Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f0a8ef7-83a2-3417-8f2f-4c809f90afcf.roa
File:                     6f0a8ef7-83a2-3417-8f2f-4c809f90afcf.roa (raw, json)
Hash identifier:          2YzUu3ai/hsO7G92wT0fmmfOo+n14mOgpcROlK+F6zM=
Subject key identifier:   EF:64:F4:E2:81:E9:8C:94:B7:AE:05:E8:9C:24:BF:4C:3C:4C:5A:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BB5C251B9C22F988DDB96CEC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f0a8ef7-83a2-3417-8f2f-4c809f90afcf.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     20940
IP address blocks:        184.84.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:51:b9:c2:2f:98:8d:db:96:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=3cf3c5c6-5763-4b6b-a8e3-c728596918ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7d:ec:da:b1:5b:36:7c:02:6c:bd:86:97:d6:
                    31:22:77:14:7c:7d:b3:e9:b1:96:0e:1f:03:4a:2a:
                    90:b9:8b:7c:95:0e:81:fb:42:e2:59:22:fa:08:9a:
                    9c:04:f5:1a:84:b2:64:2a:0b:5d:12:f5:0d:81:d2:
                    80:91:b0:ab:8f:09:58:19:9f:8c:58:9c:7a:2b:ef:
                    25:77:9e:06:6f:b6:3f:83:f8:ff:d2:fa:c9:29:2c:
                    8b:3f:a2:69:07:93:e2:40:58:c7:0b:e1:c6:87:1c:
                    f0:da:a1:c7:e9:9c:2c:79:65:e6:1e:2e:0f:39:eb:
                    81:a9:22:05:71:cb:83:1a:87:87:fa:f7:82:c1:07:
                    dd:cd:d9:e6:80:6b:55:3e:7b:d2:18:86:9d:af:fa:
                    3b:9b:e9:9e:c9:f5:2c:8f:aa:89:e3:ed:13:3b:ee:
                    ab:73:75:be:41:0f:40:43:e7:fe:7d:18:4b:70:4a:
                    d1:01:d8:d1:24:b9:f4:92:48:2e:17:77:68:38:ff:
                    22:74:1b:21:1a:82:9f:25:7c:d1:ff:5a:e7:ab:e2:
                    0c:80:f5:48:b1:52:e0:e5:44:6c:f8:99:b9:f7:6a:
                    5a:aa:87:bb:13:eb:db:7f:19:55:a1:55:44:d9:fb:
                    12:a1:89:ca:95:9d:aa:4b:9a:a2:69:0b:2e:08:c3:
                    7f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:F4:E2:81:E9:8C:94:B7:AE:05:E8:9C:24:BF:4C:3C:4C:5A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f0a8ef7-83a2-3417-8f2f-4c809f90afcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.84.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ce:5e:cb:08:ec:94:c2:dd:23:40:70:e2:61:05:40:3e:cf:
         88:8a:59:a6:26:82:fb:ab:80:c3:74:6e:a0:2f:f5:02:7d:90:
         19:38:8a:a4:c9:dd:13:9c:5b:19:e6:e3:d9:0c:05:69:b3:a0:
         26:b1:86:c6:2f:9b:d7:64:f9:62:21:45:0d:11:66:6b:bd:b6:
         55:c4:79:0c:16:2e:69:11:70:e7:3f:01:e0:ac:33:8a:24:23:
         05:46:1d:0e:b4:5e:31:5b:bd:66:4d:ac:8d:77:9a:57:86:e3:
         3f:8a:22:a4:11:d0:31:89:14:aa:96:82:98:ac:23:06:24:e3:
         18:5e:07:b4:6d:f8:40:2a:7d:fc:4e:32:96:4f:c7:b1:d5:47:
         65:dd:6b:d5:be:a6:6e:8d:64:6d:06:43:c4:42:32:46:41:cf:
         c8:e7:2c:d2:f7:bc:df:93:01:36:f3:22:5b:b1:34:b3:7c:fb:
         3f:39:f0:1c:a6:e8:3f:6d:8d:56:2e:bc:16:df:8f:fd:2f:5c:
         7d:1a:92:3a:59:b1:2c:2d:f2:9a:ba:1d:e2:db:5d:58:45:32:
         b2:55:5d:28:33:04:0d:53:ef:87:14:0b:8b:c3:eb:74:e8:95:
         8b:9d:1e:83:13:53:31:74:f5:08:18:ab:a4:c9:89:f3:fb:1c:
         6f:17:db:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:32:45 2025 by rpki-client