Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/74488e4f-ce7a-3180-ad95-232b6855f3eb.roa
File:                     74488e4f-ce7a-3180-ad95-232b6855f3eb.roa (raw, json)
Hash identifier:          pLbz7riQZXK19hthPJxFeCbNpE0l7+M3pKMHw7kKAxs=
Subject key identifier:   26:50:E2:A7:5C:08:B8:D1:1B:3B:99:B3:79:F4:08:73:53:49:42:50
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B91777CDCE6FFF12D07DE0620
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/74488e4f-ce7a-3180-ad95-232b6855f3eb.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     5769
IP address blocks:        199.84.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:7c:dc:e6:ff:f1:2d:07:de:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=4c2813db-b091-463e-b23f-53ca4b79f954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b7:a2:09:0e:e0:19:e2:3d:e9:4b:68:0e:54:
                    bd:af:31:3d:b7:ae:ec:76:dc:04:b4:15:48:1f:77:
                    ef:82:a9:df:9c:4c:ee:c3:24:4d:9c:b7:08:23:69:
                    3b:ce:a0:d7:ec:a7:af:96:8e:72:2c:89:cf:01:d0:
                    1b:8f:c9:9d:61:ea:25:1f:24:de:cb:9d:49:45:07:
                    33:f3:76:55:9d:86:76:be:e1:56:95:19:eb:a7:ac:
                    2e:9a:8f:97:2d:53:98:73:69:0b:e4:28:7c:14:05:
                    df:b6:b5:dc:29:1b:9c:fe:f4:02:44:a2:92:76:67:
                    2d:70:d6:7d:74:8b:eb:f3:f6:7d:82:39:69:05:9b:
                    42:82:1a:e8:7d:fb:9b:2f:8c:f1:bf:52:3c:54:90:
                    ae:49:b7:8e:17:78:35:ce:a0:f6:15:44:79:c8:22:
                    1d:87:cf:e6:3e:b2:38:3c:24:68:91:a9:76:d5:4d:
                    bf:1b:bd:63:2c:f5:fd:76:8d:a0:6c:98:62:99:a6:
                    d8:80:49:eb:e3:23:1f:4f:d2:e6:cd:6a:06:f4:17:
                    90:7f:55:35:ae:7d:3d:d5:0e:a5:93:85:1b:f1:35:
                    a8:7b:bb:2a:06:5d:a0:80:50:c0:10:cd:40:2e:25:
                    46:41:9e:14:69:42:ad:b8:29:0d:c9:37:60:5d:ba:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:50:E2:A7:5C:08:B8:D1:1B:3B:99:B3:79:F4:08:73:53:49:42:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/74488e4f-ce7a-3180-ad95-232b6855f3eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.84.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:79:ac:68:bc:11:b4:99:f7:a7:f8:d3:1a:24:84:71:a7:9c:
         6c:05:ad:96:1a:7c:60:a8:38:b1:5d:fe:8c:aa:a4:1d:a6:b0:
         0a:c2:79:c6:4f:44:e6:a8:cc:1d:e0:44:df:69:34:84:71:f1:
         9b:78:31:7e:65:74:17:12:a5:81:8e:52:0c:5a:2d:2c:c5:5f:
         cc:76:ca:a7:a6:62:a9:ba:2b:e7:ca:4e:75:e0:19:80:27:61:
         76:4d:b3:b0:d4:37:1e:21:39:31:89:93:44:c7:b5:ed:04:7d:
         56:39:51:42:47:75:3d:3b:ce:4b:be:85:a2:27:3c:ff:8a:bb:
         9f:87:1c:25:78:cd:23:39:58:89:18:65:79:94:a3:44:9d:a4:
         41:52:a7:9a:22:5e:fb:e4:7d:6a:e7:20:2e:7b:b4:60:cd:81:
         43:9c:54:7f:59:9a:bf:64:10:09:3d:88:ef:f0:df:16:81:a7:
         1b:04:a0:d9:c8:71:0b:b5:19:f2:b3:72:3e:f8:ff:17:35:83:
         81:a1:da:a5:58:d3:ff:bd:a0:28:b8:6c:01:dc:29:2f:cd:e2:
         a9:7e:88:9e:6b:8b:ba:d2:5e:03:59:85:5f:ff:d6:73:26:92:
         cd:dc:e9:f7:15:25:41:5f:41:70:16:07:88:63:43:d7:7a:f1:
         b6:4b:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:56 2025 by rpki-client