Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa
File:                     d2f2610a-a62c-3b03-99f9-138214533fcd.roa (raw, json)
Hash identifier:          7b++vhgcxouXZNrSesVySZce9rhr/xJg0NKbO6M/TNE=
Subject key identifier:   87:CE:E9:3F:0E:ED:AC:74:E7:70:89:21:8E:43:FF:69:63:D2:86:D7
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584B8BE227CE2514DC7B356F9E00
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     397666
IP address blocks:        167.253.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:27:ce:25:14:dc:7b:35:6f:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=bb46b4a5-4fb7-400c-991e-183957c262fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:e3:13:eb:19:c4:0c:68:39:fa:05:2a:11:
                    e6:20:4f:ac:e2:7b:00:83:88:ee:77:9e:e3:9c:54:
                    23:7f:dd:51:13:c7:69:2c:5f:f9:8a:03:b8:b2:7b:
                    fb:6d:e4:86:30:7e:a7:66:f0:2d:23:88:5e:87:56:
                    df:21:9c:9c:77:f2:25:8c:d2:85:dc:62:89:3b:78:
                    0f:35:b3:fb:4f:81:21:52:a3:43:e2:85:bc:cf:31:
                    91:5a:c3:3e:74:5f:db:70:c4:c8:15:2b:ed:c3:d5:
                    1b:7c:2e:b1:1d:cb:6d:ec:4f:9a:ec:ed:a3:3f:ac:
                    67:cb:6f:c9:d8:ac:b0:21:6e:51:70:c1:8f:c3:c8:
                    b5:7a:e1:f1:9a:c6:b3:e6:72:bc:35:2f:8e:73:5d:
                    89:c9:0b:a3:d3:3f:05:c9:be:5a:ef:62:05:c6:8f:
                    8f:00:1a:32:07:00:b7:6e:2a:a1:ab:7f:6c:34:da:
                    75:55:82:64:97:7d:1e:95:dd:cd:e1:7e:8f:8c:75:
                    fb:2d:bc:56:f2:7c:7f:3e:8b:4d:87:60:ca:21:09:
                    17:6c:00:53:61:8f:79:58:3a:c0:16:0e:2b:92:ba:
                    6f:34:50:9a:3c:cf:93:3e:ab:7e:71:56:f1:0a:ad:
                    86:2c:26:4c:7e:a1:28:a4:20:3e:1a:03:48:d4:9d:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CE:E9:3F:0E:ED:AC:74:E7:70:89:21:8E:43:FF:69:63:D2:86:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c3:5c:bf:23:65:1e:b9:5e:09:84:d2:6c:e5:eb:e7:df:d2:
         0e:39:44:63:71:58:83:3d:f5:c5:dc:4c:40:f4:16:42:2f:46:
         15:bf:37:d0:0f:81:6d:53:17:94:1a:fe:0a:95:b4:d9:9f:18:
         e8:3b:c4:56:2d:bb:d3:ba:66:b3:c5:90:80:17:14:d5:8c:5d:
         38:c9:e3:34:41:c0:28:4e:86:62:8b:93:00:d2:23:51:0d:1d:
         10:c1:51:86:b3:08:c7:4f:f9:32:e6:72:09:78:47:fa:b8:ce:
         27:d1:dd:1e:f6:02:f4:60:3b:aa:64:ea:a9:b4:e2:cc:31:2f:
         48:79:35:c7:1d:c3:88:34:5b:33:c7:eb:72:63:83:36:a7:ef:
         98:e8:ef:2d:0e:87:5f:5c:3b:15:cc:b7:0f:ed:fe:54:a1:c9:
         42:24:72:ad:5c:b9:27:7c:ef:2d:3d:09:9d:47:43:50:c2:97:
         0d:2e:f4:f5:13:98:f8:6c:55:4b:ac:58:5f:19:e3:34:94:70:
         dc:a3:b8:21:6f:0a:e4:f9:07:68:43:84:38:52:64:83:49:f2:
         5d:8e:53:de:25:f5:63:0e:04:3f:79:f9:22:1b:07:fa:6b:0e:
         83:21:e2:7b:4a:44:32:53:9f:f9:31:6d:5b:de:86:e3:0d:50:
         58:5c:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:08 2025 by rpki-client