Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5bd9491d-0a40-3755-a995-24dfe3643e35.roa
File:                     5bd9491d-0a40-3755-a995-24dfe3643e35.roa (raw, json)
Hash identifier:          I2OyA/GoA34YFfseJ4DwUShZDizTEXixNdwo4RRQraE=
Subject key identifier:   04:12:4C:6C:5C:8E:2B:70:4D:01:43:EA:AE:5A:4C:26:DB:81:6D:E5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D0517A255C418CC089EC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5bd9491d-0a40-3755-a995-24dfe3643e35.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        205.220.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:05:17:a2:55:c4:18:cc:08:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=821c83b5-86b1-4928-b9e0-74a51e0f15dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:49:38:9d:74:3f:9b:64:75:b8:73:24:f3:
                    20:8e:73:e7:87:60:10:57:6f:62:d5:bd:af:92:11:
                    1d:b0:9c:73:23:fa:a8:a7:36:38:5f:46:c3:ec:d9:
                    72:1d:94:cf:53:ed:3f:4a:86:d9:40:b2:bf:f4:8d:
                    56:1a:43:1c:59:02:aa:bd:0f:88:4f:1c:72:5f:6d:
                    5b:fe:45:07:af:af:99:0b:94:3f:4c:58:58:1d:ac:
                    a6:10:3f:89:49:b5:83:d7:15:95:ea:7d:9d:0c:cf:
                    86:1b:e4:94:fc:18:5a:d5:b3:53:14:65:a6:5b:d6:
                    5b:ba:ec:cf:fb:75:34:58:ac:ca:af:b6:53:4a:e1:
                    b1:92:57:b1:71:3e:82:9e:f1:bc:c7:00:72:65:f2:
                    72:b5:dc:ea:7f:b8:98:e2:3c:cd:ff:22:e5:1d:b3:
                    c5:6c:94:86:a3:a7:7a:59:c7:81:01:be:e9:99:c8:
                    e9:f1:8a:6a:d9:75:ee:b9:f2:c0:6b:84:c7:81:96:
                    be:a2:23:49:e3:e6:e1:02:37:c7:03:71:f0:bb:6c:
                    e1:d4:8d:b8:49:bb:c3:e6:f7:80:a7:e1:8a:37:b3:
                    00:8b:c1:7b:ef:77:ac:47:a8:25:3e:91:0a:22:74:
                    cd:4b:14:53:fb:6f:60:21:4a:14:f8:37:48:f9:3f:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:12:4C:6C:5C:8E:2B:70:4D:01:43:EA:AE:5A:4C:26:DB:81:6D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5bd9491d-0a40-3755-a995-24dfe3643e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:58:d9:9c:2e:ad:c6:f6:65:a0:6b:dc:1f:84:ae:60:46:44:
         98:94:51:e7:bb:82:ff:09:d3:5f:3c:b3:da:da:c7:52:8d:e3:
         02:97:3d:ee:dc:c3:f0:73:3e:93:38:82:8e:b3:8c:13:9a:dd:
         39:15:6c:02:74:43:40:29:d6:59:a4:24:3a:62:6d:cb:dc:07:
         dc:d5:c5:b5:60:aa:3d:9e:92:83:5d:57:24:80:34:75:54:98:
         33:35:0e:f7:12:3e:f8:0e:fe:01:e3:7f:38:60:dd:d1:0f:a8:
         53:dc:72:8a:85:af:18:1e:30:70:71:1d:a4:8c:40:c2:28:04:
         44:16:02:ff:ce:fd:76:69:47:5a:ff:a1:b5:c0:b3:17:bc:d2:
         f5:1f:7a:e7:37:e8:7f:ae:18:ba:e1:26:b2:ca:99:a2:57:38:
         7b:02:b4:ad:43:72:4a:27:47:b7:5e:f5:bd:ae:ab:4c:15:bd:
         96:1d:7e:d4:e8:ea:36:a6:41:25:ce:58:60:d1:a3:e8:e0:f7:
         2e:87:24:e7:b7:52:69:7f:a1:32:62:0c:bb:f9:80:00:c8:f9:
         30:72:f3:4a:88:23:08:b8:3c:5f:45:11:87:2b:af:4c:26:5d:
         a2:b6:97:9d:9b:cd:7b:46:38:a1:60:8b:b5:de:d6:30:34:29:
         83:11:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:15:13 2025 by rpki-client