Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/951f03da-99ef-3fc4-81ff-16ac192a1586.roa
File:                     951f03da-99ef-3fc4-81ff-16ac192a1586.roa (raw, json)
Hash identifier:          FP7uOpLgkkw/bJXfKlNqRerm15X8uznLPkDYWBp/v8c=
Subject key identifier:   DB:92:B2:18:C6:3D:52:A4:D8:AD:63:41:CB:C3:1B:56:25:5B:D8:1E
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584BB88D2CDBBB4739F3FC9F0F40
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/951f03da-99ef-3fc4-81ff-16ac192a1586.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     36519
IP address blocks:        172.98.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2c:db:bb:47:39:f3:fc:9f:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=1b05bc32-ed02-4f10-81ff-f7038fa4676e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:66:35:a8:96:6d:ba:50:dc:f8:25:2c:cb:
                    6a:be:26:fd:8d:15:7c:13:27:bc:b1:5a:59:2d:96:
                    fe:7e:3d:53:2e:53:00:b5:01:26:22:5c:9f:48:8d:
                    31:13:9d:81:f6:06:e4:6c:3c:44:16:b0:9e:16:b3:
                    ce:44:fe:75:4f:3c:6f:12:eb:8e:ad:49:c8:99:b5:
                    97:ac:75:85:70:f9:71:cb:df:e0:fc:9b:89:44:c2:
                    8b:64:e3:e0:bb:2b:cd:15:50:e3:3d:df:d8:db:10:
                    7e:74:d8:de:26:8e:ba:26:49:93:3d:d7:02:42:e1:
                    89:55:e4:4e:4d:18:12:2f:f8:70:94:d6:81:56:ec:
                    c3:9b:77:69:36:70:31:f0:2d:39:2a:c5:7d:72:2f:
                    56:3e:47:a2:86:fb:bc:9f:46:5f:f4:65:9f:2e:f8:
                    97:ab:e3:5b:2f:0d:e2:96:1d:9a:68:da:07:f0:81:
                    d7:d8:11:88:15:4e:e0:50:9f:e1:dd:5e:a3:0b:88:
                    79:dc:b8:1a:5b:8d:05:db:b5:32:f4:a0:d6:45:19:
                    6c:18:82:3b:06:41:f3:e4:df:b7:f0:72:6d:b1:91:
                    e0:39:f2:97:9a:5e:30:cb:96:38:16:3a:f2:ed:9a:
                    57:65:a5:a2:6b:e9:52:88:44:79:30:64:a7:dd:e4:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:92:B2:18:C6:3D:52:A4:D8:AD:63:41:CB:C3:1B:56:25:5B:D8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/951f03da-99ef-3fc4-81ff-16ac192a1586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:ad:7f:c4:85:71:97:06:23:a9:d9:86:62:27:29:cf:a9:
         32:df:a4:22:ed:27:7e:80:1c:2b:fe:2b:ac:15:94:f9:5a:63:
         25:c1:ec:5f:12:80:33:ee:27:f9:6d:78:c6:a2:ef:a2:83:f6:
         5c:74:36:1f:b7:12:3c:41:a0:d1:c9:f3:00:e9:12:91:4c:0c:
         c4:1e:e2:b7:3c:44:0a:3d:b0:3a:46:ed:6e:83:3b:97:64:91:
         d6:2f:73:17:bd:07:03:25:62:4e:fb:ff:23:c1:58:2a:01:8f:
         3e:9c:56:2a:22:6a:d8:f8:72:96:58:f0:97:38:84:50:ea:48:
         ed:e0:2f:61:ab:60:9c:1e:d8:54:65:c1:51:f5:47:40:be:c4:
         1b:7d:38:08:d9:50:1c:b1:ef:56:08:fb:64:ab:ec:f3:4f:90:
         b6:8e:d6:d4:85:0b:26:46:bb:9e:12:45:ec:f0:88:5c:40:35:
         ea:24:89:a4:e9:2c:b2:2c:56:53:f0:0a:79:39:1f:b7:d0:67:
         20:f9:96:25:5f:9c:8f:ba:28:02:ca:e7:61:64:3b:8a:02:4d:
         99:09:18:61:db:f5:22:7b:a5:72:bd:5e:10:c8:22:08:19:30:
         11:63:85:c0:90:76:39:89:e9:8c:82:a6:88:8b:38:82:80:cb:
         ec:77:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:41:54 2025 by rpki-client