Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
File:                     c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa (raw, json)
Hash identifier:          b94LdzrBqQmbqVrdlar5WI9GbYE5/Lxg6anatlQTE24=
Subject key identifier:   30:C7:35:CA:4B:4D:AD:F8:3E:C1:17:DF:63:9D:43:96:E2:E0:DF:CE
Certificate issuer:       /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial:       010D0C9F4328584BB2F7BC64059C7AEF8B062C80
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     7761
IP address blocks:        206.220.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:bc:64:05:9c:7a:ef:8b:06:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=adb51044-4c8c-4527-8a08-6865456fd502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:67:f8:6a:94:c7:bf:e9:7f:bc:e1:87:50:
                    31:02:80:7b:2c:9a:2e:ee:29:4f:2f:dc:81:86:92:
                    62:8f:8b:d5:a1:18:78:0b:7b:40:9f:9e:1e:e2:aa:
                    d7:cf:1e:43:c7:85:ee:2e:f0:40:81:b4:49:a0:18:
                    26:d8:f7:eb:46:e7:74:81:6c:02:80:81:d4:2a:ec:
                    e3:33:e5:a0:35:96:2f:8a:fd:48:84:25:17:ea:0d:
                    9e:df:da:6c:09:1b:e6:15:35:f0:35:60:3f:2b:31:
                    db:a6:50:38:bd:0b:d4:60:58:1d:74:11:09:21:52:
                    63:7a:8c:e6:6f:27:6e:6c:61:67:39:9b:a5:a0:c7:
                    30:b8:4a:18:45:2a:d5:33:9e:18:4f:9e:35:28:cb:
                    27:96:8a:af:19:06:ed:74:0f:a0:65:ca:a2:a4:5a:
                    b7:f6:ff:4b:5f:9f:9c:68:a1:7c:ec:31:b0:ed:dc:
                    6c:52:70:8e:1a:b7:c8:b9:8a:ea:4e:26:d4:20:45:
                    e3:7c:ac:08:72:4d:d6:2d:5e:8c:00:f4:ca:0a:6a:
                    ae:72:43:4f:dc:24:6d:21:a7:6d:ce:9e:21:67:3b:
                    ae:a4:60:da:f1:e4:91:d9:59:be:25:d2:e9:76:f5:
                    c5:6b:0a:95:48:fa:b5:e1:76:c7:8c:15:e7:c5:25:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C7:35:CA:4B:4D:AD:F8:3E:C1:17:DF:63:9D:43:96:E2:E0:DF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/c8f0cd86-4ebb-32b7-ac3e-e84be7296847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl

            X509v3 Authority Key Identifier:
                keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:8a:9b:88:71:85:5e:5d:7e:b8:7d:76:b2:e7:d0:e5:0c:
         23:90:8d:7b:06:d8:85:22:4f:69:54:9c:4d:67:5a:b0:b8:b3:
         8c:71:ac:7f:16:6b:80:31:f2:29:84:cc:e2:60:da:b8:bd:a4:
         48:16:d4:7a:ec:fa:81:fd:f7:c9:87:b4:66:de:14:74:d7:3b:
         cf:c4:de:cb:e0:db:a3:2d:2c:5e:d6:5d:43:8e:6a:23:96:bd:
         f0:26:a7:84:d5:a0:c1:c7:79:f8:d3:93:80:a1:9b:94:8c:5b:
         cc:91:01:4f:29:cf:43:4c:fe:2a:b5:2a:ed:68:85:55:b4:61:
         80:f2:0e:1c:98:81:fb:f7:b2:67:71:2c:f7:fc:1e:b4:92:e9:
         de:75:9f:5f:0d:cf:6f:71:50:29:dc:63:46:4b:ce:2f:f5:87:
         22:40:e1:2c:d0:f2:bd:15:6e:5c:76:9c:d0:de:58:1e:35:ef:
         0b:e8:4e:f3:d5:da:a5:6f:bb:c8:60:e9:0c:4e:0b:ad:c1:83:
         8f:74:a8:8f:fa:4a:00:7f:5a:79:b8:a4:66:06:ff:5c:45:43:
         61:58:b7:99:7d:26:44:07:e9:03:f9:1e:8a:d9:c3:db:82:c1:
         e2:43:1c:d3:ac:d9:62:30:b7:a8:e1:fd:1a:e0:6d:19:7f:62:
         1e:65:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:38:34 2025 by rpki-client