Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa
File:                     ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa (raw, json)
Hash identifier:          JUOrlveVSzLGi1JjsS4O5Hr5CgSkZOOoyiEOSKLY+cQ=
Subject key identifier:   32:1A:E8:DD:2D:79:CA:E4:E7:5B:42:24:4C:29:50:90:A4:95:E9:CA
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584B9C5EEB98E545AA28BEC0AF80
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa
Signing time:             Wed 22 Oct 2025 22:45:03 +0000
ROA not before:           Wed 22 Oct 2025 22:45:03 +0000
ROA not after:            Tue 20 Jan 2026 23:45:03 +0000
asID:                     11663
IP address blocks:        204.113.4.0/24 maxlen: 24
                          204.113.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:5e:eb:98:e5:45:aa:28:be:c0:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Oct 22 22:45:03 2025 GMT
            Not After : Jan 20 23:45:03 2026 GMT
        Subject: CN=38aca492-203a-439b-8805-33603e5747c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:8c:95:6a:6f:8e:45:7a:90:56:73:d9:69:
                    21:5a:c6:75:7f:6c:ff:22:0b:1d:6e:32:29:f0:33:
                    d2:05:b8:f5:89:02:37:ca:e2:34:65:d1:1f:9a:b6:
                    e6:55:55:17:d0:2c:66:35:af:2b:70:6b:38:89:42:
                    71:c4:36:27:7d:7f:b8:1b:dc:f7:04:7c:02:58:ab:
                    65:66:80:a8:0c:7f:42:f1:14:62:2a:34:03:24:eb:
                    c0:1c:23:91:43:72:dc:7e:b3:d5:63:fb:92:ad:7e:
                    94:7c:2f:e2:17:b8:3b:8f:a4:30:a0:ce:a1:5a:3d:
                    2a:2b:c9:54:3e:d3:4d:32:a0:74:1d:f5:69:57:ca:
                    7a:92:81:4f:a3:44:32:f1:36:2e:7a:24:32:a6:17:
                    b0:c8:30:d0:8e:2c:0e:30:e5:fc:fb:86:ec:91:f9:
                    d6:ff:30:09:80:05:92:02:a8:5f:5b:e2:e6:2a:0e:
                    6f:af:d0:59:0f:c6:37:fa:5b:e6:52:b3:a2:ab:78:
                    44:b7:8e:b2:85:1f:f6:4d:fe:b0:cd:e3:36:b2:14:
                    43:5b:6b:ed:36:46:f4:52:a0:a4:e3:f9:95:a5:b2:
                    c2:1a:50:54:26:12:b7:f2:9a:b1:df:de:50:c6:33:
                    7d:fe:ed:5c:a3:f8:e3:6f:2e:66:74:8f:2c:f7:6a:
                    f3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1A:E8:DD:2D:79:CA:E4:E7:5B:42:24:4C:29:50:90:A4:95:E9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.113.4.0/24
                  204.113.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:61:fe:3c:08:85:5a:6b:c1:43:d5:d0:67:fb:e0:2a:72:db:
         9b:e9:1a:6b:b9:f2:19:65:fe:48:44:6e:11:06:de:90:87:54:
         43:5f:a0:73:79:36:54:2d:6a:ec:61:61:51:6f:84:ca:10:bd:
         cc:f8:02:e1:13:1f:c2:3e:1e:07:15:12:7e:88:d7:a4:f9:95:
         6f:f1:88:6c:86:41:bf:cc:82:dc:0a:52:bd:6c:c3:31:19:23:
         c6:ed:2d:10:7f:88:ae:88:12:18:31:16:16:6e:e4:4e:f9:d5:
         27:13:d3:e3:ee:32:eb:29:e6:b1:1b:b7:c8:b8:6e:cb:7e:21:
         bf:8b:92:d5:1a:f0:2b:2e:d2:b6:c6:33:83:f3:d3:25:72:dd:
         7c:de:9e:c7:f4:32:dc:0d:12:4d:e2:bf:8c:6e:cd:23:f3:4b:
         2f:db:82:9c:9f:64:1f:bd:bf:15:6e:ba:b4:01:61:13:cf:f1:
         02:3b:8c:e0:09:3c:24:14:23:44:4d:4c:1d:e0:bd:b6:2c:4e:
         d2:e2:84:88:f7:1b:de:6e:c4:da:ec:c0:51:f4:2e:0f:de:93:
         6c:00:b9:db:e3:82:be:a5:99:11:c4:d5:3c:d7:ba:bd:37:e6:
         df:67:9f:fe:55:73:7a:8b:45:83:88:68:7b:18:95:ce:dc:09:
         49:49:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:18:56 2025 by rpki-client