Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/5a88635c-cbfd-3f6a-a025-8c6194e2bac5.roa
File:                     5a88635c-cbfd-3f6a-a025-8c6194e2bac5.roa (raw, json)
Hash identifier:          aJFjg3/osOwMLD1Bm/lF1l3p94mdzCRMm+kpGWoMA3A=
Subject key identifier:   12:FC:91:F6:F9:54:F2:CE:D5:3A:07:0D:9A:4F:87:02:EE:4A:5F:99
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F4328584BA39D0DDD2BEAB69CF48F5BC0
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/5a88635c-cbfd-3f6a-a025-8c6194e2bac5.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     13845
IP address blocks:        69.165.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:0d:dd:2b:ea:b6:9c:f4:8f:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=efbf1be9-e004-40ff-be77-16ca8df1368f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:7c:be:9f:92:be:5d:c2:ae:3e:00:75:61:
                    3a:3a:2f:d3:ca:02:4f:76:72:a3:d6:d3:d0:c8:46:
                    97:aa:e2:28:34:12:ca:c8:6a:40:9f:89:c7:7d:23:
                    6e:83:86:35:5a:4e:3d:27:f9:2c:69:7d:69:36:93:
                    93:4b:33:88:20:3a:83:52:78:3e:ca:df:9b:83:cb:
                    04:d1:4d:c0:1e:16:bd:43:90:0a:19:3b:58:14:39:
                    57:05:cb:83:6a:1a:a7:90:49:38:bd:7e:de:11:fd:
                    2d:98:2d:f0:2b:21:5e:34:4b:e9:cb:78:b1:84:52:
                    80:47:17:a7:65:3b:13:92:1b:6a:fa:1c:23:1a:af:
                    5d:3e:61:e0:bc:7b:43:81:2e:39:f3:d3:2e:48:c2:
                    fa:9f:a3:33:9a:9c:8a:13:5a:af:33:53:fd:a8:87:
                    7c:58:0e:73:f2:37:29:4d:85:c6:49:f5:72:9f:90:
                    7c:bb:b2:86:6b:5f:fd:a2:60:73:61:2f:36:a2:73:
                    67:37:a2:55:51:00:cd:4e:4a:9b:bb:bc:0b:9a:85:
                    52:d3:05:c7:17:e0:f3:09:a4:77:20:17:66:a3:20:
                    97:67:39:cc:38:7f:3f:9f:8e:43:18:90:bb:22:03:
                    b3:80:79:cd:0c:12:af:d1:56:6c:84:cd:ca:a3:b9:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FC:91:F6:F9:54:F2:CE:D5:3A:07:0D:9A:4F:87:02:EE:4A:5F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/5a88635c-cbfd-3f6a-a025-8c6194e2bac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:b3:3b:93:e3:02:1b:48:29:d5:b3:a8:4a:2e:44:2a:6e:f8:
         c9:b7:c7:76:c4:a0:0f:98:aa:03:56:5d:40:c6:51:60:43:64:
         ae:24:90:43:a5:53:81:f9:15:b3:f8:7f:ed:30:b7:a6:dd:ac:
         04:73:77:a2:e4:5c:0c:ba:8e:9e:e1:4f:b5:32:f8:a2:10:10:
         5d:36:33:75:77:9b:f0:32:96:8c:d8:54:e7:6e:6e:67:b1:ac:
         f7:68:65:49:87:4b:14:2e:c3:5b:12:e7:4b:af:a8:b8:bd:28:
         86:4f:af:6a:3b:44:53:81:db:c2:29:34:7b:9d:d8:ec:b2:c1:
         a0:ae:3a:fd:c5:a0:67:6f:27:c5:1b:44:df:0e:cd:96:56:e9:
         a0:a1:7c:4a:d8:f4:91:c3:9b:bb:c8:28:e1:d3:fe:16:0b:92:
         d9:01:de:7d:3b:cc:16:e1:77:28:f4:40:39:39:37:11:bd:2a:
         1d:cf:57:41:06:7b:b0:a3:23:05:91:e3:5f:95:ec:c7:3d:01:
         93:50:de:c7:21:e3:0f:cd:72:be:6a:79:2e:79:b1:e9:c0:ba:
         ce:aa:1c:3b:17:e1:3a:ea:08:39:e5:a5:b0:7f:0b:5e:9d:e2:
         6b:aa:4f:87:33:78:68:16:c4:18:42:fa:b3:5f:02:bc:7a:70:
         37:52:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:36:24 2025 by rpki-client