Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa
File:                     b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa (raw, json)
Hash identifier:          DYXguAL3QWcjjpUpgpDoqgrlGQ++Jq4IExsCTQ/j9HQ=
Subject key identifier:   F4:8E:34:AB:95:31:AA:90:66:16:B8:63:40:33:CA:A5:E7:C4:15:A2
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584B438BB36485B9709DC3602FB0
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa
Signing time:             Sun 21 Sep 2025 03:08:20 +0000
ROA not before:           Sun 21 Sep 2025 03:08:20 +0000
ROA not after:            Sat 20 Dec 2025 04:08:20 +0000
asID:                     10794
IP address blocks:        199.43.54.0/23 maxlen: 23
                          199.43.54.0/24 maxlen: 24
                          199.43.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:8b:b3:64:85:b9:70:9d:c3:60:2f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: Sep 21 03:08:20 2025 GMT
            Not After : Dec 20 04:08:20 2025 GMT
        Subject: CN=7c23a979-9b11-4310-bf4e-15d073a8ff06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:e1:46:d8:90:32:50:3f:0b:f5:a3:8a:44:
                    09:e0:12:31:89:80:b1:4f:bd:e1:fd:cd:f6:dc:9a:
                    37:89:51:90:2d:98:f6:97:6f:ec:ce:9c:22:c8:8b:
                    35:f6:59:18:41:98:99:1b:fd:7c:45:7f:97:53:37:
                    c2:3b:a2:af:ad:60:53:f8:cb:9a:a0:ca:50:e6:c4:
                    ef:8b:70:91:a3:89:82:ed:82:62:25:82:30:a3:16:
                    85:89:00:c6:2c:d2:3c:40:9b:69:8a:14:0d:9e:be:
                    65:d9:c7:77:2c:04:8e:a4:e5:f9:f5:cc:06:35:f4:
                    69:16:0d:41:45:96:6f:b5:5d:21:db:ba:70:0e:a6:
                    57:75:d5:f9:6b:14:fe:f7:0e:ae:82:d5:c1:b7:26:
                    20:79:5b:92:c6:cb:22:2d:7b:cf:8b:3d:86:29:2a:
                    5c:45:e4:75:19:92:84:d6:7e:7e:41:45:b0:65:86:
                    55:58:43:ae:65:0f:b5:62:f9:4d:55:eb:b0:a5:d9:
                    90:71:39:d6:52:73:ce:c9:88:75:d5:9f:70:3d:2f:
                    73:a5:8b:0c:1d:97:5a:5e:68:17:94:0f:7e:4b:98:
                    e4:97:4f:f1:d3:76:7a:b0:1c:12:05:35:17:59:86:
                    d3:55:45:8a:ce:d7:a7:1f:a3:69:0d:35:48:0d:2d:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8E:34:AB:95:31:AA:90:66:16:B8:63:40:33:CA:A5:E7:C4:15:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/b5552a3b-6cc5-3103-b4e9-9b5a55e5d91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:3a:2c:a0:ac:e4:63:db:e0:c3:5c:a3:92:52:43:0b:e1:
         d8:12:1d:c3:b8:8d:48:5d:27:d4:3a:f7:52:75:2d:d5:7c:20:
         1b:40:32:09:03:12:94:a8:10:f5:da:26:e8:45:1d:ed:80:51:
         9d:57:c9:28:85:d8:c8:ce:eb:7e:ac:76:8b:70:9e:ac:c4:ee:
         74:54:3c:f8:9f:19:8e:3d:b8:a0:ec:92:9d:b5:8d:da:09:89:
         17:68:66:06:d2:fb:a4:5d:f8:8d:05:9d:cb:08:ee:ce:38:1c:
         d4:1f:3e:16:b4:8a:02:98:4c:33:1c:28:cb:cd:af:58:b2:5c:
         df:f6:2c:70:34:99:b3:6b:74:2c:a0:92:9d:42:e2:18:fa:1a:
         06:f2:f6:a9:b3:19:e4:e4:5f:45:c2:62:76:44:45:22:67:8c:
         ca:f2:01:0a:cd:ed:d8:93:76:b5:e4:96:0c:bf:6c:49:76:60:
         3f:61:2d:aa:ec:35:ca:0e:ff:e5:a1:3a:fb:28:87:02:57:ec:
         45:90:4b:5f:d8:d1:cf:bf:b2:b1:78:b0:55:26:7d:3b:92:cd:
         22:cb:74:61:ef:91:05:a7:f7:10:79:0e:12:ff:b4:15:1b:1e:
         21:07:6b:f1:6b:3b:60:fd:8a:d6:aa:f9:a6:c7:fb:27:67:4c:
         8b:71:e0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:17 2025 by rpki-client