Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f895068e-d322-333e-934e-3790f126ae8c.roa
File:                     f895068e-d322-333e-934e-3790f126ae8c.roa (raw, json)
Hash identifier:          NDu0yLUw5Nq3bt/9je4/hKnEAIi9jgvgevEHi6RtaDY=
Subject key identifier:   AD:64:62:1A:39:EB:5F:F3:10:5F:DE:29:02:8D:A3:E8:01:80:DF:3C
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584BC2704E5DF9C65A62346E7900
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f895068e-d322-333e-934e-3790f126ae8c.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     7018
IP address blocks:        202.165.72.0/21 maxlen: 24
                          202.182.64.0/20 maxlen: 24
                          216.185.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:4e:5d:f9:c6:5a:62:34:6e:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=7c904f5b-801b-434e-86eb-c82b791b541f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b4:69:1c:29:2a:7c:27:8b:66:0a:df:5b:e6:
                    6d:ba:5c:e9:1b:f5:b7:67:56:eb:80:49:81:8b:ae:
                    d9:19:0e:c8:aa:10:b7:b9:4e:85:c9:96:7b:69:09:
                    2d:fd:32:ee:18:01:60:3f:5e:7c:7f:4f:86:93:8b:
                    a3:40:b4:63:b9:bf:fb:04:5e:d1:d8:00:ac:79:28:
                    fe:8f:0d:bf:08:c8:f8:78:81:f5:1d:fe:ac:2c:4d:
                    6b:cb:ee:71:a3:fc:a5:44:07:d0:a9:bf:d8:5e:19:
                    55:6e:b2:19:31:fa:e8:4b:1c:4f:95:b3:d6:18:03:
                    2e:68:44:08:51:77:b2:80:ef:a1:74:a5:db:27:b1:
                    88:5b:b6:0a:e1:ba:e0:74:b3:f2:c9:ae:55:0e:04:
                    1c:cc:a1:54:3a:fd:04:18:f1:cd:4f:11:1d:d8:0b:
                    e0:d6:93:49:70:11:79:29:66:bf:6a:0a:ea:1a:c4:
                    c3:90:e4:5d:46:86:56:7e:50:34:43:43:1a:e4:2b:
                    f6:a8:2a:d0:97:7f:1d:2d:19:dd:5c:25:e3:91:1c:
                    a7:4d:a5:84:3b:da:61:2c:4c:bb:75:03:79:49:50:
                    a6:24:78:ad:3d:83:f8:3e:cc:20:66:26:2a:da:77:
                    d0:ca:5d:ba:c1:ff:fd:de:a2:7f:54:ee:90:a7:8d:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:64:62:1A:39:EB:5F:F3:10:5F:DE:29:02:8D:A3:E8:01:80:DF:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f895068e-d322-333e-934e-3790f126ae8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.72.0/21
                  202.182.64.0/20
                  216.185.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:51:de:9c:06:62:31:d2:ad:67:0e:18:bf:0b:8e:35:ab:69:
         d4:bd:93:55:be:b5:10:da:96:77:6e:67:eb:9b:bf:e2:15:b8:
         43:66:c7:92:8f:16:0b:22:c1:24:f1:97:68:7f:78:03:00:af:
         20:94:dc:16:a3:33:f4:ff:71:94:97:9c:90:a7:d7:67:d0:90:
         ea:1f:9d:13:1e:63:c8:07:76:42:62:59:08:ea:77:f1:32:c6:
         b8:49:67:bd:32:c0:3b:ce:80:26:8e:72:17:bd:7d:40:c7:49:
         90:b2:d9:f6:bb:05:44:aa:b5:6f:45:01:8e:7c:b6:59:e9:0b:
         d4:33:9b:2b:74:ae:b0:9a:a9:e2:06:e2:d5:83:4c:64:33:91:
         d1:53:c4:52:3a:3a:a8:97:17:db:66:85:79:32:1e:23:d6:11:
         b0:12:3b:82:45:f8:c2:4c:54:b8:85:04:1c:f4:b2:d4:b4:07:
         1d:35:7c:da:98:39:d5:60:46:1d:0d:60:c9:5c:7e:de:55:a9:
         c2:cd:20:6a:8e:79:5d:1f:21:f3:8b:1d:6c:13:36:83:a1:9d:
         cb:2f:4e:d3:6a:1e:cf:77:07:e9:03:50:db:5c:ef:ff:2a:c0:
         79:b0:8a:a7:d6:11:64:ee:76:bf:48:d1:09:ee:85:cf:42:ec:
         ad:95:df:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:17:15 2025 by rpki-client