Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34f24ea-d0e3-37ff-b9eb-17ccc1ff5b13.roa
File:                     b34f24ea-d0e3-37ff-b9eb-17ccc1ff5b13.roa (raw, json)
Hash identifier:          xgIMFdVioksKts740XFPvgcg6QU/mRowvNIPcuLoT5A=
Subject key identifier:   D5:C2:23:5A:99:F9:83:6A:AC:57:9B:D1:F4:A7:35:0F:98:1A:DC:7C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BB5C259FBFAFC87FEB7C43600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34f24ea-d0e3-37ff-b9eb-17ccc1ff5b13.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     16625
IP address blocks:        184.87.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:59:fb:fa:fc:87:fe:b7:c4:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=9a9f59a8-4180-43f9-8b92-40a7ed749b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:13:e4:01:1e:4e:3a:68:85:9f:fe:01:81:
                    e5:ef:35:6a:73:1d:82:e7:2b:4c:4f:82:03:ca:c6:
                    d5:e4:18:06:a5:2b:e2:d9:73:40:ce:b1:41:d4:4d:
                    19:a6:ff:94:1d:25:6e:e2:99:b5:d9:7c:e2:f4:a9:
                    c4:e3:17:2b:34:0a:21:85:7b:55:05:3e:36:74:d2:
                    7c:82:87:29:9f:03:26:ae:ed:c9:53:50:af:f3:82:
                    b8:23:41:2d:4d:87:cb:75:23:08:d0:ac:1f:61:01:
                    a6:01:79:a1:e5:f4:68:34:0e:2a:fc:e5:eb:1e:63:
                    e4:8b:a9:bb:4e:58:f3:c5:61:a2:9e:41:8a:18:bc:
                    32:81:87:b7:97:68:be:9e:4c:df:36:f2:eb:dc:bb:
                    6a:91:51:4f:cd:d2:02:a4:ee:b3:1c:97:da:8b:b3:
                    a0:32:f3:3c:20:7e:93:4f:b9:4a:f6:66:47:88:32:
                    d5:d3:cd:c1:b1:65:78:db:3d:6d:06:d5:e8:21:8b:
                    5e:87:92:0f:03:18:79:14:78:9e:3c:18:d8:16:4b:
                    5e:ef:81:33:7b:29:31:96:f2:f0:b0:3e:5d:13:4a:
                    0a:2a:25:ca:6a:2e:c0:55:35:d9:aa:23:da:19:14:
                    29:20:c8:17:da:56:79:fa:2f:73:a8:96:f2:4d:c8:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:23:5A:99:F9:83:6A:AC:57:9B:D1:F4:A7:35:0F:98:1A:DC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34f24ea-d0e3-37ff-b9eb-17ccc1ff5b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:46:e5:60:4f:19:b2:da:5a:96:bb:ef:f7:54:76:d8:53:
         a0:c4:3d:31:91:f5:35:2d:3d:33:eb:76:4c:d1:63:35:50:e4:
         80:89:c5:25:c5:3e:87:82:a1:73:b0:e1:1e:9d:22:f1:66:8c:
         6e:af:da:75:d5:92:18:b6:36:13:3a:e8:f7:67:4d:0d:45:c0:
         ad:c6:9e:bd:01:16:78:8e:f6:df:ff:e7:c1:1a:9a:a7:2c:e8:
         0c:89:d5:28:ac:38:cd:90:ca:bc:94:5f:fe:4b:bb:85:b4:47:
         27:1b:90:2c:92:5a:49:29:28:48:86:be:61:af:19:6c:b6:a0:
         f2:83:58:bd:98:e3:e4:c2:c8:91:62:c7:79:95:53:20:a3:4b:
         cf:27:a3:ea:14:fb:06:c9:d9:03:cc:dc:ad:4f:14:15:08:4f:
         5b:bd:a6:32:b7:d4:21:4c:4d:17:e4:06:f4:d7:a0:1e:c6:ee:
         89:96:81:5b:ae:13:da:9f:01:65:b4:34:20:ef:95:45:e7:7f:
         58:77:11:71:50:b6:f5:31:39:f2:3e:a6:ad:fd:64:b8:fa:1c:
         2f:7d:11:28:0d:a8:51:24:1c:52:c0:4e:d5:5f:a4:29:c3:91:
         de:d4:57:b2:3c:ae:9d:f8:ac:13:8b:36:3b:c6:29:6d:ef:cf:
         8e:37:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:59:25 2025 by rpki-client