Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/81e668bd-706c-36be-8a06-fbd313f75f42.roa
File:                     81e668bd-706c-36be-8a06-fbd313f75f42.roa (raw, json)
Hash identifier:          voCN07fpKROgoTaiysdB8XOrTDAaXw/TaN3tbUkmd1Q=
Subject key identifier:   6F:0B:33:14:F0:EE:3E:F3:49:48:79:55:8B:F9:92:7A:8E:E5:56:E0
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328584BA9325CCBA585509BBD8DA2C0
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/81e668bd-706c-36be-8a06-fbd313f75f42.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        204.110.219.0/24 maxlen: 24
                          208.71.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:5c:cb:a5:85:50:9b:bd:8d:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=d2a301d8-30ba-435a-92ee-b4216e017898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:b3:3b:64:ce:9a:f0:96:3c:75:9d:e0:58:
                    a4:86:b4:f9:bb:53:b4:68:56:60:45:3a:2c:cb:a0:
                    97:f8:c6:c2:1a:16:d5:ac:3e:38:ce:c1:22:5b:1c:
                    89:73:8d:e3:5a:a7:37:0c:cb:eb:8e:47:87:ab:6a:
                    68:9a:47:f9:ed:75:00:ee:8c:f8:6a:36:a2:e5:cf:
                    e0:df:af:e0:ab:6a:8c:31:33:33:a5:11:85:c4:34:
                    39:ac:14:97:98:0d:08:b6:0a:ca:ee:09:a2:4a:e6:
                    57:61:d3:99:8b:0c:10:a2:2b:fb:f1:26:4b:06:b6:
                    0b:8b:66:f9:e0:d2:11:2d:c9:20:20:cf:f6:dc:ae:
                    92:93:2e:3d:6f:af:de:38:e0:13:32:ef:89:b5:de:
                    d5:09:f8:94:82:a1:14:12:0c:79:68:bd:ff:7f:df:
                    26:dd:8b:1c:c7:67:80:12:56:f3:3f:28:9d:62:38:
                    99:ef:a7:0c:33:a1:e4:9c:cb:6c:06:34:75:e6:bc:
                    31:9e:b6:3f:3c:b0:7b:a9:9b:65:1d:c5:aa:f8:2c:
                    49:6f:e9:98:66:ec:93:de:cb:89:bb:14:ca:0d:63:
                    44:32:69:b1:86:01:a7:3e:c1:16:2c:d2:bb:7d:be:
                    bf:8c:b7:f2:fe:e5:9b:a5:f5:38:f1:fc:c9:1f:67:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0B:33:14:F0:EE:3E:F3:49:48:79:55:8B:F9:92:7A:8E:E5:56:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/81e668bd-706c-36be-8a06-fbd313f75f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.110.219.0/24
                  208.71.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:d7:44:fe:19:2b:f0:fa:e6:58:36:94:a1:c1:b6:43:2d:
         63:2c:05:f6:31:bb:3a:54:0e:05:9d:72:0a:92:a2:3b:00:82:
         6a:cb:10:6e:b4:9b:66:3b:b6:b3:1e:42:43:b6:6f:7e:9d:54:
         c9:4f:a7:84:bf:dc:82:ee:09:a4:80:a6:fc:4f:8d:bc:e6:da:
         78:1b:9f:05:31:9e:a4:94:12:a8:59:c9:d4:9d:13:71:a5:96:
         07:af:9f:37:bf:93:6c:ba:42:53:c4:c2:26:93:6f:12:94:10:
         18:e8:d1:21:14:05:1a:20:d3:0b:dd:dc:b9:d5:67:f3:0a:d1:
         d7:61:11:d1:6e:74:47:34:f2:7b:6e:45:c3:7a:c4:a4:8a:53:
         bb:46:c1:f0:87:02:72:39:a4:9f:31:e6:49:8a:f0:4f:98:87:
         7b:62:a1:ea:61:f3:56:b5:8b:e1:af:b1:e5:37:50:bf:dd:2f:
         c1:f8:cc:c4:8e:7b:f0:c6:ef:c5:7d:57:50:3d:e0:82:03:1d:
         d9:d0:bb:87:22:71:33:69:4b:bd:68:14:59:df:84:2b:6f:34:
         f4:e3:e1:2f:c2:f0:b9:d3:28:4a:da:7c:b0:94:fa:c4:bd:a1:
         69:07:25:23:70:16:7f:73:51:e8:1a:66:61:73:7e:57:17:90:
         11:0c:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:37:21 2025 by rpki-client