Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa
File:                     c5f83fad-67aa-328f-bed8-a9b051be30b2.roa (raw, json)
Hash identifier:          i5kj9czoPgDgYzyvo683hJt3TnO1uyOYlOweHUL4WNA=
Subject key identifier:   DB:A5:30:1A:0D:22:90:81:7A:58:05:AC:C7:52:EB:22:F9:54:C0:11
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584BA7CCEEE596E87C2F68624800
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     30041
IP address blocks:        148.222.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:ee:e5:96:e8:7c:2f:68:62:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=25b520fb-e56b-4a55-bea0-9c33ab5a6116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:23:aa:48:8b:c5:81:fd:87:f9:2b:9e:c8:
                    7a:66:b4:c1:af:57:e5:b7:7f:1e:c9:3f:42:c2:fa:
                    76:27:82:1c:cd:3a:33:eb:87:1f:a9:a0:72:3e:24:
                    12:11:55:7e:73:2e:5f:97:77:b8:15:a7:20:da:b1:
                    8f:dd:96:34:61:50:ba:df:39:3b:14:87:79:d1:95:
                    14:a5:15:19:98:69:3d:fc:6a:04:46:80:72:4a:1e:
                    97:8b:78:8e:f2:69:fb:23:e8:b4:b2:0c:1e:e6:2a:
                    97:e0:6a:d8:8b:6d:e2:1f:4c:0d:b3:f2:26:52:29:
                    69:40:79:60:0b:33:af:cf:aa:34:4b:be:b8:89:50:
                    28:1c:e0:2b:5f:25:46:34:fd:9a:cd:0e:fc:ca:08:
                    90:ce:df:c8:d5:99:f0:fa:ba:2e:39:c3:ef:e2:7a:
                    fd:f2:f4:7f:21:95:d7:4c:57:bf:cb:aa:a3:e9:1f:
                    72:b3:08:12:a0:82:29:4b:6e:ed:44:16:fa:dc:a2:
                    1b:fc:3a:79:11:aa:cc:1b:75:2f:93:ec:01:29:36:
                    e8:f0:67:3f:e9:bc:ce:ca:10:67:64:c4:f1:bb:31:
                    f8:08:b7:f3:5f:47:2e:d8:ba:02:93:91:37:c7:fd:
                    9e:a4:22:48:00:f0:2b:75:0f:fd:66:1e:ec:d6:7c:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:30:1A:0D:22:90:81:7A:58:05:AC:C7:52:EB:22:F9:54:C0:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4a:e0:67:50:8c:56:bc:12:b1:15:ae:83:95:59:a7:0d:e8:
         03:9e:a1:2d:4c:b0:de:59:78:7e:91:cf:17:fc:df:af:c5:47:
         a5:76:ce:ac:4a:ba:59:79:f9:d3:54:a4:a2:cf:bf:d2:79:bb:
         48:f2:4d:81:2d:7f:d4:49:e8:e8:ac:9b:d5:bb:8d:4e:68:b3:
         fb:df:92:a8:b6:55:ec:a5:ce:f8:90:06:45:2e:f9:d0:76:0c:
         7b:73:ca:f1:78:d7:a0:9e:c8:a6:86:14:80:d8:cf:8f:fd:f0:
         1f:77:dc:e4:4e:75:26:96:bb:36:09:2a:46:18:c2:f8:d2:56:
         80:14:3a:e4:a2:32:ea:d5:8c:be:83:38:b1:a6:4c:a8:00:3d:
         8d:03:bd:56:39:b7:0c:d9:12:d5:20:ae:43:95:99:ca:4f:ec:
         5e:7e:c1:4e:76:76:08:28:3d:7e:8e:19:ac:aa:e2:85:e8:cc:
         f6:a4:4d:b9:71:e7:9e:a3:c3:53:b4:00:ff:f0:2c:84:6d:aa:
         39:70:d0:f6:4d:10:3b:af:af:ea:05:6b:cc:0d:fc:3b:3a:fb:
         8e:42:b6:33:86:a3:71:24:55:d4:5f:aa:6f:5a:99:48:98:ab:
         75:f1:64:d9:72:6c:72:75:2a:7e:66:c3:88:44:8f:8b:ca:a2:
         7b:bf:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:25 2025 by rpki-client