Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa
File:                     cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa (raw, json)
Hash identifier:          iMgqJmP98PhW18YVTsH5gDbTl+d+l0SjiIZGAXL9KTE=
Subject key identifier:   CB:73:26:97:69:67:EA:C5:00:E3:EF:E2:49:41:B9:D8:B3:40:90:9C
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584BA39CFC5FEF6849858DB91C17
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     11260
IP address blocks:        69.17.201.0/24 maxlen: 24
                          69.17.219.0/24 maxlen: 24
                          69.17.223.0/24 maxlen: 24
                          199.193.230.0/24 maxlen: 24
                          199.193.231.0/24 maxlen: 24
                          207.2.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9c:fc:5f:ef:68:49:85:8d:b9:1c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=7df145e1-8cc5-4993-b6b8-729364d25a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:79:2a:8b:1b:e8:ab:4f:4e:83:3c:ef:52:
                    ba:fc:5d:9e:c6:96:24:6b:8f:2a:d2:33:6e:2d:31:
                    5c:24:b0:23:c5:e8:a1:73:7b:98:52:ce:dc:a7:8b:
                    05:67:43:56:d6:0d:ac:0f:74:fa:39:ec:79:97:f0:
                    7d:be:26:62:f0:0b:3e:68:61:e6:37:50:02:36:d9:
                    6b:70:42:a6:89:7c:b0:ba:f4:67:58:4e:35:d1:2e:
                    d7:82:1c:85:eb:e6:d6:00:91:cb:f5:83:0f:5d:cc:
                    a6:6c:ab:af:9d:1c:3d:15:af:17:7d:ad:44:f9:2d:
                    5d:01:97:c1:eb:b4:6c:05:45:92:82:19:0a:1b:18:
                    84:12:79:ad:f5:bb:2c:5b:30:f9:2d:a8:d1:c8:38:
                    f9:81:e0:e1:de:3b:15:f4:e9:e4:df:dd:f3:92:a2:
                    a2:13:71:42:3a:4d:75:76:0e:64:36:03:6e:16:88:
                    49:d7:71:37:8b:c3:94:3f:25:d1:5a:04:4d:a2:5b:
                    f7:83:a5:56:e2:5e:a7:b3:9d:e6:09:2f:2b:de:0f:
                    75:6d:7b:45:78:b6:e0:eb:e9:3b:f6:1a:d5:4e:dd:
                    8c:d0:7f:77:8b:05:8b:d1:99:70:de:ce:fb:8b:0b:
                    6a:a2:59:e1:12:1f:c7:cb:b2:6a:ac:bb:b2:e0:2b:
                    f9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:73:26:97:69:67:EA:C5:00:E3:EF:E2:49:41:B9:D8:B3:40:90:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.201.0/24
                  69.17.219.0/24
                  69.17.223.0/24
                  199.193.230.0/23
                  207.2.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:44:c7:41:97:1a:ed:7b:af:ac:dd:23:d5:88:ba:8c:6b:7e:
         12:16:0d:7f:97:68:af:e3:99:17:21:4a:5b:be:e7:48:0e:16:
         b4:1a:8a:87:20:b3:aa:be:bf:47:9c:29:37:c9:db:57:27:5b:
         a2:bf:ff:cc:db:fe:89:45:d4:78:00:e7:1b:c2:c4:8a:c6:e7:
         b1:9f:38:31:34:98:81:c0:6f:bc:50:5b:db:d2:71:d0:24:91:
         e7:f3:a5:b7:c7:34:28:b9:fa:1e:6f:d6:42:78:e8:1b:92:de:
         6b:3f:e6:a1:49:38:a0:b4:29:70:d8:f2:96:4b:57:c1:12:35:
         bf:14:3d:99:fd:26:11:98:cf:0d:e2:27:f0:30:ef:e3:36:a3:
         e7:dc:c9:69:c0:f1:a4:e6:18:cb:c0:e7:22:cd:7a:df:66:4b:
         ae:b9:1e:1f:76:df:38:82:23:95:c0:74:4d:81:36:d5:02:f4:
         b4:2f:3c:b8:41:f8:e4:81:32:16:5d:7e:b5:5f:2b:5b:c1:c9:
         2d:ba:5f:c1:a9:2c:c7:a6:d7:4d:19:fd:2f:95:4b:15:ac:ad:
         b1:4c:c9:15:3c:a0:a0:ee:91:8d:4d:55:6a:3d:ff:11:89:77:
         dc:36:66:45:d4:fe:2a:4a:3a:97:66:08:e3:32:c8:fe:d4:d6:
         a2:d2:63:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:18:07 2025 by rpki-client