Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f83a5de9-6a09-35d0-82f4-87ca78f4fbb2.roa
File:                     f83a5de9-6a09-35d0-82f4-87ca78f4fbb2.roa (raw, json)
Hash identifier:          hIzv+qxAtkoGZ6jb8f3cvDfKgTs5z0JJpGbhwIu8RsY=
Subject key identifier:   E3:0A:91:D1:DF:3D:B3:F7:C5:A9:7D:56:75:F3:53:42:96:D4:C8:D0
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F1B6252BDA85701F941071740
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f83a5de9-6a09-35d0-82f4-87ca78f4fbb2.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        144.25.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:52:bd:a8:57:01:f9:41:07:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=7eb47489-ba60-4e91-97b0-370c05e0d5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:a1:1a:c5:df:f8:7d:10:c3:e6:f3:f0:f1:
                    f6:12:db:b9:1a:33:50:be:d0:9b:2d:33:09:70:1a:
                    74:9a:76:2c:90:9b:c9:35:cb:fd:1e:bf:93:46:b5:
                    02:ab:ae:99:da:97:77:b4:0d:d1:c2:1e:5a:6c:2e:
                    aa:d9:a8:4b:61:5d:23:25:dd:7c:40:3f:e6:c4:4f:
                    45:b0:db:4e:93:92:90:8a:bb:1d:d8:e2:be:d8:e8:
                    2b:cd:22:8b:9b:eb:63:77:ab:45:04:57:87:b0:90:
                    09:c1:d6:f4:45:be:10:30:81:21:1a:33:08:bf:c5:
                    44:4c:3b:61:fd:d0:4f:46:6a:d3:18:1a:36:5f:18:
                    ac:34:e4:fa:de:29:97:e2:41:3b:de:31:82:a9:61:
                    1c:fc:1b:80:0f:b3:7a:ab:8d:6b:59:67:00:78:63:
                    85:7d:98:2a:5d:0a:7b:ff:f8:02:95:d7:e1:b8:78:
                    5f:a5:fc:45:cd:38:b0:ef:d6:4d:8c:7f:e4:4f:e9:
                    eb:65:26:db:39:be:2a:0a:aa:b8:7f:2d:e1:d3:77:
                    cd:d3:f0:f4:df:4c:bf:77:b2:d5:f6:79:65:0c:98:
                    1c:9f:69:6e:58:5c:6c:29:52:e4:bd:2e:9c:46:b7:
                    e3:03:0e:d0:ab:1a:c0:88:c9:25:6c:fe:6c:a6:ad:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0A:91:D1:DF:3D:B3:F7:C5:A9:7D:56:75:F3:53:42:96:D4:C8:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f83a5de9-6a09-35d0-82f4-87ca78f4fbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.25.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:0f:e4:d8:ff:7a:da:8e:d9:b1:3d:cb:39:eb:bf:4a:6e:
         0b:5f:49:5c:34:f3:08:05:93:d3:9e:b9:38:43:fb:b1:1f:89:
         9c:71:5f:fa:16:a2:cf:79:24:c7:b6:cb:6b:95:8d:c1:d5:30:
         46:4b:36:cf:7a:a0:df:16:c4:68:f8:8e:4e:1a:34:7f:80:78:
         a3:1d:a2:a1:17:8b:8b:00:e3:46:bf:d3:c9:cc:9d:f0:1a:dc:
         b8:e6:b2:20:32:79:b7:8b:65:b0:53:ef:8b:74:25:c7:3c:a2:
         41:35:89:e3:3f:2c:ca:07:9f:a6:ca:2c:36:81:99:7b:6e:95:
         be:cf:f0:88:6d:c5:d2:3f:6a:35:31:61:5e:a7:63:2b:34:cc:
         b9:33:74:3d:63:ba:49:36:26:29:08:bb:0d:88:fb:f8:3c:15:
         78:0f:9b:52:f0:98:be:35:3c:c4:15:67:15:dc:75:09:17:1d:
         c7:f1:95:1b:60:7e:fc:e6:e3:a2:6f:02:1a:d3:c3:89:b7:9d:
         21:da:30:c8:27:38:a5:af:c4:aa:6c:0a:82:5a:9a:43:e7:2c:
         0a:46:3a:91:53:9f:d5:fa:bc:88:9a:d8:25:13:2d:f1:78:80:
         31:44:ac:36:28:9e:53:0e:2d:e8:0d:a8:2a:80:32:5e:d8:bd:
         27:6a:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:19:51 2026 by rpki-client