Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/6b886f46-4a10-33ef-b8bc-84fddc997738.roa
File:                     6b886f46-4a10-33ef-b8bc-84fddc997738.roa (raw, json)
Hash identifier:          u+moohMD9HDyssHofL0AdW/jalKcnCEdyDHYSqOFBYQ=
Subject key identifier:   D7:79:65:68:1F:FF:70:AF:0A:65:BA:31:13:14:C0:68:23:ED:12:4C
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584BA932693B6B8CB03612435500
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/6b886f46-4a10-33ef-b8bc-84fddc997738.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     11659
IP address blocks:        169.147.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:69:3b:6b:8c:b0:36:12:43:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=c752ac56-b031-41ad-abbf-c67387c8b34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:06:f4:6f:57:e3:19:a2:a3:44:c5:a2:15:
                    bd:da:71:ba:a0:d0:ca:cd:89:41:bb:18:cc:ba:82:
                    b8:40:0b:bb:25:e0:a2:f6:86:c4:d9:14:0f:51:52:
                    53:bc:d0:c8:76:bd:94:76:95:17:bf:03:f9:63:61:
                    cd:3a:24:d0:47:9e:f2:01:d0:d9:55:7f:c6:bb:bc:
                    c4:99:f2:c1:75:72:a4:13:bd:c5:73:c4:62:ef:dd:
                    8b:5e:c4:f1:a7:3f:ce:22:b4:4c:d4:d1:51:f8:df:
                    3b:c5:bb:ad:ac:40:d0:1d:d7:7b:a9:1e:01:b0:e9:
                    8e:cf:17:e2:75:8d:6a:0d:59:ea:ed:52:28:c5:0f:
                    93:a1:e5:45:ac:63:b4:31:7a:8f:16:21:25:97:9c:
                    4f:6a:04:fa:43:32:19:88:68:28:e6:93:67:be:8b:
                    81:82:64:11:33:74:da:b1:7c:4c:bd:1f:cf:88:f0:
                    77:7a:13:de:d4:b5:58:0a:6c:d9:35:67:3f:8f:d0:
                    0f:d1:69:3f:c5:83:e3:66:19:82:78:54:39:bc:e8:
                    ff:a2:12:7b:7c:53:83:ce:9b:15:7a:90:72:be:46:
                    79:6a:e7:44:95:f9:e9:c4:8d:99:43:87:45:a9:16:
                    32:5d:20:a3:35:9b:09:94:7b:02:5d:56:7b:91:62:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:79:65:68:1F:FF:70:AF:0A:65:BA:31:13:14:C0:68:23:ED:12:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/6b886f46-4a10-33ef-b8bc-84fddc997738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:50:7a:1f:34:69:72:df:8c:74:12:5c:fa:0a:e8:de:30:
         69:d1:69:cc:f9:d0:dd:f8:19:03:aa:7f:44:04:0d:79:99:a8:
         3d:09:5f:6a:6a:3a:c3:7f:af:e2:b7:5f:79:ee:6e:c2:0d:fc:
         bf:fd:1b:81:d5:ad:62:da:da:73:66:0b:c0:c2:1f:18:e2:50:
         90:71:24:37:9c:5f:e0:74:f2:10:5a:69:fc:c4:da:f2:7e:74:
         41:89:45:6c:10:c0:9a:de:96:f9:b1:ba:cb:55:22:be:20:4f:
         01:e0:c6:72:7d:29:ea:09:32:40:db:b2:f6:33:88:4e:5d:71:
         35:41:be:01:c4:57:38:95:b6:e1:b8:62:81:0b:d7:3a:3d:a0:
         17:e6:66:ba:1c:fb:66:16:01:78:85:d9:7c:21:34:91:3b:83:
         96:6a:0a:b8:1a:15:59:08:78:40:04:6a:da:fe:ce:fa:f7:a2:
         3a:3a:86:41:be:0a:e5:ce:a4:02:6c:4f:d6:b1:6d:31:58:72:
         1b:20:45:23:36:59:c8:5e:db:7f:2a:cf:6d:28:e2:cb:5a:81:
         f2:00:d4:53:04:0b:e0:c0:08:9b:c0:be:f8:5d:88:a6:a4:88:
         97:43:22:fd:1a:71:2e:98:9f:9c:67:df:26:04:aa:71:7a:61:
         2d:96:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:54:31 2025 by rpki-client