Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
File:                     ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa (raw, json)
Hash identifier:          jRm93xUtbjGxyJrIKNMs9klp+ZasZ53gsSzs1Zwna3A=
Subject key identifier:   D6:15:80:A4:2D:56:69:AD:7B:D6:AC:17:DF:7C:C4:DC:4A:66:C5:48
Certificate issuer:       /CN=117f0c8a-705e-440d-8160-752196eb04a2
Certificate serial:       010D0C9F4328584BB88D2C6D247A04920D530BC0
Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        72.22.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2c:6d:24:7a:04:92:0d:53:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=1fc0c810-ae5a-4b45-b5b9-b47586fae5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:22:53:6e:3e:f3:6f:86:17:cb:de:3c:4e:
                    4f:9c:9f:15:96:fd:18:5e:c5:82:78:7c:df:5e:a4:
                    09:c8:19:01:2e:d9:ab:a6:6e:e1:90:05:5f:c5:76:
                    8b:63:77:97:b9:f3:d4:11:fb:1a:ec:93:3e:9f:cf:
                    41:c0:00:c6:2f:61:3c:b1:9e:42:96:d4:26:49:97:
                    d8:45:c2:f5:96:5e:5a:3d:c9:47:18:3e:10:70:62:
                    8d:73:c5:ae:6e:a5:25:91:d7:99:9a:45:67:c4:ef:
                    02:57:58:19:74:c0:63:67:0d:76:7e:d2:89:2a:64:
                    c4:84:1d:d9:4e:ee:d5:68:83:14:39:69:5b:76:b7:
                    91:33:26:17:42:95:01:3e:cf:28:f2:bf:40:0a:32:
                    6e:97:91:7c:d7:f1:82:2d:93:51:0b:2a:18:52:98:
                    e8:1d:ef:63:40:f8:29:18:6e:d1:1a:eb:12:18:1d:
                    66:20:50:b7:92:ac:11:11:59:d7:33:e6:90:85:9d:
                    ac:b9:47:0f:4a:44:9b:25:13:61:33:27:21:b4:20:
                    97:6e:93:cd:a8:be:ee:1f:5d:6f:1f:2a:b6:81:03:
                    8a:61:1b:b1:9f:65:d0:38:63:f8:2f:a8:6d:cc:cb:
                    44:26:db:db:a0:1a:38:4c:1f:42:f0:a1:a7:43:48:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:15:80:A4:2D:56:69:AD:7B:D6:AC:17:DF:7C:C4:DC:4A:66:C5:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl

            X509v3 Authority Key Identifier:
                keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:4e:84:f5:2f:d3:1d:c2:f9:51:11:96:3f:f1:6b:ce:ef:
         25:67:59:d3:48:7f:07:77:b2:3f:33:1e:a5:81:54:00:11:4d:
         2c:c5:d3:ae:a9:7a:34:f0:d2:3e:b6:cc:b9:17:df:c0:5f:15:
         c4:a4:81:33:b6:57:36:cb:a5:ea:2a:cf:6e:94:55:ef:b6:ad:
         5c:43:68:77:91:76:74:cf:04:a0:2a:83:76:5d:45:b1:5d:78:
         66:d0:bd:6c:35:a8:0a:83:eb:cf:a5:50:de:13:3d:bd:14:8a:
         b6:91:b5:d3:b6:dd:14:db:3c:ba:32:1a:cb:04:ad:d4:e6:81:
         9c:a3:fb:d0:cd:d6:52:b8:f0:9d:80:61:63:9b:ff:e9:37:f6:
         16:ab:1d:e0:24:ad:95:d8:9b:67:3a:f7:cf:4e:5a:1b:34:d8:
         80:ba:2e:c7:af:0a:fe:47:c7:0a:9f:b1:7a:fd:24:64:fa:a0:
         70:1e:da:e8:ec:92:43:d1:35:f2:16:d6:3b:0f:c5:48:6e:ae:
         a3:30:aa:5b:ac:8a:8a:8c:13:af:9a:9e:ab:0f:ef:c8:6d:7e:
         f7:c9:45:27:bf:66:10:d3:85:b7:06:42:9f:6c:c5:95:5e:63:
         5e:f2:7d:8f:a5:56:2d:f9:da:f7:3a:08:41:ef:51:63:bf:93:
         d9:3c:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:15 2025 by rpki-client