Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
File:                     2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa (raw, json)
Hash identifier:          dCA404zHy3C6CKYmTNkMMKUIt6dBOz3B0br0q5MyKkE=
Subject key identifier:   AB:55:3B:F3:03:E0:F0:47:9B:4E:41:48:8B:5D:78:CB:8E:CE:26:EE
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F4328584B92DCDF2730D7B9D995B0F630
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     40244
IP address blocks:        94.26.84.0/23 maxlen: 23
                          2604:7c00:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:df:27:30:d7:b9:d9:95:b0:f6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=46b3b46b-7ec1-4ffb-8fc7-642148fb13e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:c5:d3:5f:c6:a5:a0:df:f3:4f:24:dc:56:
                    2f:4e:04:cb:82:4f:d9:6f:74:5d:2a:08:52:57:cd:
                    1a:25:0b:6a:f4:79:5a:ba:5f:e4:4f:b3:b2:1d:2c:
                    d0:b9:1d:67:98:5a:85:28:63:83:5e:e3:77:a1:d2:
                    e4:78:43:47:25:e7:94:5c:4a:f6:64:90:0b:f9:08:
                    e9:44:78:85:5c:f8:df:f5:54:00:94:ad:ea:c4:5a:
                    f3:aa:2d:d6:e9:90:9c:f9:92:60:5e:6f:f2:9b:d9:
                    9d:8e:66:ac:27:36:dd:f4:7a:06:db:17:dc:75:54:
                    37:c1:d8:3b:42:67:5f:c1:de:3a:37:bd:dc:2c:95:
                    d9:d6:6c:4a:26:bb:3d:37:f8:b5:d1:54:a4:5c:a7:
                    58:af:b5:9f:13:f1:18:2e:db:9f:be:ea:4f:46:ea:
                    e3:26:41:d6:3a:e4:75:61:09:84:76:1f:2a:4c:97:
                    ee:3f:60:fb:83:5d:ac:5c:34:18:af:e4:3a:c1:0b:
                    67:6b:b9:16:a5:db:78:73:6e:80:cd:db:d4:9f:94:
                    b1:1d:c8:1e:c2:28:b1:f2:96:95:c5:36:cc:73:87:
                    67:b0:1c:d2:55:fd:6f:79:9d:1e:12:14:f9:b5:b1:
                    04:d0:5d:73:6e:de:cd:15:01:a8:2e:20:5c:dc:f3:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:55:3B:F3:03:E0:F0:47:9B:4E:41:48:8B:5D:78:CB:8E:CE:26:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.26.84.0/23
                IPv6:
                  2604:7c00:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:99:93:04:2a:3b:99:77:59:d4:9c:44:c4:78:b1:27:7f:
         19:c0:89:4c:dc:56:2a:7f:34:ae:79:11:c6:38:8e:30:e2:67:
         03:ee:3b:f4:93:d9:e2:9a:8a:a3:91:c0:ff:1b:cb:96:d0:42:
         40:5e:cb:6e:3e:84:10:12:38:b7:97:b5:a0:fe:44:53:e1:3d:
         62:43:7b:41:d0:cc:1a:99:3f:e6:5f:e8:d9:d7:0c:ac:f5:2a:
         8e:c5:36:5b:42:c8:98:67:92:88:78:b3:4f:ba:11:76:95:f6:
         ab:fd:37:fb:df:49:c1:0b:2c:1a:e5:35:97:95:df:60:71:cd:
         50:8d:83:3e:46:d0:f2:ac:3b:20:b9:76:59:2a:ee:c9:3c:55:
         87:a3:1d:d8:c9:8f:e9:1d:ff:94:67:13:c6:87:e0:17:f3:60:
         0f:37:82:2d:3e:b9:ff:0e:93:dd:83:6a:5c:7d:7c:cc:90:67:
         5e:30:a9:71:63:db:84:d7:d7:9d:af:e5:9d:9f:18:7d:3b:3e:
         40:cc:99:1f:f7:08:28:5b:05:cd:7e:64:1e:c1:93:6d:44:06:
         ef:08:9c:f3:33:6f:fb:f5:b6:3d:b8:91:19:ae:13:fd:02:90:
         0e:44:f3:ec:2e:88:ef:87:5c:41:6a:67:83:31:2a:8e:e3:de:
         5e:43:3c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:19 2025 by rpki-client