Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd94efed-1be6-3a6b-b0aa-e322add18b74.roa
File:                     dd94efed-1be6-3a6b-b0aa-e322add18b74.roa (raw, json)
Hash identifier:          7A7si28EXKBrk4JLPIPokUkBlK4aQPdXd8WpmVEdJ1g=
Subject key identifier:   7B:8D:67:19:4D:A9:6D:E8:5F:2C:D8:56:89:3A:97:FD:A2:43:17:9C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B7DECCC6683C3614EBFBBFD50
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd94efed-1be6-3a6b-b0aa-e322add18b74.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        205.186.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:cc:66:83:c3:61:4e:bf:bb:fd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=ac0595a6-9895-4805-8c40-574407063ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:20:9d:d3:ec:6b:6a:d5:7f:f7:42:23:a7:
                    b9:b1:ab:da:cc:8f:08:14:3c:02:97:e9:81:10:57:
                    a4:25:7a:c6:90:0a:c0:78:35:9b:7f:5a:dc:6a:1c:
                    f4:6d:e7:1b:cb:45:50:10:59:60:3a:b4:55:fa:0f:
                    d5:80:f0:e6:16:bf:11:56:7a:e3:01:aa:10:dd:55:
                    3b:fe:15:cb:07:39:ac:eb:f7:5f:9d:5e:16:63:88:
                    c5:9e:3c:e4:04:4f:10:97:a4:65:c0:54:66:a9:85:
                    0c:0f:5d:f6:7e:33:54:b8:04:7e:8d:fd:aa:4a:10:
                    a3:08:5b:16:6b:94:b2:78:5b:f1:e7:ad:e1:bb:ed:
                    92:7f:a0:a1:14:26:e7:e2:67:01:03:92:1e:b3:ef:
                    06:09:f3:4f:c6:04:36:d8:e3:5f:33:2d:32:58:85:
                    c9:56:7a:42:29:f0:a5:dd:41:4e:d9:4c:5c:02:e5:
                    80:4c:89:5a:c8:7f:b5:20:43:93:3a:be:36:06:12:
                    67:58:17:3e:aa:53:c3:2b:75:23:81:b8:58:98:a7:
                    9e:8a:d4:43:d7:84:ff:9b:d9:07:37:cd:99:2b:da:
                    ca:f6:22:58:d7:d4:f7:7f:ab:bd:86:d3:f0:80:d2:
                    72:50:5b:dd:a7:fe:f0:d1:7d:c4:a8:bc:e0:60:c5:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:67:19:4D:A9:6D:E8:5F:2C:D8:56:89:3A:97:FD:A2:43:17:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd94efed-1be6-3a6b-b0aa-e322add18b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3b:71:3f:10:1c:ab:7a:da:0f:42:0e:a5:34:da:67:b9:1a:
         e1:d5:7b:4b:62:4b:79:5a:73:34:75:2e:13:1f:17:60:cf:8f:
         67:13:75:52:0b:ef:55:62:5e:88:18:ed:3e:62:47:e1:69:60:
         20:5d:40:76:0d:6d:5b:74:a5:f8:a3:a0:8b:66:de:46:06:90:
         99:5d:b2:66:60:9b:32:a8:0c:12:13:a1:25:02:65:41:05:f3:
         2e:e2:71:b8:09:07:b0:a9:c7:37:0b:88:9c:ab:fd:ec:f8:32:
         19:ae:ac:83:6c:c4:4d:00:c7:1f:d2:67:76:03:af:3b:65:1a:
         2d:65:40:d5:15:b9:bb:22:3d:9d:f6:10:a1:0f:ab:a7:5a:64:
         eb:2e:6e:0a:3a:0b:61:2f:8a:a2:bd:be:96:4f:a8:33:72:e0:
         78:72:0f:32:d0:20:01:65:e2:23:a4:24:4b:69:7d:cb:64:07:
         39:24:2c:05:ab:b7:8c:1e:bb:a5:b4:29:45:e3:c7:2c:df:8a:
         1b:91:13:79:0b:d9:12:77:9a:47:cd:54:89:c2:75:ce:05:9d:
         88:8e:95:f6:80:90:2b:7f:59:7e:71:5a:4f:89:c5:43:3a:2a:
         ec:1d:58:64:db:73:1c:79:df:c6:3c:d9:a3:0e:b6:7f:33:7d:
         c1:b7:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:09 2025 by rpki-client