Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/33fab51c-6504-33ab-902b-216fbae3e69a.roa
File:                     33fab51c-6504-33ab-902b-216fbae3e69a.roa (raw, json)
Hash identifier:          FfOYcCSmj+YvtxsVaRs7l4Vo0tM+Sj5qCd3G3srttlo=
Subject key identifier:   FC:5F:43:31:9D:E7:F0:0A:AA:00:8B:58:11:16:E7:72:BE:E1:7F:E7
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B8D8DCFA0FB6C6B8370329E88
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/33fab51c-6504-33ab-902b-216fbae3e69a.roa
Signing time:             Fri 17 Oct 2025 15:22:25 +0000
ROA not before:           Fri 17 Oct 2025 15:22:25 +0000
ROA not after:            Thu 15 Jan 2026 16:22:25 +0000
asID:                     15164
IP address blocks:        205.184.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:8d:cf:a0:fb:6c:6b:83:70:32:9e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Oct 17 15:22:25 2025 GMT
            Not After : Jan 15 16:22:25 2026 GMT
        Subject: CN=9ec9937e-b397-45d3-a25c-69b0b37db94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:82:39:15:7e:66:93:99:31:b9:9f:8f:86:07:
                    a6:c4:7f:d6:19:1e:e2:b6:6d:27:1d:d1:83:4e:7f:
                    6c:29:c6:2d:33:d8:de:86:6c:ba:b2:67:3a:9f:62:
                    60:7d:fa:9c:ad:eb:1c:4b:50:d9:62:9b:05:39:b1:
                    8d:a8:95:d6:fc:22:e2:55:17:5e:6d:b8:a7:8c:53:
                    ff:92:9d:0e:43:88:e6:19:90:47:df:07:16:0a:e3:
                    d3:fe:fb:1a:b0:11:6f:eb:15:b9:b4:ef:bd:af:a4:
                    d7:32:90:1c:f5:97:53:b3:0a:e5:01:06:de:6b:e5:
                    99:51:8a:e2:a4:7f:ab:5c:c6:18:91:63:3d:b1:c5:
                    cb:cc:6c:b9:16:44:8a:ac:d7:7c:8f:92:5b:3d:5b:
                    ce:b4:67:00:85:e0:57:96:33:c3:91:65:c0:86:23:
                    f5:14:7d:cc:ab:52:b7:ed:3f:39:89:25:05:98:eb:
                    3a:f0:a5:75:7e:35:77:3c:6c:da:3f:4f:d7:e9:aa:
                    26:70:cf:70:cc:a5:82:cb:bb:a5:b5:7e:04:5f:ad:
                    4d:c2:a2:62:f9:83:62:ed:95:f5:fa:6c:98:51:cb:
                    8e:3c:bf:2c:1e:c8:14:c0:b5:46:ea:92:80:c4:e4:
                    a4:40:91:e2:a7:04:cb:de:9b:52:ab:5a:f1:42:2d:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:43:31:9D:E7:F0:0A:AA:00:8B:58:11:16:E7:72:BE:E1:7F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/33fab51c-6504-33ab-902b-216fbae3e69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:53:ad:4a:6b:98:21:40:56:0a:ea:39:60:34:59:54:81:98:
         84:b8:6b:5a:32:93:01:90:f7:49:d1:76:5a:66:b5:48:f1:7a:
         5c:2a:ef:d2:fa:6c:32:7c:4f:09:88:b4:dd:90:70:13:81:36:
         78:80:8f:0d:05:c4:48:f1:5b:d4:bb:60:36:cd:5d:c9:18:bf:
         7f:43:93:99:d6:fc:6d:0d:63:0e:fd:49:58:3c:57:ff:68:b9:
         88:34:1e:63:6c:eb:c4:ac:41:0e:c8:82:de:11:7b:d1:8c:b7:
         9b:d3:e3:f9:fe:a9:40:d8:d1:94:de:e2:20:0b:32:5f:6d:e5:
         1f:6f:fc:62:90:c3:2e:b6:9d:5c:39:f5:15:df:72:d8:71:63:
         8f:20:87:1b:10:2b:9f:cf:b0:17:be:e9:dd:8f:e4:44:66:a6:
         cf:ff:be:ea:a5:21:3f:d6:c7:50:d5:75:0e:58:7f:26:8a:73:
         15:73:a7:b8:55:94:fe:45:08:d0:2b:e6:1a:cb:d6:65:75:85:
         ae:3c:9d:d8:b0:5a:7e:0d:f2:7f:88:e9:ba:1f:f5:c2:77:4e:
         d8:6e:7b:70:53:55:06:f7:ad:09:f0:89:24:08:f2:bd:7c:b8:
         6b:bc:0d:99:2b:eb:0a:8e:88:98:4a:85:90:cb:58:f7:f2:02:
         66:86:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:52 2025 by rpki-client