Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa
File:                     922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa (raw, json)
Hash identifier:          KRo97U+D95nmVGyTdYiGuEzXb+g0+Ky6gK+AhlEVctw=
Subject key identifier:   2C:42:1C:9B:E5:F0:F0:44:A8:F9:C1:12:36:87:96:24:11:75:E4:61
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F4328584B7DECAC98B7980AD7811F7580
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     14977
IP address blocks:        137.89.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:ac:98:b7:98:0a:d7:81:1f:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=1273ccef-cdc8-4581-9ead-8099fdbb6cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:ff:45:74:11:5f:a6:88:ff:eb:ab:fc:67:
                    0e:e1:48:23:57:4d:11:be:78:aa:c3:86:35:03:8f:
                    b4:41:59:5f:e1:1b:7f:40:90:bf:8d:d0:4a:4c:6a:
                    d7:44:a8:9b:ce:af:96:50:15:c5:80:da:fa:ec:df:
                    03:9e:e5:23:ed:93:3f:b5:7b:35:3d:08:db:f8:55:
                    2a:ff:a4:e9:85:ed:a8:22:79:e5:99:47:7b:1b:96:
                    b9:f6:61:84:37:05:f6:66:7e:b2:12:b8:cf:7d:67:
                    06:c3:d9:5e:7f:80:98:2a:ae:8f:c9:45:f1:f8:ce:
                    b3:60:23:c7:31:71:ca:57:1b:b2:df:b8:3f:eb:75:
                    36:de:7c:90:1b:b4:aa:c7:5b:01:8c:17:55:fb:fa:
                    95:61:8b:91:17:bc:c7:9b:56:1f:85:12:38:2f:6b:
                    9f:cb:82:ee:a0:ed:fa:4b:f9:12:bf:4d:7b:f0:61:
                    df:88:b6:de:dd:50:c1:fc:e7:0c:4d:84:50:ec:2f:
                    55:23:f1:cb:07:45:c1:28:53:0a:96:de:6a:da:3b:
                    67:9f:ad:69:3f:1a:61:c3:68:a0:dd:b8:c9:a6:8b:
                    5f:24:4d:4e:6f:42:6f:a0:00:1b:15:37:3e:dc:b2:
                    59:9c:98:4b:7e:fb:90:8f:e9:8d:9c:28:90:a8:a7:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:42:1C:9B:E5:F0:F0:44:A8:F9:C1:12:36:87:96:24:11:75:E4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:44:7a:51:eb:2a:d2:1f:f7:b0:21:a2:e1:07:b5:a8:7a:
         6a:3c:83:82:b7:42:87:ad:9b:8b:50:10:f9:51:9c:9f:bc:d4:
         3c:6e:3d:3b:c9:21:37:d2:4a:59:55:70:9b:11:48:6c:53:67:
         6a:ec:5e:c1:ab:1d:83:1f:96:1a:3a:dd:a2:48:7a:e6:1f:ce:
         a8:d3:05:36:5c:72:7d:27:d0:bc:7d:20:69:7c:d6:5c:9a:c3:
         26:55:ae:4f:59:48:50:b6:c2:e8:9c:3b:49:1c:8b:0b:72:39:
         12:07:1f:14:bc:c0:b3:03:db:e2:43:a7:13:6f:d2:32:8d:7d:
         71:d7:67:9d:e7:90:1f:a0:4b:6a:cb:d4:46:04:ea:95:8a:67:
         2f:cb:ae:b9:2d:2c:58:8e:1b:83:18:3e:fe:a4:e7:e9:73:d9:
         f7:9d:f9:d1:e9:2b:d7:05:91:64:c9:7f:be:18:ad:af:d4:1a:
         c5:1e:e3:fb:6e:db:99:fd:3a:11:ef:f7:86:99:0d:72:19:02:
         af:cb:03:55:7d:ac:af:e2:5d:17:7c:5e:d5:30:d3:44:97:50:
         7e:11:5d:2d:e8:82:cd:9b:87:44:98:96:4c:fa:39:54:88:d1:
         f5:b2:03:91:bb:00:e9:77:59:7c:2c:96:a8:0e:d7:e4:b4:6e:
         73:b1:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:37:34 2025 by rpki-client