Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa
File:                     fc8a04a9-488c-3924-8f7b-3da391e956ef.roa (raw, json)
Hash identifier:          ixPG3akK+xcRU7CvG/HJwfSOl2cNImjW28u7soEFqJc=
Subject key identifier:   00:19:43:93:EE:58:F4:61:A9:A9:77:79:C8:C4:0C:D3:4B:4E:6C:0B
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F4328584BB2F7AC565268C50E6A9F4AC0
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     20454
IP address blocks:        69.160.44.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:ac:56:52:68:c5:0e:6a:9f:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=e02a0ce3-9fe1-4ef1-9779-abcf9251662f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:e7:b8:38:9d:67:ad:b4:19:af:f0:a1:10:
                    4b:c3:f1:f8:f8:00:fc:79:6d:c4:32:cc:39:0b:fc:
                    3e:31:22:43:1b:91:d1:a8:cb:d2:91:20:53:51:4a:
                    d4:71:11:52:0c:fc:4e:7d:27:8f:c4:ae:e1:84:40:
                    82:b7:d6:2d:c9:93:17:e5:4a:5e:db:6c:9c:fb:4a:
                    e3:66:dc:21:75:60:1a:a8:b2:02:54:ca:cc:dc:dd:
                    f3:8e:4a:4f:ab:a7:cd:f0:9e:0c:aa:1a:f3:1a:92:
                    c3:00:e2:d7:aa:d9:28:51:4f:bb:5f:96:89:12:d6:
                    d0:54:78:d6:66:5b:5a:17:30:51:6a:1b:60:06:6a:
                    60:b4:87:89:e2:d0:03:4e:04:a7:cd:70:fc:48:62:
                    7f:34:60:eb:d9:16:2b:44:98:03:d9:dd:f9:4b:f2:
                    0e:49:9d:e7:85:b4:e4:8d:dc:dd:9f:5b:b0:e1:c0:
                    0b:00:ee:7a:01:7f:16:9b:d1:92:57:2b:52:ec:dd:
                    33:28:e9:4d:6a:c7:38:ed:85:97:51:9a:ce:1d:bc:
                    3d:51:1c:cc:34:d8:5b:0f:0d:10:ee:6b:c8:34:5a:
                    c8:24:d7:9b:79:f2:81:7f:79:f7:e5:ee:18:f9:13:
                    4f:98:95:87:4e:a7:f3:43:05:b3:6a:ba:4b:f4:41:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:19:43:93:EE:58:F4:61:A9:A9:77:79:C8:C4:0C:D3:4B:4E:6C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b8:99:33:fa:41:79:a2:0e:2b:54:f0:eb:69:fd:72:3b:53:
         ca:61:d3:e9:aa:21:56:15:2a:0a:00:e1:ca:2d:5c:03:e4:a6:
         f5:86:e1:b8:67:01:ea:e0:9a:76:96:48:51:0c:21:bf:76:45:
         20:90:3f:e7:47:ec:d1:c3:9f:32:c8:a6:2e:8d:15:37:0d:e1:
         d2:71:47:c9:4d:a4:a7:d2:53:f0:0a:e0:86:40:65:ab:d3:cf:
         f7:44:f0:3e:40:98:e3:7c:da:5f:68:01:79:21:12:17:3c:db:
         10:08:52:1b:97:30:25:37:fb:4b:b4:3a:e4:50:89:09:85:1f:
         88:0e:41:11:70:d9:f5:0e:3d:dc:73:10:02:d9:74:10:9b:b7:
         2f:40:23:e8:98:c2:96:4c:50:d4:9f:12:fb:73:1d:16:01:9d:
         14:d3:63:70:40:f0:ef:64:17:53:6f:1d:94:2f:11:d5:0f:45:
         c0:14:4e:51:3f:a9:21:fb:78:aa:2c:0a:b6:1d:13:38:38:2a:
         0f:72:50:77:de:a7:cf:ea:a6:5d:79:97:66:ea:61:ba:67:57:
         32:24:14:76:81:be:ac:5e:94:11:d3:1b:69:46:3f:af:d6:3c:
         84:54:36:70:ad:cb:8e:d4:a5:34:5b:05:50:bf:63:ed:ab:1f:
         89:b4:75:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:34:03 2025 by rpki-client