Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
File:                     8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa (raw, json)
Hash identifier:          kOhaFieg6egM2e2Kn9VmyDjyBtNjHXo0jkgOjZmqsIU=
Subject key identifier:   D6:7E:F8:95:25:E3:A5:71:AD:78:E9:B4:68:56:D1:C5:ED:25:61:FD
Certificate issuer:       /CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
Certificate serial:       010D0C9F4328584B8EACCD46B9A8E6DD06475F80
Authority key identifier: 88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     397833
IP address blocks:        185.77.142.0/24 maxlen: 24
                          192.95.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:cd:46:b9:a8:e6:dd:06:47:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=913b7f96-eb81-441e-9e37-14f144169023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:a8:ae:83:b2:f6:47:7b:ca:bf:7c:db:2f:
                    8c:bf:c1:64:dc:06:cd:39:19:2c:3d:4c:20:3a:46:
                    9e:dc:99:89:f5:1c:88:ee:9e:1f:0b:a3:3c:34:2c:
                    cd:5f:1c:6c:fa:58:0c:27:89:25:a6:83:94:6c:56:
                    0c:76:ef:80:5b:02:3d:39:87:13:f1:94:e6:69:f6:
                    9c:46:97:76:eb:3f:9a:d7:4f:e1:f1:a4:64:06:61:
                    c7:76:e7:fb:74:7b:c8:66:d4:bf:ad:55:81:c5:4a:
                    44:d6:15:45:f2:69:bf:f5:89:f4:bb:cc:a7:16:41:
                    57:4e:f9:0b:ad:f8:77:3d:c4:16:1a:8e:54:ff:85:
                    c6:f4:ac:0c:ba:99:08:48:ee:fb:07:1f:0d:48:f1:
                    ed:3a:7b:33:e7:e7:d0:19:dc:5b:cc:c6:b0:c2:fa:
                    56:fd:18:0e:57:ea:0c:52:b1:7c:b1:b6:fc:52:61:
                    dd:c4:4e:d6:1f:d5:b2:2f:c8:59:58:dc:0d:f6:76:
                    33:97:8e:0f:80:3b:df:e8:bd:83:94:55:af:23:5d:
                    37:fd:72:06:a6:17:84:7f:c0:be:b9:9a:4e:44:7b:
                    35:fd:c3:57:0f:53:f8:7a:f8:47:6c:8f:5f:f3:0a:
                    59:85:69:38:40:73:71:2e:35:14:19:c4:c1:24:b3:
                    1d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:F8:95:25:E3:A5:71:AD:78:E9:B4:68:56:D1:C5:ED:25:61:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl

            X509v3 Authority Key Identifier:
                keyid:88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.142.0/24
                  192.95.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a7:59:62:d6:97:a7:53:a4:b4:e4:5a:92:e6:31:17:91:88:
         0b:95:91:be:82:95:ee:b4:d9:71:92:65:af:b1:0d:6f:d9:1c:
         0b:b6:f3:07:7a:af:e1:77:ad:27:0e:17:69:a6:04:02:99:b4:
         3d:2f:b5:0a:76:23:02:19:26:63:8e:e9:91:9b:ca:cd:5d:0a:
         9f:f4:2c:ba:b8:47:b4:fb:17:e0:c7:c2:9a:c9:84:92:cd:ee:
         f1:53:74:7d:82:b5:f8:e3:69:2a:f5:1a:ef:21:95:5b:89:29:
         19:a2:42:a3:d8:ed:05:87:af:81:9c:0a:cb:7f:d4:81:1f:9b:
         71:28:3d:59:78:84:67:7f:a6:18:b7:3b:b9:cc:5d:77:45:e8:
         85:79:3e:1a:7d:35:99:7b:b2:37:5d:80:51:c9:b3:84:21:ee:
         8c:4a:3d:6a:f0:91:96:c8:ea:10:fe:3b:59:d1:9a:30:f0:1d:
         d5:4d:b0:8e:88:97:6c:97:db:3f:4a:96:b0:f0:5b:7e:bc:5a:
         5d:ed:69:de:bc:ab:2f:50:d5:49:93:45:b8:d7:27:d0:bc:27:
         e7:ac:3a:9c:3f:c0:14:6e:7b:04:88:bc:b3:d5:ff:38:27:93:
         be:cd:ca:e5:1a:50:eb:3f:5d:73:3a:96:16:e7:6e:89:8e:f4:
         f2:a0:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:40:16 2025 by rpki-client