Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86dd51fb-efb3-3c1f-87b2-8398c755dd23.roa
File:                     86dd51fb-efb3-3c1f-87b2-8398c755dd23.roa (raw, json)
Hash identifier:          KZIxB4duRmcvlSu20GyheOH+miwJ0kyXcOtBAKgd2GQ=
Subject key identifier:   8E:5D:1E:62:8C:1D:5D:E4:72:B0:DB:91:AE:0F:3D:61:77:A6:7A:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB73EEB8889FC75335E4480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86dd51fb-efb3-3c1f-87b2-8398c755dd23.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        162.148.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:3e:eb:88:89:fc:75:33:5e:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a12accb6-fb64-407e-b1de-947e66a29205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:89:f0:77:fe:6c:e3:52:fd:0c:37:65:0e:
                    5b:5f:07:53:c3:69:c6:66:45:e7:71:67:ae:47:30:
                    09:90:92:e7:d2:8a:65:e6:28:ea:7b:7d:59:f4:48:
                    71:7d:7d:11:4b:b7:0a:2c:36:e4:04:c0:88:1f:fb:
                    28:50:f8:96:73:93:13:f6:fd:6f:f0:37:fd:ad:c7:
                    84:32:e4:93:18:3d:6e:cd:8b:87:28:62:bf:ac:9e:
                    db:03:57:a2:d4:0b:52:f5:eb:85:49:02:3b:4f:eb:
                    0a:87:f4:45:77:25:f5:f3:32:e7:35:ba:da:a8:19:
                    cb:e7:41:bc:55:de:df:52:fe:97:e1:87:0e:1d:1d:
                    59:e8:24:0b:58:02:d4:c4:ab:8a:75:e2:f4:d2:4c:
                    e5:84:f9:fc:69:f9:0c:3a:8a:4c:37:2f:cc:d0:4c:
                    a2:34:70:4a:f5:d9:48:2d:b4:6a:61:3b:f9:45:ad:
                    26:2f:8a:6b:30:52:9f:32:0c:98:c8:5b:1b:a4:32:
                    97:5e:31:2e:b9:39:54:af:24:2f:a3:f1:a6:a4:56:
                    15:73:5d:2c:a4:e4:b5:f8:af:ce:be:d0:af:cf:ff:
                    dc:0f:ee:f5:eb:62:f7:fb:7f:26:93:d3:69:7b:94:
                    7a:b2:0c:f8:41:8a:a9:32:14:88:18:b3:3d:89:40:
                    f9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5D:1E:62:8C:1D:5D:E4:72:B0:DB:91:AE:0F:3D:61:77:A6:7A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86dd51fb-efb3-3c1f-87b2-8398c755dd23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:46:05:6c:0c:1e:c0:c0:c7:5d:e8:c3:a4:cc:37:dc:9a:51:
         f5:26:d8:0b:2e:cd:b9:f4:c7:bd:aa:64:9a:dc:70:49:c9:56:
         d0:40:67:4a:74:1e:d8:6d:14:e7:35:98:05:9d:2f:2f:d4:cf:
         d2:72:83:4a:c2:7d:7e:5b:c0:3b:be:15:6c:6f:39:16:ae:fb:
         dd:79:f3:5d:36:23:65:86:32:13:ad:48:eb:ff:bc:1a:73:76:
         60:46:de:0d:51:76:8c:04:fe:52:9d:2f:0f:16:54:c5:e5:77:
         f1:1d:10:a3:68:41:d3:22:92:95:af:9b:92:e8:d6:93:10:77:
         1a:7b:12:60:32:1c:9d:0e:8b:a4:ea:cb:8d:85:df:68:ea:c0:
         36:a6:52:7a:f3:5c:69:bb:3b:d3:33:2f:55:19:bc:5d:29:37:
         29:78:3f:75:52:66:0b:c2:7e:2a:76:f7:26:c2:41:68:7a:a0:
         b5:a5:e3:c5:a0:df:62:0e:31:30:cf:fa:88:6e:a6:28:f3:55:
         2e:d7:f4:0e:f9:38:ff:04:e0:b1:55:67:fe:fa:45:e5:a6:30:
         05:b0:a8:86:71:14:9e:21:79:7f:24:bb:a0:2d:76:2a:cd:9d:
         1a:7b:9d:f6:35:9f:8f:f4:7f:c7:d4:8b:53:b3:0d:1a:b7:23:
         5c:9f:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:05:50 2025 by rpki-client