Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/01890417-85b0-3fa8-b911-bc45f0339762.roa
File:                     01890417-85b0-3fa8-b911-bc45f0339762.roa (raw, json)
Hash identifier:          LjJCYt+O5w5aouY83LRDctZhG3xSENLABKHKA/mHdxY=
Subject key identifier:   C5:8E:33:8E:38:56:EC:2D:8A:E6:A9:31:20:12:E3:68:A4:28:1C:07
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584B970CCF539A8F50157BF07840
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/01890417-85b0-3fa8-b911-bc45f0339762.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     16904
IP address blocks:        70.40.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:cf:53:9a:8f:50:15:7b:f0:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=794b85d8-6603-4cda-942d-afb669d77aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:e0:a5:f1:d1:b6:b0:67:56:08:bf:83:79:
                    d0:9c:59:1f:89:22:48:f3:f4:cb:39:c1:d2:60:53:
                    11:a0:24:1d:c1:8b:ee:99:65:a7:4b:5f:64:cd:30:
                    c2:05:80:5e:90:d5:54:82:bd:d8:ba:24:a0:a4:59:
                    3b:70:fa:50:98:79:02:b8:7a:fc:a1:b1:9e:83:a7:
                    f6:b1:1a:c9:31:ab:14:81:f8:97:47:1d:db:97:92:
                    f9:28:f3:c1:40:28:77:65:8b:b2:e1:b9:fd:c0:54:
                    33:ce:5d:60:85:b3:af:5f:c7:da:de:59:f5:b7:ea:
                    e3:6a:14:a9:1f:48:a7:3c:82:37:d6:2b:d4:c5:aa:
                    70:c8:a4:dc:19:77:a4:8b:49:d1:19:05:eb:c9:b0:
                    f2:e6:d8:26:01:74:cf:35:f8:dc:5c:80:61:f9:35:
                    d8:6a:d0:94:d4:95:2b:84:08:e4:2b:b5:bc:0b:19:
                    1a:02:03:e9:98:af:6d:bb:46:db:40:a1:ce:af:62:
                    00:a3:07:94:2f:8c:83:ae:94:47:d0:31:7a:04:66:
                    64:13:01:ed:c1:83:da:a3:e3:ba:06:91:90:39:2c:
                    a3:77:aa:23:e5:8b:b7:98:cd:44:d8:23:42:d5:86:
                    54:26:cb:95:ca:ab:2f:46:96:ee:f1:3c:8b:d1:32:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8E:33:8E:38:56:EC:2D:8A:E6:A9:31:20:12:E3:68:A4:28:1C:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/01890417-85b0-3fa8-b911-bc45f0339762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.40.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:ef:c9:47:64:3f:f6:f1:81:4e:ac:bb:e6:8b:0b:1a:36:
         4b:2b:fc:54:19:75:31:32:37:39:d9:d9:d8:40:4d:3e:f3:b7:
         4c:95:67:c1:4f:0d:3d:c7:00:09:3e:ab:43:da:fb:bc:00:7b:
         a1:3c:35:23:a6:1d:22:91:c4:b6:a7:5b:45:5c:df:1d:67:d7:
         ff:4d:f3:26:28:10:29:6d:41:29:35:2d:f2:df:f7:ca:ed:74:
         6b:0c:e5:79:ed:85:e9:54:20:c8:0e:76:a2:25:9d:ed:e7:49:
         92:18:26:19:1b:a9:ec:b5:44:61:9e:1a:60:d4:02:19:02:f9:
         27:83:ab:81:98:f8:73:36:bd:dc:d9:25:97:d8:d6:5f:b6:e9:
         5e:b5:42:38:1b:a0:b6:1c:c0:cd:b2:8b:9c:bc:ee:12:f3:d2:
         50:ea:b0:d7:b0:ab:15:3b:47:9c:f7:db:0f:8c:8e:ee:5d:5b:
         ab:91:ac:b2:cb:e7:cf:7f:5a:59:2c:54:e8:b4:96:4c:9f:1a:
         52:02:bc:53:b1:5e:12:92:f9:3a:cf:47:be:39:9a:bf:c4:88:
         c8:14:c1:9a:4d:1b:c1:11:ed:ca:11:b3:84:71:0a:5e:00:7c:
         1a:a3:6d:b4:d4:5c:87:72:2e:8d:c1:92:53:67:e3:6d:32:4a:
         a1:99:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:01:51 2025 by rpki-client