Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/04448196-f240-3d49-bb9a-bf23e58b6bb1.roa
File:                     04448196-f240-3d49-bb9a-bf23e58b6bb1.roa (raw, json)
Hash identifier:          2G8uOD/KBz0OlvHLDaemVS0VcuB83kwOvKuiWK2Jb9U=
Subject key identifier:   11:5E:47:D1:EF:E5:F4:88:F7:AD:5E:79:C8:78:2B:82:52:46:CF:0A
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584B4081AA83F09FE0580E457300
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/04448196-f240-3d49-bb9a-bf23e58b6bb1.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     21559
IP address blocks:        167.94.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:aa:83:f0:9f:e0:58:0e:45:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=f4de7c9d-2422-4c9e-afc3-eb38a83897e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:a8:45:07:8b:44:bd:23:34:bb:26:87:0e:
                    25:0c:50:fd:ac:fe:25:0f:46:26:e7:c6:94:58:8f:
                    05:db:c3:9f:e5:cf:71:01:9d:63:d8:ea:ed:fe:e7:
                    eb:ef:84:05:1e:aa:b9:5a:80:2c:ff:3f:b8:6f:63:
                    e2:cc:ac:2f:a3:fc:d9:f9:01:0a:1c:1b:bc:e0:e1:
                    3e:4d:80:d3:4f:48:1b:d2:b0:d3:75:74:fc:33:61:
                    6a:42:e0:3d:7c:01:f2:fe:85:b8:32:ab:15:21:66:
                    02:2d:a4:93:4b:61:2f:de:c7:f8:9c:4e:78:5e:8d:
                    2b:82:01:3f:ca:e2:1f:ae:54:06:3b:d9:db:85:20:
                    ca:f2:48:97:df:5f:36:fa:1d:b7:a3:ca:2c:c7:91:
                    35:cf:68:04:a0:fc:43:5c:f7:61:62:e0:5c:d2:b1:
                    b0:b2:b7:a7:37:c9:0b:c7:7a:08:fc:f6:10:6c:e1:
                    ec:ad:2a:ad:c9:20:f0:30:ab:c1:34:f7:eb:06:a1:
                    56:47:24:97:c0:58:02:94:66:1e:2c:03:a2:92:cd:
                    5f:27:5d:b3:21:2d:d2:60:85:3f:b2:8e:31:47:77:
                    07:38:5b:50:3d:38:9f:3a:a9:e2:c5:77:d8:64:dd:
                    06:e2:0f:e1:0e:03:d3:cb:5f:75:00:43:c3:9d:13:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5E:47:D1:EF:E5:F4:88:F7:AD:5E:79:C8:78:2B:82:52:46:CF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/04448196-f240-3d49-bb9a-bf23e58b6bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:48:57:35:cc:31:20:82:4f:32:a2:b9:3a:ca:79:96:84:b6:
         60:d8:16:7c:5a:b3:47:31:4b:bf:02:7c:6a:d6:ad:a0:f7:15:
         08:68:05:33:59:27:35:26:34:42:27:35:03:e0:c7:72:a8:f1:
         a0:14:c2:c2:71:3f:60:c4:ab:f6:ac:b6:46:62:c8:2d:a4:ba:
         21:99:30:e8:69:2d:db:05:7c:d0:60:47:28:f8:4f:66:cb:b9:
         c6:4d:df:01:70:a4:5e:21:95:4a:24:08:c9:e0:c6:f0:cf:87:
         04:2e:1e:46:12:9b:23:27:0e:43:7b:0a:11:81:e2:f7:49:d3:
         12:1c:35:8e:d3:1c:1d:2d:35:91:4d:b9:f0:89:40:b2:f4:a0:
         87:13:8a:67:eb:a0:11:4e:a1:4a:93:b7:b4:40:af:9b:ac:dc:
         e8:22:f8:33:e6:67:33:f9:53:4e:08:3b:dd:de:27:95:e5:a9:
         48:b6:07:2f:31:aa:f8:67:91:0a:4d:e0:6a:9b:77:f8:98:e0:
         c5:c7:65:66:a0:fa:68:0b:8c:44:d7:76:c4:f9:16:b0:4f:fb:
         a7:6a:f3:a0:a9:be:d9:e5:f6:2f:f9:61:fd:cb:ef:7b:09:c4:
         30:f2:3b:71:29:f9:09:44:e5:ff:56:5e:a2:5a:28:a7:ec:2e:
         e5:8a:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:25:35 2025 by rpki-client