Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa
File:                     cbf5d661-caf7-3016-8cfc-b5a540e71195.roa (raw, json)
Hash identifier:          8quyaPOeDrxy1QC4SyG7MjkiXi+UNEmuumIMK7+IyM8=
Subject key identifier:   15:A5:68:10:D8:73:F8:38:39:E1:83:32:B3:89:97:70:2A:5D:E2:53
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584B92DCF0AF40D0C2F5EB82D4E0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     16839
IP address blocks:        199.91.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f0:af:40:d0:c2:f5:eb:82:d4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=3fbceac4-d3cc-4c28-b590-63fb0836268d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:84:56:e1:bd:f0:5c:41:9b:ce:d5:28:40:
                    36:f9:ec:76:da:f0:02:a9:9e:46:17:3e:5b:41:de:
                    cb:d5:9d:42:62:3f:2e:aa:ba:cc:13:77:f0:a3:35:
                    23:38:07:f2:c6:57:53:af:21:61:d1:2e:ad:f2:ea:
                    fb:85:7d:0b:44:a7:b8:b1:fb:b6:51:78:02:7b:d5:
                    87:74:a6:f2:a6:5d:97:57:ba:90:a3:39:c6:7a:50:
                    96:25:90:44:3b:72:8d:6b:c2:53:5f:ae:bf:6b:70:
                    4b:b8:c1:bd:53:2c:7e:22:2b:bb:b0:24:50:85:8c:
                    2e:99:0b:cf:28:00:d1:30:a8:bf:b4:3c:43:35:7d:
                    63:b2:f0:86:82:7d:7d:20:13:74:8c:ad:9b:25:ad:
                    e2:1b:38:9f:2b:27:74:fd:94:81:7d:bf:f0:40:5b:
                    27:02:9d:b5:cb:9a:7e:c6:14:7f:43:48:6c:eb:e0:
                    e7:40:b5:69:0f:e4:92:c6:66:7f:26:3c:0b:da:f1:
                    65:80:03:3b:51:96:15:2f:ef:b1:83:02:2c:c8:57:
                    6b:ba:a5:eb:c2:6b:d1:4a:6b:c2:a2:b3:82:74:ad:
                    50:32:7b:70:a3:af:fc:96:e2:bf:74:5c:03:6a:01:
                    02:a6:b8:84:73:a6:28:f3:4e:cf:6e:ca:f0:49:95:
                    d2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A5:68:10:D8:73:F8:38:39:E1:83:32:B3:89:97:70:2A:5D:E2:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4d:be:df:f8:5c:18:87:5a:86:e6:25:38:16:e8:8d:5d:dc:
         58:b1:71:de:79:7e:51:5a:d6:b2:e9:17:1a:61:3b:b6:19:46:
         b6:04:f7:53:b6:5b:23:6e:cb:26:ea:c2:0a:07:14:fb:cc:4f:
         eb:75:eb:f6:d6:84:ee:55:8e:93:6e:88:80:04:15:85:be:a4:
         ad:22:80:a3:23:6c:8a:b8:7f:13:47:f9:b1:f3:1a:72:86:ca:
         a9:ae:2e:0a:e1:b5:b1:d4:f6:65:5b:43:28:27:00:9d:3c:90:
         2e:d6:39:2d:4c:a3:05:bc:d9:d7:b0:6e:10:18:63:41:e1:c2:
         2f:7b:b6:cc:3d:9f:7a:c5:46:49:60:28:b9:c2:91:41:68:5a:
         90:07:cc:91:ba:55:4c:fc:55:b2:4d:34:af:a6:51:9c:1c:79:
         e6:be:f1:27:43:63:b0:08:37:b2:99:48:89:24:dc:60:09:a9:
         99:17:4b:bb:3d:fe:9f:11:bc:ed:38:7c:b7:79:26:72:91:b2:
         80:b5:8f:db:2c:f3:50:2a:76:1d:93:b9:3c:b5:6f:9f:21:67:
         68:76:ff:9a:2f:48:24:8b:99:51:3c:d1:5c:3d:8d:43:21:a0:
         58:68:08:2b:06:12:ab:dc:97:12:2d:55:96:c8:d1:27:c6:b6:
         0a:10:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:20 2025 by rpki-client