Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/84d52afe-f163-3077-92c1-35bcf498c90c.roa
File:                     84d52afe-f163-3077-92c1-35bcf498c90c.roa (raw, json)
Hash identifier:          rVdlJpUEHrQ1r6p9ceWKZ/w9bBoEcsOurVPUGp8VBuc=
Subject key identifier:   7A:0D:F5:19:0D:A8:52:DD:3C:2F:FD:E8:0B:A1:3E:74:9F:12:58:D7
Certificate issuer:       /CN=7befaca5-f1e5-400b-a1f2-8c6e82630b73
Certificate serial:       010D0C9F4328584B7DECA80F8B37F54C50FB3800
Authority key identifier: BC:C0:00:DC:08:E4:B5:6A:AF:BF:66:58:A6:09:24:72:7B:37:08:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/84d52afe-f163-3077-92c1-35bcf498c90c.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     16841
IP address blocks:        199.48.96.0/22 maxlen: 24
                          199.66.224.0/22 maxlen: 24
                          199.167.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a8:0f:8b:37:f5:4c:50:fb:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7befaca5-f1e5-400b-a1f2-8c6e82630b73
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=6472a9b5-94ee-440a-b419-455f4ff9b497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:08:b4:6d:08:94:78:b8:3a:59:54:c2:38:
                    a8:67:6e:c3:76:2c:58:63:e2:b0:4f:ba:48:5f:70:
                    1b:75:5b:b2:8f:df:f8:7e:ce:76:28:ee:32:01:c1:
                    f4:a2:75:e1:ca:72:d0:49:5c:47:9c:92:fd:16:60:
                    9c:7c:28:47:8a:f5:2a:d0:38:42:2e:f5:17:d3:8c:
                    34:81:84:49:cb:b2:67:20:85:93:2e:a4:d8:b8:a8:
                    55:81:77:0d:55:ae:2d:c5:c1:7a:dd:77:50:78:10:
                    b8:a8:a2:80:40:36:da:c9:db:09:b5:1c:1d:bb:6e:
                    7d:f3:46:36:c3:47:18:fa:d5:d4:7b:8b:9c:5b:96:
                    04:d4:12:f7:d2:9c:50:2a:b1:dd:8a:c9:e0:d8:66:
                    23:3f:7f:5a:07:2c:0a:eb:4a:12:cb:1b:15:79:2b:
                    d6:21:8f:f7:2a:61:e2:51:6e:a2:2c:ad:d6:ab:89:
                    b0:ef:27:8a:1b:db:e2:0b:d2:18:d7:33:49:db:5c:
                    d3:f1:6d:a8:3f:7d:3a:69:dd:6d:35:14:bc:56:62:
                    2d:5f:ee:3a:12:af:5e:0b:5e:43:f8:47:c4:8f:b4:
                    94:74:24:ac:0b:ce:14:a5:14:77:d2:96:b5:cc:67:
                    22:0d:37:6d:93:32:54:a0:aa:22:16:41:65:13:a2:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:F5:19:0D:A8:52:DD:3C:2F:FD:E8:0B:A1:3E:74:9F:12:58:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/84d52afe-f163-3077-92c1-35bcf498c90c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.crl

            X509v3 Authority Key Identifier:
                keyid:BC:C0:00:DC:08:E4:B5:6A:AF:BF:66:58:A6:09:24:72:7B:37:08:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.96.0/22
                  199.66.224.0/22
                  199.167.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:07:99:66:64:e6:1d:22:96:9d:47:e5:76:5f:2a:69:35:40:
         43:40:fb:58:1d:5c:e5:9e:bf:53:57:d2:f0:95:6b:4b:c9:78:
         7d:52:0c:bd:fa:20:58:dc:0e:bd:a8:23:31:45:b4:ab:ae:a0:
         b4:cb:ac:55:05:d7:97:bc:27:8a:a6:5e:37:1b:40:9d:d0:cd:
         f4:dd:cd:28:2b:b5:79:a2:85:47:d0:e2:3d:48:ba:21:26:8a:
         cb:5f:43:c8:fd:fe:a4:4a:7e:27:98:4e:12:75:11:6b:ac:6f:
         08:63:98:b8:24:1a:a5:9c:1b:c1:46:98:79:80:e4:6d:40:3e:
         8d:0d:e5:58:9b:b2:43:f3:70:b3:17:80:fc:59:6c:b3:1c:35:
         06:0b:f6:0c:e1:8d:4c:2e:51:43:74:8c:a4:99:59:bd:82:de:
         dc:c6:c1:4f:6d:ad:df:3e:85:79:de:a6:65:59:9d:69:85:ca:
         83:43:83:22:42:77:0e:f9:b1:1c:63:3e:88:1c:02:68:21:5a:
         57:6e:48:a1:df:a9:e6:17:d3:93:9f:4b:7f:cc:20:c9:30:20:
         fe:06:12:b1:87:b1:a0:86:2c:ce:c3:91:2a:68:50:d9:97:d8:
         44:4b:cf:94:b5:20:5a:9a:dd:41:d3:d3:a4:84:89:87:a7:0f:
         d4:4b:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:22 2025 by rpki-client