Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5af288fb-ec64-3a1c-a1cc-5e823217c3f1.roa
File:                     5af288fb-ec64-3a1c-a1cc-5e823217c3f1.roa (raw, json)
Hash identifier:          LUuk7r/DRPa893iSudCajvAye1S3W9gX0GrTcwexwMc=
Subject key identifier:   D4:BC:D2:86:17:BD:68:CF:A4:A7:5E:0E:D4:D4:43:AA:94:75:19:F1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7B7DE3022B69812F3D800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5af288fb-ec64-3a1c-a1cc-5e823217c3f1.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     13415
IP address blocks:        184.105.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:b7:de:30:22:b6:98:12:f3:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=f26bcced-b007-45bf-9006-feebe2559a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0a:f6:7b:47:d0:46:87:05:24:a0:46:60:89:
                    d0:35:87:38:ed:46:d5:0c:62:d5:96:d0:b9:73:25:
                    7c:f4:56:52:c3:1e:cd:31:b5:3b:0d:cd:9e:33:96:
                    aa:3f:4d:c1:c4:06:bb:6b:62:a0:e7:3b:0f:6c:79:
                    9f:16:8b:f7:fe:ba:32:a3:8a:dc:7f:a2:c5:f1:97:
                    0e:ea:51:af:07:07:30:84:4c:e3:17:a4:06:8d:e5:
                    2b:bc:27:76:9b:f5:18:33:dc:10:32:45:27:55:03:
                    3c:fc:13:66:ad:b1:c9:dc:60:fb:f9:bb:32:7e:d8:
                    8d:bc:ab:f2:12:e6:cf:fb:bd:09:29:6a:0c:75:b5:
                    c6:47:e5:d8:d1:43:6f:8a:71:d8:ba:6d:e6:fd:80:
                    00:60:e6:d0:d8:4d:97:fd:fe:ad:c4:17:ab:08:05:
                    ec:6a:a2:23:bb:71:7d:b8:59:7e:fa:2e:89:93:1f:
                    ae:6d:51:72:5f:61:2a:f6:bd:5b:40:a5:4d:bb:85:
                    5f:76:52:dc:3c:19:9c:cd:de:37:9d:ef:32:84:6f:
                    f7:49:70:e2:62:76:6e:e1:ab:e5:b0:35:52:5f:ed:
                    75:97:1f:0e:8e:1c:f2:49:4c:23:5d:06:dc:e5:5e:
                    f7:d4:7d:c8:8d:8a:36:87:2f:30:3a:86:1d:53:a2:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:D2:86:17:BD:68:CF:A4:A7:5E:0E:D4:D4:43:AA:94:75:19:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5af288fb-ec64-3a1c-a1cc-5e823217c3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5c:f5:c3:4d:7d:6d:06:15:7a:32:00:5b:f7:aa:86:36:d2:
         cc:fc:63:d2:31:2e:48:72:fe:61:6a:29:c2:5d:56:01:bb:2c:
         4f:0e:72:ee:a4:d9:70:89:a5:e8:94:b1:3f:92:08:db:40:9f:
         31:63:47:65:55:bb:56:07:d0:6c:b8:71:3f:77:29:63:03:af:
         bb:9a:c4:97:fa:5e:cf:3f:21:59:d6:ab:b6:32:c5:e0:07:4a:
         a9:08:db:58:31:aa:1a:be:9d:6c:73:93:d3:56:70:aa:89:c1:
         d1:f7:de:98:8d:b9:e3:ea:27:fa:f7:55:72:d5:bd:c4:4c:4c:
         04:3b:c9:41:f2:72:c9:95:06:4a:da:81:8e:67:24:bb:66:65:
         e8:ee:55:e4:44:74:6b:d0:2d:01:c6:5d:22:fb:41:16:48:6c:
         ff:57:ff:d1:26:0b:36:7c:4a:9a:93:e8:94:42:1e:b9:90:bf:
         f0:5e:6b:d4:dd:33:61:d9:d2:ef:79:aa:89:98:55:f1:58:77:
         74:44:ff:e8:2b:59:0d:16:aa:b8:3e:07:9b:bd:bb:e3:50:80:
         82:dd:5a:46:e5:b1:41:ee:b6:f4:60:bd:77:bd:e0:4d:16:4e:
         f5:ce:00:0b:f1:78:24:74:ec:53:9f:b6:cf:c5:77:f2:79:22:
         91:fe:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:58 2025 by rpki-client