a
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=ac2b1aa4-fc46-4c73-85a4-f6cc07f8f866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:ea:58:d6:0a:61:d9:54:83:2b:c2:d0:7c:
                    f0:6a:05:de:c8:ba:19:fd:29:02:ee:20:a5:20:0f:
                    ae:2a:5b:0a:14:43:bf:c5:08:30:8a:fb:dd:92:fc:
                    1e:0d:71:8f:e5:34:79:c7:41:b4:08:e6:cf:f0:1f:
                    b3:7c:3a:1a:3f:ee:77:7c:12:35:7f:e3:b0:92:fb:
                    cf:c1:2a:58:e3:a6:d0:18:e9:aa:7d:d0:e6:f4:5f:
                    49:1b:30:a2:b7:02:54:73:88:0e:ea:ce:6e:43:7f:
                    5f:25:cf:25:5d:fc:19:4f:70:96:3b:91:58:75:3b:
                    66:4b:2f:70:04:9e:03:03:75:bc:b8:c8:38:fa:72:
                    c6:54:4e:60:e1:15:bb:16:8e:08:35:75:56:99:a3:
                    c1:4b:96:e0:c0:af:7f:5d:b6:50:b6:cf:5d:98:a6:
                    c0:33:b1:0c:56:a2:60:7a:4a:9f:75:e3:d8:b3:ac:
                    30:0e:da:17:91:92:91:27:6c:6a:7f:57:0a:ab:48:
                    23:6a:69:db:8a:c7:c2:e0:9b:9e:85:51:68:b4:e0:
                    03:4d:98:89:9f:53:10:36:8d:c5:ed:4c:be:79:6b:
                    96:5e:23:dd:d4:1a:fc:05:56:a4:0c:28:8d:02:f4:
                    b2:64:90:8f:b4:69:81:67:4f:ae:bb:00:2d:3f:ba:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9C:CA:07:A3:50:8D:8F:13:86:92:AE:3E:4D:34:B9:52:97:42:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/7fb468a9-a644-325f-8326-ae2a2f605495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/111eedbe-f68d-42f2-84d7-0e90b6634d0a.crl

            X509v3 Authority Key Identifier:
                keyid:6A:08:C7:3B:B2:DE:D4:60:5C:37:53:E8:20:6C:2D:C6:6A:3E:2C:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.171.144.0/20
                  216.93.144.0/20
                IPv6:
                  2620:e4:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:a0:95:88:75:dd:70:f4:35:db:40:47:bb:3c:12:f2:f5:
         ca:56:04:da:03:bd:8d:96:01:84:c3:00:b6:b7:4d:ce:36:1c:
         ca:73:b8:34:38:fd:b8:9c:be:bc:e8:0f:aa:b0:2b:c9:f3:b0:
         64:7d:22:8a:65:37:25:b0:b3:4d:9b:66:39:71:ed:16:8d:2c:
         1f:8a:8b:b9:74:d1:84:32:d1:23:6a:d6:a8:91:b6:aa:db:bb:
         8c:a9:cb:73:47:15:b4:d4:5a:66:c0:79:91:58:f9:d1:02:ae:
         2f:86:fb:1a:c3:39:d0:4f:43:cf:79:ea:20:72:90:2b:d4:08:
         a7:a9:bf:f8:34:94:1f:57:98:64:4b:9c:fd:6c:92:ba:bb:0e:
         1c:8b:f8:67:84:32:3b:59:d1:5e:e2:a8:00:2a:ba:d6:d8:11:
         06:5b:7e:42:1d:a7:16:69:19:77:18:b3:7f:82:01:12:20:07:
         9d:7b:42:8a:0d:a6:44:a8:b8:18:b3:00:88:61:be:b1:b9:57:
         75:15:bc:41:c9:bf:8b:d7:8d:d7:bd:08:3d:7b:a8:d9:4e:0a:
         1b:9c:91:35:90:79:cc:db:09:d2:3b:b3:82:c7:8a:d1:79:85:
         07:c7:65:39:8d:8c:e3:07:65:4b:a3:3f:00:f2:da:5d:bb:9d:
         8a:d7:87:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:35:37 2025 by rpki-client