Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/489407ad-3d5f-36f4-a3e7-d721e081ec5a.roa
File:                     489407ad-3d5f-36f4-a3e7-d721e081ec5a.roa (raw, json)
Hash identifier:          c9L9W73Ki0VCXowfDMuggAgrCGBr6P0+xHWLve3eRzM=
Subject key identifier:   A4:E7:9C:62:83:EB:34:1F:04:60:D5:D5:9D:F9:1F:8F:0C:92:15:57
Certificate issuer:       /CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
Certificate serial:       010D0C9F4328584B5141EF9FB605DC0A8CE34F80
Authority key identifier: F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/489407ad-3d5f-36f4-a3e7-d721e081ec5a.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     15830
IP address blocks:        192.80.8.0/24 maxlen: 24
                          198.16.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:ef:9f:b6:05:dc:0a:8c:e3:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=f327964b-ea86-444a-a92d-85c1cefd2662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8e:b5:27:f8:65:80:3d:2d:49:c3:41:90:5f:
                    b3:d9:c4:e1:54:cf:bf:3a:21:6d:9b:e6:0f:34:2e:
                    43:07:f1:c0:97:56:69:c0:8e:c1:21:f5:17:6f:47:
                    e5:0b:67:22:7c:1b:ff:3b:64:e4:8d:49:18:44:29:
                    07:0f:a4:26:5f:b3:22:47:e8:7f:ed:29:92:40:45:
                    cb:a4:83:9f:a5:9f:f3:2e:36:80:13:a0:6d:a4:c7:
                    c3:0a:05:63:ad:96:94:0e:ac:37:fe:ae:04:73:73:
                    52:38:91:ee:9d:c8:bf:59:ae:54:d5:7a:d5:f5:20:
                    62:74:19:7a:cf:81:2d:a4:de:56:e1:f0:d5:98:20:
                    44:53:32:2f:59:0e:4a:03:15:37:9f:e2:e6:97:6d:
                    8e:ce:13:2a:7d:15:36:72:19:b7:11:23:a1:fe:8a:
                    ba:02:24:61:41:54:1a:31:50:87:85:16:20:fc:f3:
                    b4:f2:a1:32:94:ab:6b:1d:f4:ca:4a:39:06:2e:c7:
                    84:ff:41:b0:ad:94:88:88:39:6a:24:7b:d2:1f:8d:
                    f3:0e:04:fb:a5:91:b6:ec:c2:6e:6f:fd:7a:61:5d:
                    cb:3f:e8:8a:9b:35:b7:4d:28:20:34:e3:d8:1a:58:
                    bc:75:07:73:61:76:c7:41:8f:90:ee:88:ae:a0:1c:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E7:9C:62:83:EB:34:1F:04:60:D5:D5:9D:F9:1F:8F:0C:92:15:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/489407ad-3d5f-36f4-a3e7-d721e081ec5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl

            X509v3 Authority Key Identifier:
                keyid:F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.8.0/24
                  198.16.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a3:a8:13:a1:45:10:95:b6:72:4f:74:5f:9b:2e:f1:2d:77:
         70:63:e5:7b:28:69:74:00:51:8b:ac:8a:8b:26:b4:89:16:13:
         61:75:1a:ad:c1:77:ca:a5:24:1e:14:19:07:34:11:7c:f4:49:
         e1:88:6b:80:32:68:1a:50:36:72:29:bb:f8:55:f5:bd:3b:c7:
         d9:6a:dc:b1:92:f8:40:a8:cf:df:9c:72:c0:ea:75:34:16:c5:
         03:34:00:51:6d:3f:06:29:17:0f:99:41:02:92:04:17:50:2c:
         ec:d2:b4:b0:11:77:8f:5b:ae:78:30:f3:15:93:d5:1b:07:a7:
         3a:6c:35:f2:f1:64:5d:ea:f1:b1:df:1f:f0:33:90:7a:9b:4a:
         83:b9:1e:c4:f6:fd:08:e2:81:85:b4:a6:0d:7e:f8:4d:94:a2:
         b4:f7:86:4c:73:09:75:ac:2c:1d:67:cf:05:46:a6:c2:0c:58:
         c3:8e:83:86:4f:14:8c:44:58:09:b2:8a:c6:51:94:db:60:a8:
         ce:3d:23:73:1e:0f:d3:13:3b:25:34:8d:70:c9:6b:ca:95:44:
         17:fd:a0:49:97:8a:41:71:c9:f5:16:6b:df:e7:dd:3b:64:1e:
         55:af:62:7b:07:36:44:bd:2a:ec:2f:ea:81:ed:07:99:1c:a4:
         ed:21:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:05:48 2025 by rpki-client