Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/93b6fced-343a-3651-b150-3e2b9feb7e27.roa
File:                     93b6fced-343a-3651-b150-3e2b9feb7e27.roa (raw, json)
Hash identifier:          zy7dFtAb4QfbkxinnJtHJ9e+FdYzhD3mZoFiGr1p+mE=
Subject key identifier:   B8:37:05:B4:8B:06:85:2E:95:CD:CF:BC:49:63:1F:62:55:15:19:EF
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CE42347B7083757D035F40
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/93b6fced-343a-3651-b150-3e2b9feb7e27.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        72.22.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:42:34:7b:70:83:75:7d:03:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0327e367-fc7b-4923-b392-a0be04e2afa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:77:bc:a1:d1:28:c9:d5:33:a2:8a:0d:65:
                    0d:e0:5c:67:c2:73:b1:16:07:ac:1a:fe:f7:91:c1:
                    24:a1:72:c4:03:b6:87:39:5e:b9:34:da:3c:c9:d8:
                    48:00:30:a1:b6:4e:c9:13:29:27:53:55:d7:02:48:
                    b6:1d:3e:04:2b:b8:c1:16:9a:60:60:8c:92:f1:09:
                    58:1b:89:07:a4:0c:65:ae:ff:26:9d:44:c9:12:29:
                    d4:40:13:63:7d:13:5a:ed:57:af:a6:bd:29:d3:c1:
                    98:40:04:55:ef:97:8e:43:7a:81:96:87:d0:17:33:
                    a8:64:29:30:0d:07:6f:14:0a:6b:bc:59:95:89:fb:
                    5f:db:b3:61:63:5d:aa:fe:02:2e:03:89:d3:b6:34:
                    5e:12:ec:dd:3e:2c:99:35:5f:4b:61:53:98:92:ec:
                    ef:17:28:fc:7e:06:a7:58:ff:38:ca:35:b1:ce:70:
                    43:03:1f:2c:10:2d:5b:bf:44:41:33:42:de:80:ed:
                    59:12:fe:f1:2a:0d:55:53:30:6e:30:63:c2:60:c0:
                    55:38:e8:cd:95:da:fe:09:96:bc:b5:e2:86:8e:a7:
                    fd:34:58:9a:ab:ed:c0:e5:d1:00:d7:c5:a1:7a:da:
                    7a:a8:12:f9:86:73:83:0f:4d:61:3b:6f:cf:68:97:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:37:05:B4:8B:06:85:2E:95:CD:CF:BC:49:63:1F:62:55:15:19:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/93b6fced-343a-3651-b150-3e2b9feb7e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:56:24:4a:94:f5:a8:ce:22:06:2d:23:d2:0d:57:58:4e:28:
         b6:19:6c:7d:22:d3:b0:1c:46:16:ca:ea:fd:0e:90:33:4b:88:
         c7:81:ce:83:8b:89:6d:9c:13:1c:af:0f:e3:14:70:d9:a0:8d:
         45:5a:49:b9:79:9a:bd:1e:c2:7f:7c:10:51:d9:cc:92:b8:e6:
         96:97:f2:b6:7c:6e:a1:c2:ad:22:de:c1:a3:76:47:97:c8:93:
         1e:2a:28:01:ce:94:91:32:02:ac:e6:db:9b:b1:64:fd:bf:88:
         36:67:66:51:56:b1:b0:74:62:48:42:3a:c2:3d:38:73:a6:87:
         3a:c0:45:bf:e5:42:84:d3:2b:1e:df:33:53:3c:32:0d:0e:84:
         87:9e:b6:7c:9d:46:99:be:ee:aa:2d:a0:83:2a:94:45:67:b9:
         1c:7b:62:f0:71:a7:0b:52:84:f7:d4:d0:18:d4:80:62:7d:c4:
         38:df:7b:5e:d1:71:81:3f:96:d0:3e:eb:ee:25:45:8f:3b:e3:
         db:e9:d4:fd:c9:8a:4a:d8:ae:90:85:e7:0a:4d:a3:a9:e1:af:
         ea:5b:ce:07:51:27:7e:be:33:06:da:84:9d:3e:da:91:6a:50:
         b7:10:b7:d6:2d:55:b9:21:08:ec:02:c0:53:23:f7:c1:26:7b:
         34:68:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:50 2025 by rpki-client