Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa
File:                     cbb47c14-2799-3b64-87d8-2264da5e3862.roa (raw, json)
Hash identifier:          mRqz1n71vBXAskQR81xWBwSecmHaIC+X4ZP/wRrJ2rs=
Subject key identifier:   03:1C:C4:E1:88:80:1A:1D:50:87:E8:64:4E:33:1B:33:C0:90:3A:64
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584B92DCF96945CA956A67B38280
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     16839
IP address blocks:        149.96.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f9:69:45:ca:95:6a:67:b3:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=c15fae66-2ab4-4549-84e5-9d61cb9dc387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:8c:47:2c:9e:1b:d6:ce:0c:69:76:7f:83:
                    28:f0:b7:fd:16:a3:64:b1:fb:b1:30:b6:0c:97:67:
                    ec:a1:d9:eb:0e:e8:ed:02:fe:a0:41:5b:64:d4:75:
                    d1:02:f3:e0:20:7d:e3:78:e9:01:f9:76:0f:9c:50:
                    ac:13:5e:33:df:99:d9:0e:44:5c:44:3b:84:30:56:
                    db:79:88:8c:8d:b7:5c:25:85:a3:1a:2f:da:a7:cc:
                    0f:12:53:cc:14:0a:44:49:e4:99:ac:a1:8c:33:0e:
                    49:39:40:59:03:42:2a:c4:da:36:3b:99:af:b6:04:
                    96:60:6d:6c:c1:a4:3c:65:42:45:fe:57:de:b1:59:
                    2a:1d:49:50:1f:2f:7b:04:52:f1:ae:be:63:c4:d2:
                    2c:57:c2:70:f9:5c:c1:72:bd:41:23:9f:a5:d3:d7:
                    32:57:94:8d:03:63:47:77:7a:ac:44:94:75:9b:e6:
                    1d:6c:7f:43:9b:90:fe:20:e2:0e:9d:c8:39:7c:af:
                    1a:12:7b:ce:9c:7e:b4:6c:ab:60:40:48:7d:0c:7c:
                    4b:bf:18:d9:4b:27:a9:98:50:ae:c7:fe:a3:94:d3:
                    75:01:80:cf:e1:ef:3b:ca:fb:93:59:8a:80:35:87:
                    5c:62:27:43:93:a9:7f:54:ae:8a:fb:c2:b5:c0:ac:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1C:C4:E1:88:80:1A:1D:50:87:E8:64:4E:33:1B:33:C0:90:3A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:32:dc:e1:15:c9:3a:aa:cb:9c:aa:69:4c:e7:7f:62:01:
         84:d2:4b:fd:b3:58:13:8c:df:eb:5b:2d:d3:bf:63:6d:3b:79:
         ed:d5:f7:f1:e8:42:e7:2a:ba:13:1b:0f:80:e8:45:b5:1c:0c:
         9a:19:9e:10:68:44:30:27:18:7e:c6:bb:59:1d:55:26:f4:e0:
         9f:0c:e1:78:76:99:f8:20:bd:f8:6c:66:94:03:4d:2a:a4:a2:
         4c:04:9f:bf:4e:42:1c:80:ba:3f:6f:f0:46:fb:75:c1:6f:65:
         8c:ad:ca:69:75:bd:81:19:b0:5c:67:2a:1b:47:27:2a:85:94:
         58:d1:6c:ff:f9:63:f6:18:b9:b8:ba:d4:f7:c3:87:f2:59:b3:
         ac:9c:e6:35:d6:1f:fc:a0:43:46:22:41:d8:27:27:97:23:fc:
         1f:d2:92:62:91:8d:fb:d3:ef:f6:94:fa:b9:e7:45:a9:ca:76:
         e8:4b:b0:92:20:77:2b:72:44:71:ed:fa:92:6b:99:ea:93:dc:
         e8:d0:6b:86:52:dc:ea:1b:c2:52:7b:80:1b:a2:a2:28:a3:43:
         e0:04:57:78:da:1b:29:db:0d:ad:f2:25:23:78:6a:2c:35:01:
         e9:6c:23:65:91:13:06:36:76:86:d4:bb:1c:d5:c7:37:65:3a:
         de:3a:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:06 2025 by rpki-client