Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
File:                     2054c310-0e3b-3368-b12e-ea712380783a.roa (raw, json)
Hash identifier:          EYrW9DGph5EvxidzxXZQx/YQY9jRIprQ4jxnxa0/LZg=
Subject key identifier:   02:22:44:FA:97:2D:A0:55:1A:38:91:3C:D9:C8:2F:D4:EB:86:CC:C7
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B6BC75DE51817B404174C2F80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     9009
IP address blocks:        162.246.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:5d:e5:18:17:b4:04:17:4c:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=b54b5a2f-3ec0-47b0-bfca-53b673c0e668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:2e:7a:bd:11:eb:f6:3b:79:94:c5:35:f6:
                    1e:68:71:ba:ed:e0:5f:af:67:c8:ff:cf:51:c6:a8:
                    8e:56:4c:f5:12:a9:eb:26:b4:79:f6:a1:37:35:49:
                    2c:a1:3f:8c:6b:7a:ba:1a:64:b5:14:a1:91:7e:51:
                    11:fe:d9:9c:f1:25:e7:f2:bb:50:9a:35:e9:df:ff:
                    c0:46:d9:fc:8a:bb:d6:67:1d:f6:5e:62:cb:f3:5a:
                    90:1d:cf:e8:fa:11:ed:11:95:84:37:43:2d:4d:22:
                    a3:6f:d4:54:d9:4c:ce:77:75:a9:06:8a:9c:0d:ae:
                    51:89:ef:4a:ac:95:92:44:11:e9:76:da:16:5e:ee:
                    c2:38:5a:30:04:34:17:79:a5:c6:62:c6:e0:d4:10:
                    0b:75:e7:96:6d:1f:72:08:6d:23:00:c6:1c:e2:ca:
                    c3:e2:fc:32:66:06:94:39:cc:c8:2f:31:d4:7a:1d:
                    7a:f5:c4:43:ed:46:49:05:94:82:47:a4:3c:f3:ef:
                    6c:51:07:83:75:b6:6c:1c:a2:d1:1a:26:77:dc:47:
                    eb:b7:74:53:14:dc:a8:a8:79:a2:29:ef:cd:07:ac:
                    67:d2:29:92:a0:6c:04:22:e9:3a:c8:9e:aa:19:50:
                    7d:4e:ff:31:15:e8:3a:23:6a:dd:bc:72:c5:80:b7:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:22:44:FA:97:2D:A0:55:1A:38:91:3C:D9:C8:2F:D4:EB:86:CC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:95:bd:d0:be:b5:de:da:82:7f:d1:dd:c6:72:72:18:8b:33:
         50:21:7d:26:43:f6:77:ab:88:dd:a0:9d:69:a1:91:ef:39:0c:
         86:98:d2:59:63:94:80:97:9b:93:7f:0c:69:c2:71:1f:c3:37:
         85:35:a7:36:46:f7:2b:55:02:aa:55:b7:44:2d:67:04:d6:f8:
         1e:14:a1:4b:60:0b:6f:04:57:9c:bb:26:2c:be:37:bb:14:21:
         b1:56:55:1c:5a:8f:de:aa:b3:31:33:33:70:e8:7e:d5:0e:1a:
         8e:f3:cb:55:b2:14:e7:4e:9c:16:18:3e:26:84:87:af:3a:13:
         aa:8a:34:f3:a2:ed:81:d6:39:29:a4:bf:a7:91:ff:a3:93:df:
         11:06:16:c7:85:b8:8c:71:35:6b:d6:b3:90:ff:2d:1c:a9:83:
         a1:9c:7a:e4:46:0a:ed:04:88:08:a5:d7:ae:f5:1e:1f:88:18:
         75:24:8b:ca:14:c5:76:10:e5:02:f9:12:57:04:a3:1c:ca:9b:
         db:71:59:d9:6d:9f:05:31:cb:8a:0c:b3:58:3d:5e:ba:ff:60:
         e9:7d:66:9e:81:49:99:b6:57:d8:49:6e:19:2a:fd:0f:e2:f3:
         3b:27:9c:8b:bd:6a:89:71:52:d2:6e:9c:00:ea:2d:7d:10:fa:
         b9:d6:72:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:42:07 2025 by rpki-client