Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e30ccc-47fb-338f-bc50-cb860698ae87.roa
File:                     b1e30ccc-47fb-338f-bc50-cb860698ae87.roa (raw, json)
Hash identifier:          De4KLsyYOpzIIs1sp26ICKNlvpfLJnhv0kFPpbTUBGc=
Subject key identifier:   B5:A3:7B:50:AF:DD:F1:94:33:49:41:0A:0F:A2:67:98:63:CE:F6:7E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA93293123DAE4E21CA0C80C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e30ccc-47fb-338f-bc50-cb860698ae87.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     16625
IP address blocks:        184.28.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:93:12:3d:ae:4e:21:ca:0c:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=8049f908-f55d-410e-8796-a062bd1f8cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:8c:33:6c:54:4a:aa:30:60:06:1a:f8:f8:
                    bd:a7:c4:35:4d:8f:56:96:e0:5f:00:d9:da:65:d5:
                    ed:e2:fc:46:f4:e7:b8:d3:b2:64:1c:76:76:53:e3:
                    8d:ef:9a:92:dd:70:75:8f:be:d0:95:6f:22:15:56:
                    c4:70:dd:d0:f4:8e:be:c2:1c:10:b4:4e:0b:a4:6e:
                    93:e3:6b:81:5a:bf:dd:05:83:2d:17:9d:29:70:0e:
                    26:77:0c:83:e6:61:c1:d0:5f:f7:0c:a1:fe:8c:cf:
                    a6:49:db:ab:5d:17:3a:8e:66:cd:c9:1f:44:8f:f1:
                    1f:b8:b1:bc:34:3a:ab:fd:67:c9:fb:01:8f:3c:ab:
                    14:de:2e:f8:76:7e:06:94:2f:02:76:55:db:ec:fc:
                    77:4d:32:ce:a4:3a:2f:f5:31:23:7c:2b:30:83:b2:
                    3d:80:9c:4f:cd:0c:68:3d:5a:5b:99:6e:43:16:fb:
                    b9:41:0e:74:be:bb:d4:c5:3d:99:4e:d2:cc:94:ca:
                    74:cc:0d:18:f8:c2:95:2d:3e:10:a8:71:bc:75:82:
                    58:24:4d:e8:d4:f3:6d:3f:0f:38:e3:30:f0:78:6f:
                    6d:c4:58:f0:0f:12:1e:26:a5:5b:c7:cb:fe:29:dc:
                    9e:91:89:27:f7:51:51:68:2c:4d:66:41:93:f3:8b:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A3:7B:50:AF:DD:F1:94:33:49:41:0A:0F:A2:67:98:63:CE:F6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e30ccc-47fb-338f-bc50-cb860698ae87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:2c:62:c0:8b:9f:be:b8:a0:86:86:79:41:e9:5e:1b:34:e8:
         24:cf:bd:de:d8:1e:1c:e7:e8:c8:60:7f:05:95:24:b4:0a:bb:
         55:9f:ec:9b:31:be:9e:aa:92:e6:c9:fe:54:c3:31:c2:77:d4:
         39:fc:4b:04:ea:47:6a:b9:c5:0b:2d:2b:0c:3e:ab:3c:5b:12:
         fa:e4:c8:61:e1:1b:04:79:49:e2:28:e4:de:02:ac:44:e1:c9:
         69:bc:f1:99:87:ad:9d:32:fe:90:eb:36:c0:97:d1:2f:3c:2f:
         84:86:1e:84:46:f4:21:23:4c:d0:ad:84:68:d5:53:71:b8:d6:
         b4:19:38:94:5d:3b:54:9b:7c:b1:37:b9:3d:fe:14:5d:a7:cb:
         83:6e:e1:69:0f:0c:99:3e:8d:74:93:1f:27:d4:91:c6:9b:e0:
         f7:4b:98:a1:fa:b4:24:c3:a5:90:cc:e6:bb:c5:db:20:1b:6c:
         47:66:66:ff:10:6d:1a:0d:f0:4c:e9:28:31:1b:bf:81:94:a6:
         b0:f5:b4:f8:06:00:ad:df:72:73:a7:a4:75:8d:0c:5c:b4:4c:
         77:26:e5:d5:d6:62:9e:4d:d6:fa:35:7b:52:83:a2:21:a1:1c:
         bb:1f:cb:2d:cd:57:24:8d:b6:e3:15:09:2e:65:5c:17:04:8d:
         b4:62:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:17:47 2025 by rpki-client