Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fffcf36-acf1-38ae-846b-ef2bf3f6e6c3.roa
File:                     0fffcf36-acf1-38ae-846b-ef2bf3f6e6c3.roa (raw, json)
Hash identifier:          IlJmJoy20LX0wCzB/JqVWFacTUKdRIMFR+qoESyB3TU=
Subject key identifier:   2D:C7:33:13:A7:04:55:1C:9D:B0:B4:2E:B7:6A:DE:4B:47:36:1F:F6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BB45D3A3C185E614F852BF2D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fffcf36-acf1-38ae-846b-ef2bf3f6e6c3.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     16625
IP address blocks:        184.84.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:3a:3c:18:5e:61:4f:85:2b:f2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=df75e036-cb7d-4a55-b5ad-6fc2b1981eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:bf:f7:6d:70:71:78:ea:bb:2e:88:a0:8c:
                    8f:09:fd:70:09:0f:46:1f:56:0c:09:c7:9e:40:5d:
                    31:3e:71:fa:53:cc:0a:57:2b:b6:9d:0c:05:a5:92:
                    c9:12:45:ac:bb:96:88:f0:9e:70:c3:69:97:56:95:
                    95:9d:bd:1a:f5:ce:1d:c9:ee:b6:93:53:f6:50:2e:
                    12:cc:be:49:42:56:bd:86:89:29:b2:67:36:1f:24:
                    15:1c:cb:8d:07:98:82:1c:16:41:54:31:e4:31:e3:
                    33:3b:18:a2:b9:a9:27:5e:a9:b7:98:66:22:82:53:
                    88:31:80:4f:74:74:71:3f:2e:6d:99:67:66:dd:54:
                    56:a6:73:ef:d7:20:a7:d0:6c:6a:ab:9c:ec:29:86:
                    af:90:0f:b4:6d:36:3c:c6:8c:54:a8:7b:52:75:80:
                    28:90:8d:df:f6:65:b1:a9:00:1c:8e:31:d3:14:f8:
                    bf:4b:2f:b6:7b:8d:35:9c:79:cf:ea:98:bc:05:11:
                    a6:db:ec:8d:d0:01:49:e8:13:39:04:fc:fe:fb:39:
                    d5:b5:13:14:7b:c0:73:e9:ab:05:27:2f:74:fa:c7:
                    13:89:b4:6c:aa:fe:f5:52:eb:4c:e5:67:9d:e3:a2:
                    2e:ce:fe:da:6a:10:ae:c6:4e:51:86:d5:83:29:a7:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C7:33:13:A7:04:55:1C:9D:B0:B4:2E:B7:6A:DE:4B:47:36:1F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fffcf36-acf1-38ae-846b-ef2bf3f6e6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.84.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:47:b9:0c:2d:31:5d:fb:5e:2d:49:18:41:e1:fb:e1:6e:03:
         51:e1:38:56:e8:7d:5d:94:55:e2:3c:85:e4:5a:dc:87:1a:99:
         7f:0a:13:a3:53:0d:e1:b7:65:e1:d6:a8:a1:8e:d3:b7:bc:21:
         6b:af:33:ad:d4:59:40:51:dd:64:50:c8:ce:e5:54:ec:6c:11:
         c7:5c:02:9c:bb:b4:67:4d:e8:cd:24:ec:33:2c:ad:18:75:d2:
         3c:5c:fa:82:51:43:df:25:de:de:2f:d2:3f:1e:d7:9b:b4:01:
         3f:f2:ad:bc:c6:a3:d6:7e:ca:81:82:ef:14:00:b3:af:1c:bb:
         47:3a:f8:a2:b6:fc:7e:9c:ab:ec:7c:a8:34:77:43:ab:39:ef:
         29:60:b9:ae:84:d7:95:ba:8d:35:57:b8:cb:21:c3:16:88:ab:
         05:cc:23:35:5c:6c:1d:16:92:20:fc:f9:7f:90:9c:d7:f5:3e:
         8e:e5:00:53:bb:77:0e:15:cc:0d:e6:8f:c6:2e:c5:b5:40:63:
         e8:df:b7:94:e1:6d:f3:49:4a:72:ab:18:6c:b8:10:7a:da:0e:
         50:6e:75:94:bf:9f:b9:6b:11:84:33:c8:90:41:cb:76:ea:da:
         d3:18:be:dc:3f:43:81:ae:77:fa:e7:df:4e:77:21:35:18:ce:
         30:6b:ec:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:51 2025 by rpki-client