Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6a9049e2-22ad-3a3a-8874-6328148f1b2f.roa
File:                     6a9049e2-22ad-3a3a-8874-6328148f1b2f.roa (raw, json)
Hash identifier:          QQDtXMOjEHnh2X+Du13Rcc4OkRXAO5jCH1fnFjvmfug=
Subject key identifier:   74:67:44:27:05:C3:1D:3A:44:95:8B:AE:47:3F:E3:CA:23:2E:E8:EA
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584BBB7584ECA3CDC8B1E0696540
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6a9049e2-22ad-3a3a-8874-6328148f1b2f.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        134.224.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:84:ec:a3:cd:c8:b1:e0:69:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=839ccc87-e430-475a-9178-e14b2a3a61c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:76:0e:5a:96:a8:d0:5b:ae:21:e1:64:2a:
                    72:9e:fb:52:4e:0e:bc:38:2c:e2:7a:22:f8:55:ca:
                    29:51:45:34:60:f3:16:b0:33:8d:45:f3:01:46:b8:
                    1c:f1:48:02:4b:80:cb:ed:47:cc:d9:1b:e4:d3:f2:
                    f3:db:47:c5:4e:81:66:92:8c:0c:bc:a8:8d:e1:a5:
                    b5:22:db:f5:0d:37:40:be:4e:a9:15:40:23:7b:8d:
                    47:0f:05:6a:a7:2a:aa:87:3d:41:df:f2:2f:65:a5:
                    d2:6d:bc:dc:2a:89:fb:81:f5:d8:ad:72:36:a4:f3:
                    02:2b:f7:12:65:2e:71:03:c7:97:e6:43:87:1d:a1:
                    b1:c9:43:83:28:37:99:c9:6c:73:7e:a9:86:99:8a:
                    50:ca:18:60:77:ad:2c:52:8b:76:0b:d6:1e:6a:3a:
                    00:c2:1f:27:9e:3b:04:69:55:bd:6a:bd:f1:2f:62:
                    d5:82:9e:7d:17:d2:aa:8a:4a:b6:6e:ce:36:8b:eb:
                    25:25:48:9b:2c:36:c5:ce:22:91:77:52:4a:11:86:
                    01:7d:6c:4d:21:15:c7:85:75:06:37:6c:6f:56:0f:
                    36:01:da:0a:94:20:cf:c9:c9:03:72:29:6a:52:36:
                    ef:e7:73:25:1c:36:89:91:df:e7:7d:c3:ef:d5:de:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:67:44:27:05:C3:1D:3A:44:95:8B:AE:47:3F:E3:CA:23:2E:E8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6a9049e2-22ad-3a3a-8874-6328148f1b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9d:5a:67:1f:10:68:f6:28:7a:13:c9:67:fc:42:e8:65:18:
         7f:1d:b3:b6:04:18:e7:6b:dd:ee:d7:16:96:7f:c9:9f:18:55:
         4c:8e:26:6e:fd:a5:15:f3:c3:91:98:8e:bb:ec:1d:3d:e5:ac:
         8b:1f:1d:7b:f9:d6:34:f3:de:53:a7:19:04:04:c2:c6:48:48:
         d5:cc:a7:0d:1f:18:02:ec:e4:83:1d:ed:f1:5d:c5:31:73:36:
         c1:21:87:a6:62:8d:9a:1b:10:20:95:d4:2f:6d:f5:2d:72:5a:
         9c:f8:3d:5c:49:bf:95:49:6e:91:8c:c7:e6:5f:bd:46:3a:ca:
         d6:9d:0b:25:e5:51:a9:11:4b:94:26:e4:bf:8e:54:b1:e4:56:
         9d:ce:62:af:1b:9e:fe:0a:ee:4f:d8:4c:af:98:2a:02:57:65:
         b3:ea:76:06:c1:92:e5:53:fb:06:69:ab:06:84:e0:ce:0b:ca:
         5b:82:28:04:40:7f:8a:00:86:6e:28:68:57:6d:b9:86:9d:c5:
         2f:57:28:d6:d2:73:03:4f:8f:64:b0:05:92:8d:0d:a9:36:47:
         73:0f:11:3b:6a:3b:7a:9b:79:f1:4e:11:73:fc:59:09:ea:86:
         9b:6c:ea:2e:8d:4d:48:e9:04:76:b2:63:2e:17:6f:08:36:0f:
         17:0c:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:55:09 2025 by rpki-client