Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/52082a71-d928-34c8-ac84-70232bcbc7b7.roa
File:                     52082a71-d928-34c8-ac84-70232bcbc7b7.roa (raw, json)
Hash identifier:          gQpeH5xhggiGpTBg/8ERfSehK1yRP6t55nB2Pfg1RaY=
Subject key identifier:   4B:93:9D:13:DE:14:21:85:7D:4D:FA:B1:1C:F2:CC:37:51:FB:4E:AF
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584BB45D46DB0551A9A969BBA720
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/52082a71-d928-34c8-ac84-70232bcbc7b7.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     3257
IP address blocks:        70.39.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:46:db:05:51:a9:a9:69:bb:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=ba663722-2ed3-4f06-8095-236e26bc27e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:5e:7d:bd:31:0d:88:54:81:dd:d1:99:08:
                    72:04:c1:87:e0:3b:f2:45:45:6d:ca:0d:19:41:2f:
                    f4:28:e2:01:f8:00:f5:fa:0f:cd:ad:69:bc:fb:d1:
                    84:56:ca:ee:76:ea:8f:77:78:c4:52:a5:a9:1c:18:
                    07:e0:f0:a7:fd:46:bb:57:91:d8:0b:0c:49:f2:33:
                    ab:00:b7:42:69:3b:04:6d:0b:3d:cf:af:33:1d:e7:
                    65:53:bd:26:7f:d5:3f:69:eb:50:30:32:42:50:2d:
                    19:71:65:12:a6:4e:40:a0:31:84:46:be:63:83:38:
                    3d:5f:d7:0d:ea:78:74:4f:6b:fd:4b:ee:86:23:a5:
                    ca:2b:6f:1f:f9:17:e8:16:28:f2:e9:13:25:e3:0a:
                    a3:0b:9b:37:9a:37:82:b8:e0:4c:f4:1b:7c:b8:42:
                    6b:b6:42:af:f9:b5:de:54:2c:01:59:6c:9b:0f:fe:
                    11:d4:23:dc:18:07:62:2e:e5:95:66:82:9e:e7:cd:
                    01:63:32:40:f7:3f:3e:ed:70:7f:dd:e7:fd:8d:e4:
                    95:f5:f4:a5:bd:86:0a:22:6f:04:f6:10:fc:c5:a1:
                    96:9a:fb:cc:a8:89:34:02:db:73:ff:8b:d7:dd:c7:
                    11:9c:f8:a4:ad:af:91:49:e5:b6:0d:16:c8:5d:af:
                    f6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:93:9D:13:DE:14:21:85:7D:4D:FA:B1:1C:F2:CC:37:51:FB:4E:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/52082a71-d928-34c8-ac84-70232bcbc7b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:10:e0:c8:24:33:e7:c7:9f:10:06:0d:0a:dc:45:e1:10:f0:
         c5:e6:9a:15:64:5b:bc:fe:fd:31:fe:3e:f5:a2:9e:4b:ac:a8:
         5b:89:4e:3d:f1:7c:f6:68:8d:4b:d5:ce:d6:29:d7:96:8f:b7:
         15:67:a5:dc:55:82:83:3f:dd:7e:7c:ee:3c:d5:d2:9d:5b:f4:
         98:c6:18:de:85:95:e7:0a:71:2d:96:5b:85:8c:77:77:e3:b0:
         45:ee:40:3f:4b:76:6b:fd:14:7e:0a:4c:6e:c8:b5:93:df:9a:
         20:27:e9:32:8e:58:5a:39:95:a7:d4:6e:4f:ff:bb:5c:13:39:
         65:3f:fe:eb:c0:21:07:56:49:4b:6f:21:5c:9a:29:e5:a2:e8:
         58:af:d9:2c:a5:c8:5f:ec:08:66:b7:d7:b8:d6:d7:0b:dd:ed:
         fd:5b:a8:54:e4:22:60:1c:3b:5b:d7:4c:74:39:36:f1:19:7e:
         d4:db:fe:4b:ae:eb:eb:16:80:1f:53:7b:3e:ef:fd:da:2d:4b:
         0e:2c:05:5c:ae:44:22:e7:3f:80:d6:97:db:f8:61:47:8f:52:
         51:56:01:04:04:b0:b5:b4:36:8d:49:c6:6c:27:89:b0:a9:b3:
         33:7b:0b:01:94:d0:8e:bd:6b:aa:e5:ad:d4:d4:7c:ed:eb:b6:
         d5:1a:25:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:11 2025 by rpki-client