Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa
File:                     835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa (raw, json)
Hash identifier:          WFCRbF83zl1abTvBQSs2UuDDB1u84dynHmCMNR6xUJA=
Subject key identifier:   E1:2D:58:0A:0C:82:A5:E8:4E:2F:23:50:ED:80:A5:05:89:FA:2C:33
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584BC270515824CD6F3E48969DDF
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     11127
IP address blocks:        64.49.131.0/24 maxlen: 25
                          207.241.163.0/24 maxlen: 25
                          207.241.164.0/24 maxlen: 25
                          207.241.165.0/24 maxlen: 25
                          207.241.169.0/24 maxlen: 25
                          207.241.171.0/24 maxlen: 25
                          207.241.172.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:51:58:24:cd:6f:3e:48:96:9d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=5fd8453e-7cae-45c8-a7c1-1ff4b36fdc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:db:f9:30:f6:15:31:02:17:55:71:56:2e:
                    28:82:76:1b:7d:70:1e:67:d9:7a:48:26:cf:59:db:
                    34:c6:5f:00:73:84:bd:a3:c0:17:ea:bf:4f:57:22:
                    f1:7d:e8:a2:8b:0d:e7:b3:07:b5:6f:53:e1:a4:97:
                    6a:2d:cd:31:a2:19:a2:43:c8:28:b3:7e:35:e8:4f:
                    01:dc:1a:31:2d:92:6c:87:d9:ad:59:1a:95:dd:ec:
                    76:e9:06:f1:d7:e2:95:3e:28:cf:63:d3:4c:08:3c:
                    36:13:32:bb:57:ed:8c:22:97:5c:0a:05:85:68:89:
                    74:14:a4:aa:85:82:23:b9:0c:ef:57:87:a1:4b:f0:
                    5c:10:d4:e9:70:0e:3c:50:fd:d5:6d:7f:5d:25:d3:
                    d4:8c:5c:06:0a:ff:c3:19:6d:09:df:38:97:f3:95:
                    b4:5b:fa:4a:77:8c:a3:85:01:d3:bf:36:dc:c2:82:
                    da:6c:47:48:06:4c:7c:f3:a2:ed:2f:54:da:04:2d:
                    52:f7:44:16:94:2b:21:e0:bf:f5:9a:38:b4:3b:a2:
                    bb:5e:8c:fd:e4:1a:d4:e6:4d:ee:4e:5d:9f:4e:41:
                    72:74:0a:f7:48:6f:83:c9:ff:01:de:95:ba:6b:3d:
                    d8:d1:f7:64:4f:d7:f4:86:30:ba:c8:f6:6c:59:c1:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2D:58:0A:0C:82:A5:E8:4E:2F:23:50:ED:80:A5:05:89:FA:2C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/835ed486-fb2d-3f04-b0ee-6ce807d3f2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.131.0/24
                  207.241.163.0-207.241.165.255
                  207.241.169.0/24
                  207.241.171.0-207.241.172.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:f9:b1:fe:2d:30:10:ee:98:19:c5:17:1c:3f:db:bc:a9:
         3f:22:ff:f7:e7:85:75:26:45:ec:37:70:3b:6c:1a:97:1b:d0:
         bb:b5:40:25:83:52:b3:05:7e:ba:0c:72:65:42:fc:b8:2d:6a:
         00:f1:3e:ad:e0:b4:ad:fd:ed:38:c7:a6:ba:15:e8:de:b7:e9:
         d6:94:70:da:d5:d7:c8:59:8f:20:88:a9:a2:ec:8d:98:07:ca:
         10:f9:bd:67:ef:8b:b6:6d:26:5f:40:9c:11:3d:fc:75:fe:77:
         8a:52:66:ef:e7:08:06:0f:9a:e4:c5:9a:87:38:66:8b:f0:43:
         3b:ac:c2:5f:db:9a:1f:d1:2f:99:f2:e7:8e:00:93:be:9f:93:
         39:0f:97:71:0a:44:bb:f9:70:5e:82:cb:54:5a:fa:3d:cc:f6:
         6f:c6:b7:f5:69:68:70:9c:f9:b3:b7:2b:a2:0a:63:73:cb:f3:
         97:29:0b:b9:3c:80:6f:48:2e:75:23:a8:ae:16:c3:28:1a:4e:
         79:34:a5:fe:59:8c:d9:d2:83:c7:e9:67:2f:19:12:50:d8:76:
         3a:09:80:75:33:b4:3c:d0:49:ad:c9:db:08:57:79:95:c7:b7:
         fb:89:f8:11:09:07:56:98:53:4a:9f:f1:51:e0:b6:29:1c:cb:
         b1:09:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:51 2025 by rpki-client