Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa
File:                     1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa (raw, json)
Hash identifier:          xsilEUG5iCij2y4JL6edrxcU7TmgxV2TPgLLxSAhSKw=
Subject key identifier:   83:F9:00:AD:70:60:59:3C:C8:0A:4C:8E:BE:5A:6C:22:3C:43:8A:D7
Certificate issuer:       /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial:       010D0C9F4328584B5DD1F1BE9210F5A661DC6980
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     8075
IP address blocks:        208.64.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:f1:be:92:10:f5:a6:61:dc:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=01af9ffa-8230-45e3-8a19-b722295efc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:da:28:22:d5:64:8a:dc:bc:64:e6:0e:ce:
                    7b:b8:4d:fb:b9:fb:92:70:92:56:e7:a6:00:8f:b4:
                    95:c2:54:03:40:38:0c:9e:34:13:76:b9:d9:61:1e:
                    85:09:52:f8:af:bc:59:77:82:c1:10:8d:1c:78:1f:
                    6c:c8:bc:9a:32:b2:d8:29:ef:12:0e:43:ee:47:c0:
                    85:fb:21:eb:b9:c5:18:5a:12:04:fa:06:f3:29:3e:
                    50:f8:7e:27:87:de:db:c8:60:15:f1:53:72:bc:a5:
                    da:41:94:e9:63:bd:cc:bd:3e:23:58:1e:55:7f:a9:
                    1b:2f:4b:5b:79:1b:b0:ea:a2:c5:b8:06:84:73:9c:
                    02:07:b4:9e:70:df:7e:db:ed:86:3d:4f:51:f1:37:
                    64:9d:b2:ba:9b:df:0c:3c:b7:1b:d6:3e:19:ef:f7:
                    f2:f2:46:f7:d2:42:eb:09:f8:fd:a9:84:f2:92:83:
                    f7:5d:e6:57:e2:15:ff:55:c8:c5:cb:e0:01:f0:8c:
                    c9:5c:c7:bf:38:cf:3c:93:95:69:86:89:fc:48:a6:
                    06:a6:aa:be:f1:1c:68:90:ac:7b:a8:d2:68:96:0e:
                    42:94:a4:9c:c2:60:fc:ca:62:46:9e:8d:02:e2:ae:
                    06:18:ec:a5:20:60:4b:21:9b:b3:5d:1f:c5:98:90:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F9:00:AD:70:60:59:3C:C8:0A:4C:8E:BE:5A:6C:22:3C:43:8A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl

            X509v3 Authority Key Identifier:
                keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:75:b9:0c:7b:2a:57:42:6f:bd:19:b3:f9:e8:08:a7:98:37:
         fa:dd:e5:42:c7:bc:3c:67:d8:e4:65:fa:1b:c7:cf:36:16:29:
         0d:d5:f2:56:9f:64:90:fd:cf:d4:26:ea:f0:ae:c2:c9:00:12:
         d9:91:70:1c:c0:5d:aa:c4:43:5d:b9:c2:f6:76:7b:3a:68:4c:
         f8:d1:32:13:1d:25:c8:90:f1:65:8e:1a:74:42:27:11:50:1b:
         26:e9:99:96:1e:e5:3d:4d:e2:0f:9e:9b:3f:8e:07:d8:53:a4:
         f7:e5:0d:64:17:d3:83:20:93:52:66:31:ca:17:5e:4c:3b:f5:
         aa:8f:37:5f:17:35:1c:39:e3:e6:7c:0f:31:73:d6:2e:2b:d8:
         5f:19:54:2c:79:a8:0d:bd:44:cf:8c:58:42:ec:9e:03:6b:1c:
         2f:30:b0:e7:fb:da:1b:1d:e7:e7:26:36:ae:ce:cc:f6:26:1f:
         d5:79:f8:fe:6d:b6:b4:5e:d5:54:3f:e3:0b:08:5c:b1:7a:6d:
         57:bb:bf:ae:94:75:03:0e:02:44:d0:69:7e:2f:4f:01:6e:96:
         d4:3f:95:26:54:0c:0f:88:4e:a1:cf:c6:a3:9b:56:07:b0:e5:
         79:0b:aa:2f:fa:b2:49:ea:8c:d5:5b:8d:08:47:3e:0d:84:ba:
         eb:cd:22:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:18 2025 by rpki-client