Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44c4a9c1-3bfb-3ab6-9f8c-e8a126c62bd5.roa
File:                     44c4a9c1-3bfb-3ab6-9f8c-e8a126c62bd5.roa (raw, json)
Hash identifier:          NqA5q1oZ9ODY78c9Nrr0KirtyhfY+aT5/+RZYFjt3LU=
Subject key identifier:   46:3D:E0:35:F6:45:A8:CF:98:3B:C2:84:06:E7:92:D0:28:EF:DB:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB884CA5E71199CA25DEE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44c4a9c1-3bfb-3ab6-9f8c-e8a126c62bd5.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        209.23.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:84:ca:5e:71:19:9c:a2:5d:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=77c695ce-2288-451a-90d0-0ce3db70fd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:29:02:bc:fb:3e:e5:36:34:1a:99:57:e5:
                    91:60:3c:ac:4b:9b:a3:7b:2a:1f:41:ba:66:42:d9:
                    db:78:2f:5d:e3:06:81:8d:c9:29:e4:f4:0d:01:52:
                    a0:5e:1b:fa:90:4a:3e:c8:f1:80:3f:fa:32:b3:7f:
                    fd:07:e4:83:73:35:ad:a1:03:b8:99:5b:d4:b7:a2:
                    d8:19:7e:e1:c3:10:8e:c3:fb:b6:db:9f:06:dc:f9:
                    b6:b7:f3:3c:d7:d1:8f:00:8f:f5:eb:52:d0:87:e8:
                    4f:f7:ce:6e:c2:72:e9:ce:96:1a:1f:3c:ff:4b:ec:
                    a2:8e:cd:db:75:6b:93:d7:f4:a3:91:34:70:bb:03:
                    20:2c:e2:c9:6f:b1:6d:12:b4:f8:30:12:4c:46:fd:
                    0a:bd:0a:31:45:cf:d5:6d:1b:d1:52:9e:c6:00:7c:
                    09:5d:65:74:0c:18:37:7a:95:d9:80:9b:35:09:57:
                    e1:8f:c8:9b:b2:cd:5d:96:0a:26:97:f4:97:f5:4d:
                    af:cd:13:86:40:92:10:b4:11:81:b4:5d:6f:cf:43:
                    5a:82:93:fa:59:ca:81:41:36:3f:35:88:04:5c:25:
                    02:6c:03:de:af:19:cc:69:07:54:5b:00:e9:0c:55:
                    7c:36:48:e9:e9:e2:5a:d1:db:65:27:07:a1:0c:24:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3D:E0:35:F6:45:A8:CF:98:3B:C2:84:06:E7:92:D0:28:EF:DB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44c4a9c1-3bfb-3ab6-9f8c-e8a126c62bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.23.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f3:2b:04:9b:76:a3:21:f6:39:31:3e:ea:3a:55:9d:2d:2c:
         08:fa:af:ea:3e:36:41:3b:2c:a6:21:0b:41:04:ba:b3:b4:3a:
         4d:23:cd:0a:c8:1e:4f:3e:1c:23:c6:39:17:47:60:c2:fb:da:
         f3:fa:db:d1:79:fc:d3:a4:2c:8c:31:bb:43:b1:a3:9a:79:25:
         a6:0e:93:26:10:e3:6a:32:ed:56:45:6c:b2:a4:c5:0f:e1:e0:
         9a:fd:47:09:97:ae:8a:86:cc:b6:06:34:f9:8c:c1:ff:2c:ac:
         95:bb:d8:aa:9d:1b:e8:d1:49:03:7f:85:b1:6f:d1:5a:4c:37:
         87:ac:0f:45:31:57:38:e0:c3:cf:ca:f7:8d:97:67:d9:de:f3:
         22:8e:a3:c0:6d:46:ce:d5:5d:d0:3e:2f:80:fd:a7:e4:e4:57:
         1f:45:20:fd:c0:31:6b:86:05:9f:f0:38:49:85:96:1b:7e:96:
         57:b3:3b:c4:b6:61:df:14:31:d9:ee:44:c1:03:5b:29:40:13:
         6b:95:5f:40:09:f3:67:59:ad:aa:7a:87:08:e9:95:02:3a:f2:
         3f:22:f2:41:d3:e9:f0:89:2c:c6:31:89:00:43:67:ab:b9:57:
         7e:16:cd:ba:96:de:be:40:ba:15:73:09:b9:13:35:d5:b5:fc:
         cc:2f:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:20:17 2025 by rpki-client