Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/25fc7d99-3882-3be7-a700-9d69920c8f76.roa
File:                     25fc7d99-3882-3be7-a700-9d69920c8f76.roa (raw, json)
Hash identifier:          r1I0eF+M/bfHsbNOPJ2EmYctZja6OpxYC3ZL99FXQtA=
Subject key identifier:   5A:BD:DB:30:0C:46:A7:6D:17:C0:70:79:2A:74:21:D0:11:86:0A:83
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584B970CEFBE1B7EABDD55457300
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/25fc7d99-3882-3be7-a700-9d69920c8f76.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     36666
IP address blocks:        67.215.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ef:be:1b:7e:ab:dd:55:45:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=9d43752f-3e17-41e8-9119-8793d616502a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:c5:26:e1:60:93:23:43:f6:fb:e2:fb:c1:
                    f9:3b:38:7d:4f:2f:1a:56:81:95:bd:0b:c7:fc:df:
                    93:a6:e2:af:e7:2d:d8:8f:60:0c:0b:b5:eb:4a:70:
                    d7:23:ef:5f:03:b9:41:5c:27:2b:a7:0b:2a:fd:47:
                    de:f4:25:f0:74:dc:62:06:93:91:f3:4a:10:ee:df:
                    5c:49:f6:5c:9b:29:82:41:55:47:91:e4:e5:93:80:
                    a7:82:4e:b9:3c:5a:1d:a4:8a:fe:8e:8f:c9:c0:72:
                    5a:92:90:2e:bc:bb:1a:c3:2f:20:3d:16:2a:83:a1:
                    c8:87:39:7d:0f:f1:e7:51:b5:7f:e6:74:48:1c:fc:
                    c0:1f:f3:b3:b4:08:28:bc:4a:0a:c9:a2:d9:90:73:
                    04:3d:27:c6:6a:ed:e3:fc:25:07:00:13:48:81:8b:
                    a6:01:c0:fb:c7:b6:39:17:e4:d9:f0:0a:cf:71:6f:
                    7c:48:79:94:b1:7f:28:78:22:d2:70:f8:70:69:8f:
                    18:67:43:8f:fe:4d:dd:a7:a9:24:f0:95:5b:09:83:
                    80:64:b3:c5:c6:88:d9:ea:86:ed:ed:1e:03:2d:c4:
                    93:3d:e1:0b:1d:cf:0e:a7:59:0e:d1:6f:64:12:0d:
                    84:2a:f4:92:29:c1:27:97:2a:41:a2:eb:6a:64:93:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BD:DB:30:0C:46:A7:6D:17:C0:70:79:2A:74:21:D0:11:86:0A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/25fc7d99-3882-3be7-a700-9d69920c8f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e2:23:92:9d:6a:7c:43:e5:73:a3:c6:c4:34:21:be:5c:44:
         be:a8:da:bf:1b:08:3a:1a:1f:6f:df:27:1e:4c:8d:96:10:a8:
         de:a3:4c:2e:b5:f4:d0:9a:89:4a:08:c6:c1:d8:84:20:34:f3:
         38:81:36:b8:d6:16:ae:4f:ad:98:79:39:55:cb:16:88:07:85:
         df:a0:f2:59:5a:40:5e:46:38:a4:5f:52:14:04:ad:c2:2b:4a:
         e0:f9:06:8c:34:cd:09:65:47:49:3e:c7:7a:59:dc:0a:ae:93:
         55:d3:ab:0b:85:3d:75:37:da:e8:e7:97:cb:91:d2:a4:f0:9b:
         5f:f7:08:14:5e:c8:1a:a4:ee:ec:48:fd:31:14:fc:77:49:d0:
         e9:92:73:e5:db:0f:61:7f:ae:b0:11:a1:e0:44:0a:ff:15:2f:
         df:2f:20:9d:03:60:de:36:a2:5b:fd:36:4f:68:8a:e5:f4:f5:
         68:50:d0:c8:2c:13:fe:50:08:94:2e:24:bc:6d:4e:ef:50:cc:
         15:81:51:4c:83:e6:e0:cd:6a:a9:bd:3e:21:11:43:8c:d4:97:
         6f:85:b2:3c:7f:09:44:be:2b:08:47:02:2d:7f:43:27:48:62:
         1e:b2:88:78:94:1b:c1:e8:23:de:56:0e:93:c7:e4:40:34:24:
         1a:77:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:04:22 2025 by rpki-client