Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/06819075-300b-33ec-ba63-9e81b352b7e1.roa
File:                     06819075-300b-33ec-ba63-9e81b352b7e1.roa (raw, json)
Hash identifier:          SCL9viCgLbXL4uFS3NLevS4S/23p8lC2X2mz7L7M/2I=
Subject key identifier:   9A:40:41:5F:7E:3A:C1:1D:2A:F3:5E:49:C5:B4:80:1E:16:BE:25:8C
Certificate issuer:       /CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
Certificate serial:       010D0C9F4328584A9D30ECA06E12E2542A847A40
Authority key identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/06819075-300b-33ec-ba63-9e81b352b7e1.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     26548
IP address blocks:        169.197.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:ec:a0:6e:12:e2:54:2a:84:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=b93bf596-b606-4577-937e-66c834cf1892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:4e:f5:8e:cc:42:e9:95:08:34:9c:b9:3b:
                    40:91:2a:d9:59:17:da:05:fd:16:8a:ad:6e:80:bb:
                    ac:30:1f:67:39:74:69:0e:f2:29:c8:44:2a:49:14:
                    7a:40:0a:9f:a0:35:52:b5:0e:6a:ca:f6:3f:ea:eb:
                    2b:90:ed:5c:89:bc:11:de:49:d1:ed:51:7a:46:4f:
                    e3:3f:3a:5f:f6:c5:d7:a8:e7:0a:cf:af:a4:40:69:
                    81:d6:f2:a6:df:78:9c:14:8a:f4:86:97:ce:c8:64:
                    a1:02:b1:b4:29:65:d0:e4:95:9f:d1:10:e3:1c:f8:
                    05:c4:8c:a9:73:3d:5c:cd:31:bb:a3:28:ce:00:b0:
                    f4:b0:22:32:d0:ff:c1:85:53:c9:ba:92:98:54:57:
                    a7:cc:0b:29:37:ff:7d:38:60:10:1f:62:c6:c8:84:
                    5f:aa:11:69:7e:b0:76:36:fd:2f:0a:3f:2a:b8:0f:
                    b1:7b:d8:97:43:ee:ce:f3:bd:63:65:95:88:9b:c3:
                    0e:69:8a:58:c0:c2:ff:00:eb:0f:bd:6b:b9:e9:0d:
                    12:a4:ec:d1:36:91:ab:f3:db:73:c2:aa:b4:ac:9b:
                    00:52:b7:50:6d:a7:36:93:4a:56:1c:3c:50:72:4c:
                    1d:7a:f2:8c:7d:06:b6:f6:8c:8e:80:22:b8:0d:6d:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:40:41:5F:7E:3A:C1:1D:2A:F3:5E:49:C5:B4:80:1E:16:BE:25:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/06819075-300b-33ec-ba63-9e81b352b7e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:72:18:ac:4e:21:d6:99:bb:e4:26:0a:52:21:85:46:09:
         24:7b:dd:1c:77:8d:3a:68:fc:25:ce:08:08:e4:f5:32:45:18:
         9d:8e:52:5b:be:38:4b:03:a6:f2:b9:bb:9f:57:3c:50:d5:e5:
         9c:f0:0c:00:36:55:01:fa:d5:75:3c:1c:05:6b:7e:23:01:d4:
         f1:9f:4e:59:e8:e8:19:26:e0:28:23:dd:9d:52:da:be:db:11:
         bc:ac:59:c9:19:ee:b7:9e:fd:31:14:17:e3:ea:98:6e:31:8a:
         aa:cc:7e:17:55:d2:97:76:49:eb:90:31:be:20:37:59:11:d9:
         e4:d2:3e:37:3e:b8:bf:42:ff:6f:91:8b:04:ca:6e:75:83:12:
         a4:8c:7b:e2:80:1f:64:43:c7:12:7c:30:7e:b6:fc:54:f2:46:
         37:92:85:a7:1f:b2:e8:24:86:f9:38:dc:73:75:e6:05:d4:12:
         f3:1f:2f:09:b2:ea:fb:a5:3e:9f:b5:06:c0:b4:84:3f:d8:5c:
         19:f3:1b:47:d5:8c:e7:5b:d0:f5:00:ea:b0:ba:e9:91:aa:7a:
         53:38:bc:fe:f9:6a:78:a8:d9:07:00:88:b5:98:39:25:d6:c6:
         e5:41:85:c3:fc:c1:ed:d3:44:bf:79:b9:0f:0f:7e:5d:19:aa:
         ce:b6:26:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:13 2025 by rpki-client