Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa
File:                     f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa (raw, json)
Hash identifier:          uPlE4lhmUtM9ZArdpxDZYotmt35qNIHQNIxJPsfTqWI=
Subject key identifier:   09:1A:54:34:39:7B:7E:D6:F7:72:29:C8:F9:46:ED:00:08:C2:4E:97
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B64CD51A063DDAC5C8BF40900
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36040
IP address blocks:        208.65.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:51:a0:63:dd:ac:5c:8b:f4:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0c2c8956-5b7d-4c80-ab8d-8af037d56932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:3b:72:db:ec:45:db:43:eb:7d:27:02:0d:
                    f1:90:c5:e7:f3:24:42:84:b3:0c:e6:aa:6e:09:d9:
                    17:1f:8a:df:04:30:94:de:b5:97:d5:31:cc:18:18:
                    63:f4:23:91:c6:05:7f:67:4e:74:10:36:7b:b8:64:
                    63:fc:26:70:46:47:f6:93:ed:b6:8e:d3:69:f0:7a:
                    89:fd:bd:4d:9e:42:aa:d7:30:af:8d:5d:7a:28:bd:
                    57:96:54:84:db:e5:4d:92:de:50:7e:e7:6d:26:c0:
                    ef:4a:5d:68:0b:2f:6a:41:71:83:8a:00:04:e1:68:
                    00:20:ce:e4:85:b0:36:7a:55:32:3f:b1:41:63:2b:
                    1f:0d:d8:09:98:71:0a:3d:20:a8:18:55:47:64:e2:
                    c1:b1:ae:0b:4a:0b:94:9b:f9:83:6d:86:0b:c8:93:
                    05:62:ad:da:ea:d0:f4:f6:bf:dd:32:d9:1f:4e:43:
                    da:65:ce:23:73:37:15:a1:ea:3d:0e:0e:99:83:03:
                    13:bc:7c:9e:bd:f9:3e:d8:48:fe:ef:09:65:29:db:
                    27:b3:20:31:5e:5c:7b:36:df:9f:41:1f:1a:f0:10:
                    80:1d:28:95:2c:42:bc:cd:95:98:36:0d:d9:b5:31:
                    a2:43:a3:8d:6f:ac:b3:8d:ce:69:73:1d:cd:89:2b:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:54:34:39:7B:7E:D6:F7:72:29:C8:F9:46:ED:00:08:C2:4E:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9d:3f:e9:d0:3b:51:f9:84:2f:66:79:eb:fd:f4:0f:76:fa:
         7a:19:41:4d:4f:75:0d:78:13:ee:52:7d:6f:6b:b4:e1:ca:80:
         18:c9:43:93:e2:d7:c2:a0:a2:3e:05:58:aa:f8:c4:bc:47:07:
         54:8c:08:f4:80:f7:22:56:41:d1:e8:d3:5d:2c:86:8b:91:60:
         1b:d5:47:50:35:70:c5:dc:37:48:ca:12:89:a6:be:4b:7d:91:
         a3:0d:22:ea:b9:2f:96:25:f3:01:9d:bc:0f:44:37:d6:2d:7a:
         a3:cf:32:ea:62:19:ee:bb:b3:7e:de:ea:02:e5:57:8b:2b:14:
         29:de:49:02:27:b6:db:97:18:e1:1f:3c:c6:93:97:c4:89:73:
         57:3e:72:ab:b8:2c:88:be:0f:f3:8c:bd:a7:c4:42:97:1e:3f:
         f4:1b:cb:a9:49:32:72:61:59:9d:16:5e:dc:df:97:c8:76:78:
         f6:10:45:ad:9f:21:a9:8e:5f:6b:98:2c:41:6f:d2:70:98:ef:
         7f:e9:55:bb:9c:22:0e:93:e2:7e:c1:b8:4a:16:9b:48:80:de:
         8e:c1:d7:77:88:90:14:5e:c0:35:3e:11:8e:fd:d3:b4:4a:16:
         77:03:1c:46:b5:8d:7d:d8:f5:bf:c1:02:ea:bb:59:90:e0:21:
         06:9a:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:35 2025 by rpki-client