Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/86181317-6bc3-3829-8e82-a5679c723f33.roa
File:                     86181317-6bc3-3829-8e82-a5679c723f33.roa (raw, json)
Hash identifier:          kyiZynOEBW3gCGdNk/R/k+eXcyAxcqCfO/ZLQF9W91M=
Subject key identifier:   59:5F:1B:9D:4D:BE:99:45:4F:A8:16:D9:A8:46:90:18:C8:84:98:E8
Certificate issuer:       /CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Certificate serial:       010D0C9F4328584B8CA44DDDEF5D3FAA56792380
Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/86181317-6bc3-3829-8e82-a5679c723f33.roa
Signing time:             Fri 17 Oct 2025 07:31:55 +0000
ROA not before:           Fri 17 Oct 2025 07:31:55 +0000
ROA not after:            Thu 15 Jan 2026 08:31:55 +0000
asID:                     834
IP address blocks:        207.167.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8c:a4:4d:dd:ef:5d:3f:aa:56:79:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419
        Validity
            Not Before: Oct 17 07:31:55 2025 GMT
            Not After : Jan 15 08:31:55 2026 GMT
        Subject: CN=d9a680bd-f2e8-4e58-9f94-86fd639a8086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0f:d0:c3:e6:c3:63:83:9e:12:53:a1:d6:64:
                    e5:d9:cf:4f:88:d3:b7:4f:dd:bd:75:c0:33:dd:96:
                    4a:55:2e:57:6e:cd:1a:70:da:15:a3:8d:ce:cb:ef:
                    a5:ab:c9:ef:79:30:99:78:2a:fc:82:12:34:cd:2a:
                    a6:25:1e:46:c1:8c:ee:16:8d:3e:a9:7d:0c:50:6d:
                    63:80:c2:94:c8:3c:42:6e:17:ba:20:9b:c4:f5:27:
                    c6:19:a4:7b:a5:ba:fe:2a:26:73:d7:07:74:8b:b8:
                    e8:b7:c6:09:1e:46:8f:91:45:e3:98:bb:26:78:63:
                    c5:29:32:2f:5a:7a:c1:db:35:b2:70:08:09:f1:66:
                    46:cc:0f:a3:00:63:16:6e:df:de:95:ea:53:9e:70:
                    b9:98:d2:5a:22:16:93:e6:1f:96:99:af:9a:f1:30:
                    ae:03:e3:5c:f1:50:1e:ba:51:90:12:ad:92:55:93:
                    ab:78:87:07:a9:87:d7:2f:ac:f2:b4:dd:25:5f:b4:
                    74:31:2c:4e:b9:b7:f4:18:a1:6e:37:47:00:a0:9b:
                    9b:5a:55:f8:7a:42:cd:64:e3:ed:eb:91:63:bd:57:
                    13:e9:cc:b9:4b:6b:bf:b8:6b:ce:04:ba:7c:6c:3a:
                    0e:b9:7c:db:e9:78:d1:7b:cf:9b:63:d3:7f:0c:00:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5F:1B:9D:4D:BE:99:45:4F:A8:16:D9:A8:46:90:18:C8:84:98:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/86181317-6bc3-3829-8e82-a5679c723f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl

            X509v3 Authority Key Identifier:
                keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:72:aa:14:de:ae:7b:63:d3:f7:24:3b:1b:6c:89:65:a7:
         36:20:29:21:47:e9:a5:75:ec:15:3b:5a:02:ed:e1:3e:b4:66:
         9e:f7:58:56:c7:3a:47:85:1b:5d:f3:d9:79:22:76:8f:9d:e6:
         72:fc:ae:2c:48:a0:52:1f:c1:29:36:83:37:c8:07:e9:1d:dd:
         bc:50:85:a1:f5:23:6f:ec:82:ff:e3:49:d0:04:18:4c:92:cd:
         a6:cf:4c:ba:85:c6:ee:72:ae:b8:04:02:ee:40:9b:a7:3c:34:
         3b:65:bf:9e:7a:39:7d:2f:20:82:24:6f:ac:c8:4e:a5:f0:46:
         77:da:0e:6c:9e:95:a1:40:d5:40:16:91:4d:46:eb:e8:31:25:
         4e:05:88:bf:eb:c1:99:7a:cc:2c:bd:62:bf:d0:c7:4b:d1:da:
         d0:e7:af:42:b2:70:f7:ca:70:92:5e:56:03:9a:6f:cb:06:38:
         a5:5e:d7:a9:23:f0:fd:84:55:53:37:24:3d:28:1e:06:d7:49:
         13:b4:24:24:d2:fe:9e:d1:18:50:1b:95:3f:18:02:99:86:e5:
         0a:e1:1d:c9:fa:c1:aa:66:25:83:ba:33:90:09:3d:55:c8:d1:
         9e:bf:be:fd:93:b1:11:12:f5:f2:f0:46:f9:a6:ea:50:60:e0:
         13:25:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:43 2025 by rpki-client