Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa
File:                     6f477233-abe1-3ee6-ba8a-3e08779866d7.roa (raw, json)
Hash identifier:          kSam+2HyXb+9uHb8rABteE210l2h6bkT7KE723OKBCE=
Subject key identifier:   7F:C2:6A:DB:29:31:FC:D0:31:61:55:94:CB:AF:65:77:95:5F:17:BC
Certificate issuer:       /CN=e3370a8c-7e39-490d-985a-a478ce54459f
Certificate serial:       010D0C9F4328584BBB75978BE3DC7A5DE3B8FF40
Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     4393
IP address blocks:        204.52.234.0/23 maxlen: 24
                          209.251.198.0/24 maxlen: 24
                          209.251.200.0/24 maxlen: 24
                          209.251.208.0/23 maxlen: 23
                          209.251.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:97:8b:e3:dc:7a:5d:e3:b8:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=995afb9c-3b21-41d8-9101-d8a01b19a54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bb:ee:df:e9:f6:63:e8:13:8f:fe:ba:9c:01:
                    cc:59:6c:a7:4a:f9:a2:52:1c:2d:50:2b:89:3f:9a:
                    d7:5b:3a:08:38:1d:ad:e2:e5:04:f1:2c:58:1c:7c:
                    93:90:f8:c4:ab:7b:12:70:94:b1:6f:5e:af:73:5a:
                    a1:fb:f1:18:80:24:b6:e1:1c:19:92:21:05:98:9c:
                    dd:93:d6:78:0f:71:be:b0:5b:e9:a2:a8:ba:c0:40:
                    43:cd:c0:42:df:b1:86:ae:14:85:e7:e7:a2:85:a7:
                    77:31:a0:b7:92:d2:c7:50:9c:4f:e5:97:a7:ab:62:
                    2e:7c:25:27:46:ab:22:63:26:a0:bf:cb:64:13:9c:
                    f3:88:77:7e:40:27:17:f2:c0:b4:90:57:cb:f0:2e:
                    e1:65:88:f7:ad:3c:69:30:8a:84:69:20:f2:8d:88:
                    d7:e3:96:82:bd:47:16:0a:ef:e1:cb:ad:55:12:0c:
                    39:9e:a7:89:a7:cf:63:9f:a4:b7:0c:f9:ed:ec:61:
                    05:00:8b:76:22:95:12:4f:cc:f4:47:ce:be:61:1e:
                    51:5d:4e:d6:d1:20:2c:83:94:9b:ab:fb:9a:b7:da:
                    5a:99:6e:0b:6b:2d:fc:4a:a2:9c:91:61:27:0b:5b:
                    83:be:bc:b7:ae:eb:a7:6c:f2:50:98:df:07:ff:f3:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C2:6A:DB:29:31:FC:D0:31:61:55:94:CB:AF:65:77:95:5F:17:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl

            X509v3 Authority Key Identifier:
                keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.52.234.0/23
                  209.251.198.0/24
                  209.251.200.0/24
                  209.251.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:29:d9:e9:73:dc:1c:40:2d:a6:46:13:14:d1:54:1a:a8:
         e1:80:86:23:e2:a3:03:81:d1:d1:3d:20:62:0c:2b:8f:84:c0:
         10:0d:e6:bb:84:60:9c:9d:38:03:d1:02:74:84:81:a4:fe:57:
         8b:22:d9:1f:f8:04:db:7b:3c:29:7f:37:15:54:22:e0:2d:64:
         f4:5d:ed:f3:ad:2f:e5:e4:6e:f7:aa:e4:01:bb:be:af:3d:3a:
         6a:e5:5f:9e:63:21:48:ba:a1:72:88:d7:12:17:c3:5e:f5:5b:
         99:44:35:bd:e2:1d:c5:f1:9c:16:16:d5:60:87:2d:d2:59:75:
         14:68:61:e0:99:5d:cc:dc:fd:6a:78:6a:8c:de:c2:c4:1a:c9:
         22:24:7f:a6:8e:d5:ef:c9:ba:c8:5c:b8:cc:c0:88:df:f1:89:
         22:80:56:14:54:56:b7:86:9a:79:5b:3f:1f:54:44:46:35:f0:
         1a:3d:18:04:e5:67:ce:39:96:6c:ec:a5:d0:2a:78:42:36:9d:
         39:d2:92:54:d6:1b:27:04:8d:18:69:1c:b8:77:87:82:1d:ae:
         af:d5:7d:ab:53:d1:bf:11:28:c5:4f:da:2e:47:3f:c8:6c:bb:
         ea:a6:55:0e:23:fd:49:34:4e:be:b2:e0:f4:b2:89:40:1a:c7:
         af:9f:32:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:08:17 2025 by rpki-client