Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
File:                     8457e11b-32d1-34c0-81ea-624f8e85267e.roa (raw, json)
Hash identifier:          YNw8kLc4ZNE39+gno0gt97pVB3j1hHOmAz0kccQu0qE=
Subject key identifier:   0E:64:B7:5C:3E:4A:9D:26:4D:71:B6:65:0E:CA:4C:C9:12:B2:CB:6F
Certificate issuer:       /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial:       010D0C9F4328584B9872450EECAD182908888100
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     55254
IP address blocks:        72.46.80.0/22 maxlen: 24
                          104.37.112.0/22 maxlen: 24
                          162.211.184.0/22 maxlen: 24
                          168.100.192.0/19 maxlen: 24
                          172.96.20.0/22 maxlen: 24
                          205.201.30.0/23 maxlen: 24
                          205.220.192.0/20 maxlen: 24
                          216.10.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:45:0e:ec:ad:18:29:08:88:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=c554115d-6526-4e93-931d-8a832cd2f8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:7f:98:f3:40:a7:d0:96:31:67:28:a4:1f:
                    24:91:79:3f:1c:c7:75:7a:73:67:2e:b8:d5:60:5d:
                    4e:1e:5f:7e:00:77:bb:c7:05:9c:0c:3d:cf:40:68:
                    79:94:30:94:d9:f0:fa:ba:35:8f:c7:55:3b:da:4b:
                    78:fb:bc:0d:fc:fd:ac:8c:22:44:8b:e1:33:da:7f:
                    bc:de:97:8d:12:03:77:bd:e9:e0:c9:fb:ea:b7:91:
                    f8:0f:6b:96:f5:a9:d1:c3:45:a4:dd:4a:61:1d:b1:
                    ab:04:00:70:60:84:e9:ff:f1:b2:94:2b:41:95:29:
                    22:b8:33:e5:1b:57:a6:28:1d:f7:e5:19:10:be:e5:
                    bc:99:d8:23:95:14:02:dd:68:21:00:21:0a:c4:0d:
                    00:e0:db:fb:6a:3c:06:22:64:44:3e:87:84:48:9c:
                    3c:03:56:fc:8b:3c:10:95:db:18:6b:1d:de:f9:08:
                    e2:83:75:60:88:bd:39:09:5b:36:36:98:de:ec:b7:
                    17:77:fd:a8:2f:f2:91:70:6b:64:f7:2a:9c:b4:42:
                    ba:d0:b8:16:ad:89:60:ee:3e:ba:89:09:c2:00:af:
                    8c:74:ef:b5:67:af:e0:a8:99:b8:a9:74:86:19:93:
                    ec:96:da:24:68:e0:24:e3:44:63:05:ca:46:c6:d2:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:64:B7:5C:3E:4A:9D:26:4D:71:B6:65:0E:CA:4C:C9:12:B2:CB:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/8457e11b-32d1-34c0-81ea-624f8e85267e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl

            X509v3 Authority Key Identifier:
                keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.80.0/22
                  104.37.112.0/22
                  162.211.184.0/22
                  168.100.192.0/19
                  172.96.20.0/22
                  205.201.30.0/23
                  205.220.192.0/20
                  216.10.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e7:b6:44:3f:fb:63:22:77:be:7d:50:5d:1c:eb:7b:97:e2:
         4b:12:e4:11:af:87:a6:9f:24:eb:93:72:d1:1c:f7:11:ae:56:
         0c:3d:9d:3d:d5:91:cd:22:0c:e5:e3:19:79:17:77:0a:34:ba:
         6b:93:7b:75:a1:56:bb:19:cd:8c:d2:27:9a:8a:2b:02:c3:c8:
         fe:20:38:66:ba:58:95:1e:fe:60:1b:3f:b7:b7:35:8e:21:50:
         54:d0:85:b8:c6:a3:bf:03:f8:4e:05:24:d8:c0:a4:65:5b:27:
         27:27:d5:e4:b0:76:dc:02:38:b5:09:1a:28:18:a7:65:0b:9f:
         a8:75:84:df:06:35:4a:5a:57:58:41:4f:41:09:88:b5:7f:5c:
         2d:4f:e5:3d:27:c2:3f:7f:a0:a0:c2:7c:44:e6:d9:21:e0:1d:
         f0:ce:4a:b1:a6:7a:b1:8d:bb:49:64:be:38:5a:ae:7a:1c:12:
         03:4a:b5:57:b9:4a:a9:15:71:d0:9f:87:84:ca:03:ae:13:42:
         88:26:17:44:9f:df:01:cc:9f:19:3e:eb:5d:e0:61:19:38:68:
         a8:f2:c6:7e:87:e9:38:78:26:9e:28:28:d0:fa:31:35:23:15:
         cf:9f:ac:65:95:24:15:a3:77:ca:33:1f:6e:c5:84:57:4e:89:
         de:f3:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:31 2025 by rpki-client