Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
File:                     a6c46de6-44a0-300d-bf19-e635e93471d5.roa (raw, json)
Hash identifier:          zKQhjG6PXGp+j30BbjE099EWdc/TEHVp0IpJ623j0YI=
Subject key identifier:   BA:CB:2D:3D:F6:00:E5:90:C3:ED:AF:8A:2E:00:78:C4:84:58:99:ED
Certificate issuer:       /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial:       010D0C9F4328584BBA1045EC7D014134BC019A80
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        68.71.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:45:ec:7d:01:41:34:bc:01:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=cfc92016-7ec7-4a8b-ac96-acb9f2a8f8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:3c:c0:74:92:31:29:e1:4d:73:e3:e0:45:
                    fc:9d:c3:37:35:8c:ba:d5:70:df:9b:3f:51:36:0b:
                    d0:73:88:0f:25:a2:0e:70:13:9d:12:21:9a:b6:de:
                    21:93:67:ab:77:1f:f1:df:f4:a4:78:fe:49:5e:08:
                    08:6e:65:e3:c4:77:06:f8:d2:13:3b:c7:15:11:73:
                    c1:19:b4:a7:c7:d3:85:75:06:df:ad:33:24:03:fa:
                    7a:1e:4a:e5:74:ca:ba:0c:dd:6d:a5:52:45:23:d6:
                    9d:96:b1:e6:b8:7f:c3:ab:c1:dd:26:c1:2a:8e:57:
                    b8:51:f3:ee:78:a1:7d:3e:5a:1b:73:7a:e5:bb:2c:
                    27:96:28:98:28:09:a8:84:b5:c9:8a:e1:05:73:03:
                    9c:05:16:72:a3:b1:b9:6b:68:3f:81:08:ae:b7:6f:
                    b7:ba:14:7c:fd:3b:a6:88:f5:dc:e0:a3:6d:b0:66:
                    78:be:b1:49:69:6f:59:7d:73:81:75:4a:9f:49:6a:
                    e7:32:58:2b:22:9f:5b:8f:70:9f:e1:cd:f4:bb:39:
                    83:a8:89:ec:3f:f7:4b:a6:5a:ea:13:92:9a:5c:ae:
                    7d:06:e4:5c:ad:8c:84:bc:db:31:26:dc:1b:76:f5:
                    e4:3c:60:7d:98:37:f5:d0:73:de:49:06:6e:54:c2:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CB:2D:3D:F6:00:E5:90:C3:ED:AF:8A:2E:00:78:C4:84:58:99:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl

            X509v3 Authority Key Identifier:
                keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:48:ef:13:2e:f2:f2:9e:64:6d:57:35:9e:69:98:55:cf:05:
         4b:9e:0b:7a:f1:31:05:3b:51:f1:d3:41:dd:58:92:86:cc:15:
         5c:d2:31:df:1b:19:ba:4c:77:dd:bd:54:36:17:09:20:bb:e7:
         3f:6e:98:92:3e:30:99:74:78:93:d8:3e:a4:dc:3b:f9:0a:37:
         95:7d:8b:e4:ee:05:6f:8d:52:40:aa:b7:67:22:41:78:e5:eb:
         3d:fa:29:25:dc:d6:1e:a6:99:1b:ba:b3:56:70:06:37:8a:94:
         e7:0b:cd:94:c9:30:47:aa:dc:30:9b:6c:2c:e6:02:67:3c:d7:
         85:b8:08:c9:77:47:19:2e:32:0f:c7:b4:58:1c:9a:21:fe:19:
         ac:f0:4c:7d:de:db:1f:b6:f4:63:20:40:99:a6:52:42:f7:ca:
         f8:cb:62:cf:88:2e:5a:ed:aa:6c:c6:3c:87:14:9c:7d:9c:4c:
         66:c8:c4:ea:4a:31:04:08:1f:e0:1c:99:ba:e8:31:a1:e3:16:
         98:05:ec:5b:a6:18:7b:95:aa:fe:c7:fb:d0:0b:ff:d3:eb:ec:
         2a:f1:85:e3:6f:01:39:f9:c4:4c:7f:47:23:e9:42:96:0a:bf:
         8f:ca:0b:96:05:da:f9:3e:0d:53:97:83:82:2d:df:de:c6:9e:
         87:53:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:25 2025 by rpki-client