Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9d78154-d5af-31fc-b600-5c00930dfa7d.roa
File:                     f9d78154-d5af-31fc-b600-5c00930dfa7d.roa (raw, json)
Hash identifier:          oRr41i4Il4xK5gQVM4H/ddHMzpHOG8aBemJ6AQC6pXk=
Subject key identifier:   DF:7B:BA:11:D4:88:70:34:99:79:14:37:88:75:41:43:6C:E0:68:84
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA39D0CE70DF64632032A03C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9d78154-d5af-31fc-b600-5c00930dfa7d.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     32787
IP address blocks:        184.29.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:0c:e7:0d:f6:46:32:03:2a:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=fb161007-0c9f-481f-939d-bb66bb6d2195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:b8:d2:ba:2d:c7:1a:ea:2c:cb:0d:b2:92:
                    14:65:71:d1:ab:e6:6b:13:dc:d5:e4:59:9f:55:09:
                    7b:25:68:6e:d1:f9:43:1e:26:26:44:f2:00:2e:b0:
                    82:78:d3:d6:30:46:12:e6:04:cb:f8:d7:a1:d2:e2:
                    fe:21:60:de:e4:cf:97:ed:de:01:89:e3:c4:b1:8c:
                    3d:aa:d9:16:fe:74:6b:4e:04:42:cc:c6:57:ac:93:
                    1f:01:87:6a:81:ec:e5:33:25:1a:8b:19:f3:6c:1f:
                    f7:91:6c:6f:d2:a6:c1:0f:02:8d:d5:b4:a4:48:c8:
                    23:20:4a:cc:d9:4c:3d:bc:38:94:f5:7a:37:af:54:
                    de:70:24:23:2b:0f:65:03:e5:13:04:d6:af:f6:42:
                    06:23:a2:9d:7a:5b:33:ac:1b:ba:1a:8f:8b:7d:84:
                    2a:3b:78:09:72:ae:38:99:a0:33:fd:ce:a7:64:f8:
                    2a:52:b7:f9:c4:1a:b5:79:0f:95:42:4b:9c:b3:b6:
                    b8:b0:97:5d:6a:cd:ba:e5:e6:e9:7f:1d:ce:fc:79:
                    18:4e:4d:5e:aa:6a:7c:c3:55:dd:a9:35:19:70:22:
                    7e:f4:d0:0d:a0:c4:00:b0:81:a0:38:44:8c:3b:5b:
                    1a:21:da:b9:02:27:05:7c:f9:16:41:b1:8c:4a:a9:
                    ac:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7B:BA:11:D4:88:70:34:99:79:14:37:88:75:41:43:6C:E0:68:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9d78154-d5af-31fc-b600-5c00930dfa7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:65:aa:e2:66:c4:24:18:4c:bc:3d:fc:54:0c:ba:bf:5f:16:
         ae:43:de:33:1b:24:55:20:7d:04:9f:72:82:9c:95:7f:ef:aa:
         2c:c5:ba:9e:f3:a9:5c:e1:b6:09:ed:ea:50:79:6d:cb:43:47:
         1a:9d:b6:f9:b4:4c:26:c9:41:24:41:2d:58:5b:f9:5c:f4:93:
         c6:25:a7:06:a7:c4:8e:1a:8d:03:3a:96:bd:59:c0:8c:9e:af:
         0b:8b:6b:02:7e:28:a4:ee:5d:57:a4:b3:d9:28:88:3a:f6:55:
         7d:a3:72:05:41:e9:15:0b:84:b1:27:71:63:b3:bd:83:ec:12:
         f4:e2:2c:56:2c:71:d4:35:db:67:6f:18:1b:ac:47:6f:60:f7:
         f5:b3:31:e3:9f:ee:93:31:93:52:bf:09:7e:5f:e9:56:45:ab:
         8e:0c:08:90:13:b7:4a:10:72:08:c4:07:b2:c8:b5:42:f7:cc:
         cc:ba:7d:e4:9d:07:73:d3:51:46:29:5e:d2:09:f2:a1:dd:09:
         e8:21:c9:ac:d2:3f:ea:2c:45:dc:ce:a3:f9:d3:9f:72:1d:0f:
         54:07:31:ba:c9:7b:ac:b8:f5:53:f6:f0:ff:82:28:df:51:21:
         a8:6a:2b:3c:0f:39:82:86:0d:0e:8f:cc:d8:42:fe:73:cd:b7:
         73:d8:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:17:14 2025 by rpki-client