Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f7c02957-19d8-36a1-9575-0aaaeef675d8.roa
File:                     f7c02957-19d8-36a1-9575-0aaaeef675d8.roa (raw, json)
Hash identifier:          S/P7ssFB5abCROK0Now3b2ySvGd4X9qldKpg70Yln+I=
Subject key identifier:   C1:B8:EA:8E:CF:98:F7:3C:57:9C:C5:9C:75:C5:84:14:4A:F8:66:CC
Certificate issuer:       /CN=f509b96c-10eb-4731-ae65-8d698aade657
Certificate serial:       010D0C9F4328584B88243ACBFC626E985A5A7940
Authority key identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f7c02957-19d8-36a1-9575-0aaaeef675d8.roa
Signing time:             Thu 09 Oct 2025 16:10:37 +0000
ROA not before:           Thu 09 Oct 2025 16:10:37 +0000
ROA not after:            Wed 07 Jan 2026 17:10:37 +0000
asID:                     19402
IP address blocks:        208.66.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:88:24:3a:cb:fc:62:6e:98:5a:5a:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f509b96c-10eb-4731-ae65-8d698aade657
        Validity
            Not Before: Oct  9 16:10:37 2025 GMT
            Not After : Jan  7 17:10:37 2026 GMT
        Subject: CN=cd4bd954-963a-48da-80a2-dccbc26bafe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:57:d7:f2:f7:28:7d:df:bd:70:4b:d6:25:
                    66:e5:4f:cf:1c:8a:4a:45:a0:d9:46:60:f2:f8:6c:
                    d0:ee:5b:0d:b8:ef:b8:37:a5:7f:d3:1b:60:b1:22:
                    c7:ba:14:61:b2:b9:47:c7:88:63:3d:a3:ad:36:1d:
                    49:ec:8a:37:c2:16:da:7d:ab:42:76:2e:90:a9:66:
                    b9:f7:db:46:a0:df:76:a3:d6:29:92:94:bf:ce:9a:
                    d4:03:df:9c:7d:a5:e3:77:1f:ea:71:31:62:49:1d:
                    f9:63:bf:b4:bb:89:ce:14:f2:9f:eb:8f:e8:aa:51:
                    a5:6b:7e:18:09:f6:cb:1d:f9:fa:79:bb:02:f9:db:
                    99:b3:ac:54:6f:25:56:b3:4f:c9:63:ef:2f:79:31:
                    62:b7:7b:02:a0:4d:eb:d1:c2:ee:c2:1c:1b:3e:62:
                    2f:19:b0:fa:5e:14:b6:4a:26:ab:ad:c0:22:b9:0e:
                    8e:73:6f:7c:c6:94:89:4e:ab:bf:f0:06:4c:97:6c:
                    02:bd:95:f5:c9:3e:15:52:ec:fc:e3:ee:ad:6d:57:
                    90:55:81:20:2e:60:71:07:38:18:c8:50:3e:79:cf:
                    16:a2:22:37:d1:26:8c:64:bd:7c:9e:b8:bf:3f:f9:
                    eb:25:f3:b2:a4:61:69:e2:b2:7a:96:6c:fd:32:f2:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B8:EA:8E:CF:98:F7:3C:57:9C:C5:9C:75:C5:84:14:4A:F8:66:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f7c02957-19d8-36a1-9575-0aaaeef675d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl

            X509v3 Authority Key Identifier:
                keyid:88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e6:71:32:4e:6e:33:6a:ab:ad:a0:a7:ef:e7:bd:82:6d:2a:
         b8:63:1d:82:9f:a5:79:01:d9:24:78:1d:c1:80:24:55:06:98:
         e5:fc:89:35:7b:b2:c4:97:8b:58:4c:87:8c:b3:4f:63:0f:e3:
         0f:c8:42:48:1c:d1:48:6d:1b:db:35:52:c4:e6:87:7a:72:a2:
         b1:e3:ea:13:6a:fc:e0:fa:31:ba:f2:57:40:5e:f2:6e:3b:1e:
         04:94:0d:c7:4c:9f:50:08:83:ab:7e:b4:70:b2:06:00:17:80:
         e2:c9:25:5e:a3:86:3d:a9:c2:0e:84:c8:c5:a0:35:07:0f:df:
         c8:63:1d:81:9f:8d:b4:cb:2c:5e:8e:17:f5:d9:82:f3:ec:dd:
         92:54:c1:fb:ff:73:9e:a5:f4:31:10:4d:5b:22:71:83:ff:b1:
         8b:9d:c8:bc:7c:87:08:b7:44:f2:15:eb:62:6c:eb:7e:01:6e:
         eb:00:65:9b:0c:eb:c5:36:6e:29:72:ad:f5:fe:24:5c:02:c5:
         79:bf:9a:a5:f3:6b:a9:83:f3:65:cc:5f:f7:03:cc:77:6e:5e:
         41:c7:94:79:61:91:de:2a:c8:48:ce:e0:f1:c3:f8:af:5e:34:
         6b:5c:f1:27:c6:86:d5:a9:3f:6b:12:b2:a4:5b:a6:b0:4e:bf:
         3d:34:c3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:51 2025 by rpki-client