Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/5d8f5eaf-27db-33d0-b4f0-e3b6a14c3a32.roa
File:                     5d8f5eaf-27db-33d0-b4f0-e3b6a14c3a32.roa (raw, json)
Hash identifier:          RuKDTf39eY53y12B7B4cgWYIpgdTeNIQqmpEOt9TBuE=
Subject key identifier:   BB:13:55:DC:E5:66:67:30:6B:3F:1A:29:61:5C:24:BE:2D:8B:4D:58
Certificate issuer:       /CN=93e43339-37a5-4091-b560-67e3fca1a9fa
Certificate serial:       010D0C9F4328584BA932753B84DE6C627634E900
Authority key identifier: 22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/5d8f5eaf-27db-33d0-b4f0-e3b6a14c3a32.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     27277
IP address blocks:        199.164.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:75:3b:84:de:6c:62:76:34:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e43339-37a5-4091-b560-67e3fca1a9fa
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=e479be94-75e4-483e-8ae6-73b4b37145f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:97:b0:5c:91:9e:bd:90:70:3c:8e:0b:41:
                    13:9d:c2:57:09:fa:66:e3:95:99:8c:d4:c7:73:01:
                    d0:53:60:bd:a5:2b:2d:e5:55:55:bc:44:7d:76:77:
                    de:7b:a6:a7:23:35:bd:b7:d2:b7:31:f5:ed:7a:4b:
                    bd:1f:6e:7f:c2:01:21:dc:4f:ac:bf:ae:bd:be:78:
                    e3:d1:61:25:62:44:10:25:44:fb:06:fd:63:16:a1:
                    e9:28:c5:7d:83:b9:fb:6b:85:bf:d1:15:7c:b1:ab:
                    85:35:7a:21:5a:0f:9b:9d:e4:3d:6f:55:18:27:08:
                    58:c9:f8:a8:70:5a:69:0d:db:bc:7b:86:32:ee:11:
                    db:e8:e2:b5:be:aa:c1:3c:76:7c:10:ad:79:06:af:
                    ee:e5:95:ac:03:4c:62:4b:b2:90:d1:f9:be:60:b1:
                    4e:7b:d5:62:cb:23:44:1d:aa:b8:c5:32:60:96:0e:
                    27:d0:83:fc:33:21:69:fe:d7:d6:10:6a:0b:d5:ec:
                    42:97:c3:6f:7d:8d:9d:b4:a9:da:ab:ec:26:99:f2:
                    9f:f5:e1:6f:ba:cf:26:e1:c4:96:d9:24:05:29:a1:
                    d2:01:24:c2:dc:b7:48:62:bd:24:4c:1e:55:6a:64:
                    60:2d:77:23:36:f3:ed:e8:42:79:ea:30:da:33:e6:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:13:55:DC:E5:66:67:30:6B:3F:1A:29:61:5C:24:BE:2D:8B:4D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/5d8f5eaf-27db-33d0-b4f0-e3b6a14c3a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.crl

            X509v3 Authority Key Identifier:
                keyid:22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.164.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6d:41:6a:fd:2b:a5:42:93:75:4a:f3:2c:7d:0c:88:d0:1c:
         88:82:90:ff:73:0b:c4:03:df:81:eb:4e:2f:63:b7:7b:e4:93:
         f8:5b:e8:8f:b0:7d:a9:91:32:60:26:9d:db:3a:a5:ae:bd:cf:
         45:c5:d1:7f:b4:ec:42:a4:53:40:b7:3f:cf:d0:1d:13:74:36:
         2f:48:e7:61:92:86:ab:54:2f:42:f2:f3:23:5d:63:55:21:8a:
         ab:41:27:d7:b9:f1:b3:6a:66:38:41:62:9d:fa:f4:c9:2c:2e:
         ce:7d:bd:25:43:a8:b2:72:a3:90:e5:af:bb:27:e0:0c:5c:d6:
         be:d3:c1:36:1e:58:b8:ab:70:d0:1f:a3:a6:cb:14:ea:cb:4d:
         d1:5a:57:17:fb:8e:5d:a3:66:7e:8c:74:f8:b0:db:bf:0f:54:
         68:33:68:da:45:8f:e5:0d:19:f1:67:a7:a5:3b:59:32:7b:76:
         b4:9d:bd:94:ce:ce:a0:25:30:20:83:39:e1:40:ca:1d:cf:dc:
         0e:9e:d1:d9:06:f1:46:b4:72:27:03:f7:69:61:b5:e1:54:d8:
         6e:f1:50:cc:2f:82:89:9d:8a:0e:fc:43:b5:66:fc:2b:13:87:
         15:71:80:92:b0:3c:65:35:28:b8:ad:88:3f:29:ec:bd:1f:07:
         d3:80:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:33 2025 by rpki-client