Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/41b7ae61-8f36-3a2c-9a06-e4659677b722.roa
File:                     41b7ae61-8f36-3a2c-9a06-e4659677b722.roa (raw, json)
Hash identifier:          ncJUdda9Hw8tfFXwPZSXLSo/wraOpKiyXM0+S47csq4=
Subject key identifier:   89:D2:E9:BD:FD:22:1F:C3:17:87:7D:9D:71:E7:B6:52:49:C8:CC:84
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584B9E07C26623762E4E9FE86900
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/41b7ae61-8f36-3a2c-9a06-e4659677b722.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     53508
IP address blocks:        69.50.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c2:66:23:76:2e:4e:9f:e8:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=62cb94e0-2bea-49b3-8a60-7b346751aadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:b9:54:0c:79:90:0b:75:24:73:9c:8e:fb:
                    9b:a4:80:b4:3d:e3:8e:4c:3d:a6:3a:a7:c9:6d:d8:
                    83:89:42:95:13:d7:85:ce:cb:1c:4d:55:2d:aa:4e:
                    72:36:57:54:33:aa:9c:be:20:ff:9a:21:a2:57:78:
                    0d:19:6a:a6:e5:70:e7:1e:c8:f2:35:e8:3f:80:d5:
                    c2:d8:c4:ea:bc:af:13:e5:2f:b5:0e:51:e1:74:a6:
                    d7:3d:1e:c5:e0:18:82:84:57:b5:1e:27:d7:3a:83:
                    2a:02:b8:f6:51:8e:c7:01:8d:b8:2b:19:22:8f:69:
                    f0:f2:55:11:24:9b:69:59:1f:ef:20:56:2f:b6:ff:
                    a4:12:f2:b5:7d:51:4b:a5:7e:ec:ca:9c:03:d4:f6:
                    6a:34:7b:50:92:55:26:1f:d7:f2:19:0b:3d:4b:b0:
                    d7:34:5f:15:20:53:d1:46:b4:3e:93:98:59:5d:da:
                    ab:e2:3f:ee:d4:d1:40:c9:73:1d:52:3a:c3:f1:1c:
                    30:4e:b9:b4:d7:b5:88:59:33:05:56:f0:fd:d3:89:
                    6b:32:9d:13:f9:70:93:03:42:97:fa:72:df:8c:07:
                    c5:cf:14:da:88:bf:9e:bb:bf:61:26:09:15:69:42:
                    56:22:d3:d3:12:af:59:00:ca:4b:cc:bc:10:00:7b:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D2:E9:BD:FD:22:1F:C3:17:87:7D:9D:71:E7:B6:52:49:C8:CC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/41b7ae61-8f36-3a2c-9a06-e4659677b722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:08:9f:f1:7a:63:b7:0a:2a:03:5d:71:6a:84:a4:fb:9e:0b:
         e5:0e:b0:0a:d7:03:af:d0:98:f2:64:63:cd:15:55:fd:f8:f8:
         b3:73:6e:85:4c:a6:06:29:4c:47:89:04:91:86:8f:cf:be:78:
         e3:42:72:f0:06:64:45:f1:7d:66:2d:20:40:4a:f8:d4:7e:24:
         d4:71:7f:ce:12:e1:82:84:e0:d4:ab:94:2c:be:1c:e7:0d:ab:
         e7:a7:5c:44:05:fd:45:ff:43:66:3b:51:92:3d:86:78:34:7f:
         0b:2c:fd:15:42:e9:d1:1c:fd:77:4e:c3:8d:a1:27:94:fb:34:
         e5:77:48:20:a3:ba:31:5f:e7:c2:4a:3f:30:a5:bd:e5:e8:1b:
         7e:0d:e1:69:f3:3d:65:af:67:41:b8:8b:8a:0a:3c:a6:bf:ae:
         21:c7:fc:6f:f7:d7:ec:00:5f:8b:dd:f8:d3:e7:f5:c7:12:be:
         04:61:9f:07:1f:03:48:fa:bb:71:34:fd:52:54:21:76:87:19:
         a3:0c:d4:ae:5c:6e:7a:25:aa:1b:57:b8:62:0b:7c:8c:5c:83:
         79:f7:6b:45:07:0a:c3:c6:f3:1a:fe:08:1f:9d:c2:62:b7:33:
         dc:33:d3:74:7a:f9:e5:16:7f:fd:f4:a6:19:52:e2:a3:50:62:
         31:40:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:10:44 2025 by rpki-client