Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa
File:                     0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa (raw, json)
Hash identifier:          CkzDJ8oLeW8tab/Bgf/L1eOy4u68sDnsaLWbtfGKqrk=
Subject key identifier:   BB:2B:76:47:27:AA:18:7F:4C:29:6B:47:C7:DB:99:58:D3:47:70:D0
Certificate issuer:       /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
Certificate serial:       010D0C9F4328584B970CF67F62DE348D7CB3F7D0
Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     13343
IP address blocks:        208.94.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f6:7f:62:de:34:8d:7c:b3:f7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=1da921ac-c060-4c2f-9449-c5afe067e421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:ad:3b:f6:38:00:98:6c:4b:3e:a4:c3:5e:
                    c9:0e:42:92:0c:c8:ed:bc:2d:fc:ac:75:4a:1e:0a:
                    49:b0:28:0d:c1:36:15:f3:47:85:f7:e7:a2:a7:54:
                    d5:41:88:8b:47:1b:1c:c4:18:ea:ff:60:29:cc:a7:
                    29:25:40:2c:20:8a:5d:d1:a3:91:d6:9e:18:a7:50:
                    1c:17:a1:fe:5e:df:3a:b2:9c:c3:a1:12:79:c2:a8:
                    71:88:63:78:74:ca:e7:43:78:55:e8:de:54:f8:0d:
                    43:26:4f:68:76:02:02:c5:24:42:c7:08:39:3d:43:
                    ab:2a:7a:57:67:80:cd:33:99:0b:06:ec:56:7e:56:
                    96:a5:d0:79:07:d7:aa:f9:b5:04:e2:e5:47:dd:82:
                    03:80:eb:69:8d:de:fc:30:b1:d4:a4:74:5e:84:c6:
                    dc:6b:e9:2a:a2:76:77:1a:a6:64:41:55:67:cc:2a:
                    3c:f8:12:5f:c9:3a:55:c6:6e:d2:c2:19:1a:2b:78:
                    68:f4:6e:83:b8:86:3d:d5:31:03:cb:c4:78:57:00:
                    46:22:27:ab:49:3d:f4:34:e8:53:b8:66:4b:2b:f4:
                    06:df:4d:45:fa:a5:ac:9c:5a:c0:f6:1d:18:d9:ac:
                    20:d7:95:cf:ea:c2:71:6a:26:e1:8a:ea:c4:26:10:
                    fa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2B:76:47:27:AA:18:7F:4C:29:6B:47:C7:DB:99:58:D3:47:70:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:00:aa:19:cb:eb:52:fe:55:92:20:93:96:3f:73:7c:a9:
         5c:f9:34:3f:0c:5d:66:56:69:ba:4f:43:0c:25:0c:ad:d1:5b:
         db:98:46:eb:ad:45:b6:fe:9d:43:a5:c5:74:60:9e:4d:da:04:
         3f:3e:d5:7e:fd:ee:ae:12:73:ee:85:8d:5b:b7:07:f0:11:5a:
         08:2f:f1:ce:6c:1d:45:84:3e:c0:7b:b1:b5:33:89:15:cc:62:
         7b:6e:52:af:4c:9f:32:92:a2:3c:6f:85:01:47:d4:5e:57:c3:
         f8:d0:69:dd:02:b1:56:32:72:fc:39:9f:ed:4e:cf:0f:c8:67:
         27:b2:18:ae:df:67:ca:8f:d3:ae:8e:d2:80:bc:b7:15:34:d2:
         2f:1f:93:07:77:ea:88:5f:b8:51:b1:4e:d4:db:62:6f:7e:78:
         db:eb:87:0b:e7:64:0f:51:ae:f4:d8:6c:47:b8:54:a8:84:9f:
         18:f7:8d:1f:92:b8:1b:05:85:52:e5:d2:54:51:92:65:ea:e6:
         16:14:49:ce:a8:65:86:fc:65:7c:b9:2d:c4:5c:1e:13:cd:de:
         04:22:7b:ea:29:b2:c3:76:f2:0f:21:ab:85:e3:d1:fd:20:63:
         d3:20:98:a3:0f:59:10:7c:e9:3b:40:94:67:64:5c:d6:f8:4b:
         23:e2:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:33:14 2025 by rpki-client