Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa
File:                     f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa (raw, json)
Hash identifier:          DdBoo/Kj7l485cr4bv5s3gXoY2n3yZh72mRHgcQ7IVI=
Subject key identifier:   73:30:B8:20:98:CF:AF:33:13:69:7F:34:C0:33:D3:65:65:60:96:4E
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584BB45D1699A706303CE7585900
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:16:99:a7:06:30:3c:e7:58:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=64bb594b-915b-48e3-81b5-9e169fc27cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:ea:8c:5f:a1:70:c4:36:55:60:17:e4:02:
                    03:8b:58:07:60:ed:31:de:95:60:4c:cf:c6:95:73:
                    16:78:ca:ff:fd:de:c0:3d:42:cb:a1:72:b8:9a:5e:
                    d5:40:fe:44:8f:c7:8d:09:9b:85:f3:08:7e:51:c6:
                    ac:1b:24:b8:de:1e:2e:f4:de:63:7a:10:04:f5:b0:
                    ee:3e:bd:47:b8:8d:8e:e1:86:33:5f:cc:3d:c9:13:
                    fb:03:11:b7:b6:1b:95:0a:7a:33:00:04:97:6c:a5:
                    c4:6c:57:8b:20:4c:99:24:3f:ce:77:67:b0:85:8f:
                    a9:ad:5f:a5:26:c3:90:ab:33:b5:b0:af:7f:26:d0:
                    af:ed:72:7e:4a:5f:a2:98:9b:22:e1:8d:a5:c4:4b:
                    23:96:e4:4c:43:7c:d1:63:5f:fa:58:e2:2a:a8:30:
                    49:f1:43:ec:eb:3b:71:c2:4f:48:3c:62:3d:04:10:
                    6a:8c:3f:51:85:cd:44:26:05:b0:2e:11:7f:53:dd:
                    1a:5c:74:e9:77:d8:82:f6:e9:55:55:93:ea:14:3b:
                    ef:d6:00:6a:83:c9:e9:90:42:42:33:1b:d9:a1:5e:
                    7d:73:be:3b:b2:5f:49:7c:bd:0f:70:aa:82:e6:54:
                    87:50:eb:c8:5e:a4:56:53:65:ee:5a:4f:1e:7e:da:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:B8:20:98:CF:AF:33:13:69:7F:34:C0:33:D3:65:65:60:96:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ae:60:4b:93:2a:4b:d3:d1:97:38:16:26:76:03:df:2b:73:
         12:ec:87:3e:02:50:51:46:2e:86:65:91:68:b6:1e:3f:d8:1d:
         34:74:0b:8f:41:e8:b4:b2:4a:d3:fa:a0:68:f0:1b:d0:50:fa:
         be:d4:54:4f:34:d5:60:87:8e:ed:6c:38:ff:b3:6a:8d:df:2f:
         e9:ea:69:01:66:36:a2:34:fb:62:2b:f9:44:4a:a0:82:2d:65:
         60:dd:c8:2c:c7:50:34:fa:db:07:4f:74:32:f4:f9:f0:08:f1:
         1f:31:34:ee:3a:e8:95:1c:41:2f:64:5c:fe:0f:2b:2c:44:4b:
         a1:4e:7f:d0:b0:ad:1d:ee:a0:3f:0c:7d:85:e9:ea:5d:d0:2f:
         e4:ba:df:c7:61:b6:28:18:63:df:c3:25:e4:6d:3f:f1:1c:10:
         ee:62:6c:33:4a:67:bc:b9:6a:77:2f:f5:cd:db:cf:a5:00:1f:
         4b:e3:3f:f4:be:8d:23:05:30:08:4f:dc:02:e9:d5:f0:97:02:
         51:b0:3d:f9:24:82:43:62:74:8a:5d:42:8f:20:43:16:bf:dd:
         43:59:6b:99:8d:58:21:05:0d:17:43:85:17:1b:58:5b:bb:22:
         0c:7c:a8:9b:73:10:51:0a:b0:bb:2c:ab:61:4d:55:eb:26:e3:
         33:68:61:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:01:47 2025 by rpki-client