Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/169f0e74-8a98-3f6c-9cd6-f847d1bbfdf3.roa
File:                     169f0e74-8a98-3f6c-9cd6-f847d1bbfdf3.roa (raw, json)
Hash identifier:          gKigJaUaj9A6XNpM5KA0z0b4HZ4ns0bM/4CLR3qgfnM=
Subject key identifier:   B4:C6:F6:C1:90:A6:78:F5:AA:C4:DE:BA:99:A3:06:58:FA:BA:FD:5C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B64CD5FFC5BA5CB050A133980
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/169f0e74-8a98-3f6c-9cd6-f847d1bbfdf3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36040
IP address blocks:        208.65.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:5f:fc:5b:a5:cb:05:0a:13:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9537e036-daa6-4485-a4b3-8ba86bc65d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1a:1a:8f:cf:9c:bb:25:1c:08:7a:6f:08:49:
                    9d:f0:3d:c8:84:0f:b6:fa:8c:79:25:66:02:62:da:
                    18:eb:6f:81:9b:43:fe:df:55:04:c3:64:92:bc:5c:
                    bc:ab:97:fe:17:c0:ee:a2:2a:45:9b:03:79:7a:4c:
                    4e:97:9f:a3:30:c6:7a:51:7c:37:83:a7:63:82:4f:
                    6b:cc:6b:a4:42:c7:5b:a9:a7:a6:67:fd:30:6d:0b:
                    84:40:23:4b:73:61:cd:6e:de:59:2b:1b:96:ee:b7:
                    9f:f0:df:81:e2:c1:68:43:eb:8e:39:cf:d0:17:80:
                    f5:ae:25:f2:2c:6e:1b:a7:27:11:7e:77:d6:ae:b9:
                    56:96:cf:fa:4f:18:8c:1a:9a:b2:09:06:b5:a0:68:
                    0e:51:43:46:af:41:0b:4b:80:34:4e:10:92:1b:b5:
                    1b:a8:92:e4:c2:76:3e:b2:9d:d3:83:2b:80:2f:2f:
                    e9:8b:44:01:6b:ce:2b:55:1d:5b:30:a9:96:df:29:
                    6f:33:a4:25:dc:0e:e3:07:48:61:ce:7a:74:bc:01:
                    03:45:a4:df:51:9f:68:cc:a4:16:a4:e0:f8:6d:6a:
                    b1:91:0a:ae:6d:a7:af:65:91:0c:a8:af:ac:ba:2a:
                    45:7a:ca:39:9f:3a:4f:6f:07:a5:20:84:f0:f4:d2:
                    60:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C6:F6:C1:90:A6:78:F5:AA:C4:DE:BA:99:A3:06:58:FA:BA:FD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/169f0e74-8a98-3f6c-9cd6-f847d1bbfdf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:35:d0:f9:38:11:2d:3a:f6:e4:ad:49:1e:04:e6:b0:9d:
         68:f9:84:81:dd:80:40:9e:ba:95:42:af:98:8c:02:a9:07:9d:
         2e:c9:70:74:06:d2:83:aa:6a:b9:44:e0:79:76:4b:7f:04:3f:
         77:62:d9:61:41:b8:16:09:4c:3b:0a:5d:f6:c9:4b:ec:60:e7:
         ba:fe:5a:84:80:cc:dc:c9:47:27:6d:86:77:a0:46:39:de:d4:
         5d:56:2d:c5:74:dd:24:2c:01:6a:33:80:7e:d2:53:95:ff:70:
         32:84:b4:52:ba:90:60:15:86:69:67:c4:dd:3c:84:cb:ba:6f:
         34:d9:b5:e1:b4:db:f7:6a:64:ec:72:3a:9d:f2:bc:2b:02:60:
         a4:2e:3f:5d:1e:94:b5:44:6a:12:32:c9:dc:74:aa:9d:93:9d:
         dd:a8:72:a3:90:e3:d3:a9:57:03:bb:6e:83:1d:a3:6b:0c:50:
         de:f4:bf:21:0f:85:e2:f8:86:a1:81:8a:d3:9c:e6:a7:d3:b1:
         94:53:71:d2:bd:d4:16:82:0f:8e:95:7a:4d:b3:85:8a:4e:24:
         45:6c:d5:07:4a:a0:dd:ff:26:5b:dc:37:53:71:97:fb:6d:7f:
         86:43:db:c6:b8:1e:45:f8:01:e9:90:14:cd:e2:2b:16:cf:8e:
         ee:ae:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:27 2025 by rpki-client