Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa
File:                     c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa (raw, json)
Hash identifier:          JJTVxhFLb2wHYO96DsRRMQkqOcubMBsv74PYqEbgny4=
Subject key identifier:   52:CC:D1:8A:B8:F4:2D:A5:A4:12:F5:DE:99:4F:03:95:91:2A:D3:34
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584BBE402C60123E5C64042D55C8
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        134.224.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:2c:60:12:3e:5c:64:04:2d:55:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=2bc761f6-d555-489f-a839-ba267390a943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:9d:51:bb:b5:3c:a6:b2:fd:19:c5:03:7a:
                    de:f6:3f:42:cb:19:98:6f:19:28:06:7a:b1:39:3a:
                    51:0d:72:f7:2c:cb:99:9e:c0:c9:a6:88:82:80:a4:
                    32:7a:33:62:9f:2b:61:00:14:18:4f:1b:a2:11:41:
                    86:a4:6c:26:1c:8e:46:5d:26:ee:b9:e7:45:3e:0f:
                    cb:fb:b8:35:ea:9c:19:c9:c4:e6:82:27:b4:8a:8b:
                    ed:0a:1f:51:44:23:b9:51:56:aa:04:66:89:51:8f:
                    d0:df:fb:2e:c6:62:80:7d:54:50:d4:04:a7:af:0c:
                    1e:0e:c0:eb:d4:14:31:10:f3:90:b4:47:a0:8d:a2:
                    60:57:8e:82:72:14:b9:29:58:4f:32:56:48:56:b6:
                    8e:84:08:61:2f:75:6e:05:90:0f:f9:fc:63:8b:b2:
                    56:12:2b:64:12:e2:d7:9c:17:74:71:05:2b:d2:0a:
                    74:03:ce:60:57:b1:55:09:fd:3e:6e:b0:76:89:f4:
                    00:52:32:c2:33:87:10:7a:1d:e4:d8:a9:47:82:95:
                    61:28:39:08:b9:23:2e:7f:8e:4b:73:df:6d:e3:7a:
                    dc:61:e1:d1:d5:ce:f2:2a:d0:ba:1e:a3:b3:c5:a0:
                    6a:d3:9d:38:43:6d:1c:74:5e:71:84:a2:8d:b0:cc:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:D1:8A:B8:F4:2D:A5:A4:12:F5:DE:99:4F:03:95:91:2A:D3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c2cdaf5b-d1ce-3076-b920-488aaa5a28db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f7:53:09:0a:1e:bd:e6:d4:97:75:cf:92:9f:0d:67:a9:c5:
         32:83:c1:6f:46:0f:18:e8:0f:e2:03:af:c5:0b:8c:34:fe:39:
         ca:21:16:72:f9:98:2d:19:8d:6e:22:d4:fc:fc:a6:d1:f6:dc:
         cc:a5:af:63:0f:c9:79:26:2f:40:d9:16:30:0a:fe:8e:b0:4a:
         b0:a7:56:ad:ec:18:1d:bc:ee:cc:1f:e9:1f:87:53:ca:13:a7:
         d3:94:da:d8:24:a4:74:a4:40:63:00:ce:38:07:ba:72:dc:24:
         be:3d:90:10:c7:d7:55:23:4a:71:28:4b:22:f9:e1:16:20:a2:
         f8:19:73:f8:9e:47:bf:54:c9:7f:ab:a3:8c:44:aa:24:fb:74:
         15:8b:e8:fe:73:9e:0f:d7:9a:78:e5:12:0a:3c:ca:6b:5e:0a:
         c0:ba:77:44:e9:24:75:90:df:a9:fd:06:03:7e:83:fe:9c:57:
         dc:17:7d:e3:49:38:d3:fc:2e:5d:7f:9a:c2:75:70:44:93:91:
         97:5a:aa:cf:0c:f4:56:ce:48:7e:5b:a1:47:c5:01:fa:72:2a:
         59:b8:3f:ba:dd:5d:e8:63:d2:23:ef:6e:78:14:44:0d:84:2d:
         46:e3:d4:b9:a1:49:04:71:f3:da:97:d3:cf:3e:16:4f:8f:24:
         25:97:c6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:15 2025 by rpki-client