Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/500c5bf6-3565-3f91-9cf6-0035394891a6.roa
File:                     500c5bf6-3565-3f91-9cf6-0035394891a6.roa (raw, json)
Hash identifier:          XDbrHE5bTd+MInfe/rDgwwqSLFb0KbJs7J3vqhq65fI=
Subject key identifier:   09:D8:16:FD:AA:C1:1D:2E:B9:22:4F:58:70:D8:AB:39:40:79:11:1D
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584B89177FAED560FB75F36A7640
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/500c5bf6-3565-3f91-9cf6-0035394891a6.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     30823
IP address blocks:        172.86.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7f:ae:d5:60:fb:75:f3:6a:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=fd9a401d-864d-4971-a032-6d9cb1992a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:85:cb:02:51:b6:ea:15:61:42:49:33:97:
                    db:cd:67:1c:82:48:70:5f:f6:d3:29:59:de:31:75:
                    8e:d2:f0:91:37:1f:49:dc:76:df:57:8a:6a:2d:11:
                    a3:c4:a8:91:4a:15:56:f3:7a:31:c8:d1:4e:f5:b7:
                    fd:55:88:8e:92:a8:72:f5:82:db:1f:40:1e:78:52:
                    2a:4d:65:0b:08:f5:49:2b:e2:b9:08:e0:0e:c5:25:
                    da:9a:20:30:17:02:b4:45:02:78:29:c3:55:a6:f2:
                    65:02:1f:15:da:f6:2a:07:c9:1a:03:fd:fe:c2:9c:
                    bd:5f:1d:85:82:3a:d1:6f:39:2e:1f:e1:d7:03:28:
                    87:26:85:51:0a:c9:7a:67:d1:66:5a:50:bd:61:c0:
                    21:cd:da:ca:ec:49:c6:25:c8:78:2f:84:95:2b:21:
                    2b:3d:99:7b:81:a9:4c:2d:17:ee:83:d4:45:4d:6b:
                    32:9f:63:84:e3:05:46:2f:3b:2b:fb:b6:da:eb:c4:
                    c3:f3:4e:cc:51:30:78:d5:34:d8:b2:5f:22:12:16:
                    09:16:60:01:52:92:12:a9:ac:b5:93:3b:d1:31:e5:
                    92:27:10:be:00:67:e9:8e:ed:3e:05:df:1f:06:a6:
                    8c:e1:2e:b1:e7:d6:5d:10:fe:1f:c1:3d:e2:a5:50:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D8:16:FD:AA:C1:1D:2E:B9:22:4F:58:70:D8:AB:39:40:79:11:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/500c5bf6-3565-3f91-9cf6-0035394891a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:75:f2:6c:23:02:68:26:5c:ec:52:73:35:d0:2c:4a:15:cc:
         0e:d2:81:3f:94:c3:71:cd:09:f2:e6:e9:77:3b:76:86:34:72:
         dd:73:b9:03:5b:32:3b:5e:de:29:cb:58:2c:12:8c:4c:60:63:
         90:5a:9d:af:4f:a9:48:4a:55:dd:8b:ec:61:dc:09:91:8b:b0:
         14:0d:31:03:26:5d:af:eb:18:59:da:e4:60:92:dc:6d:6a:6b:
         cc:d4:c4:68:12:50:7e:32:ff:53:45:60:4e:17:e7:a4:be:4b:
         49:d2:66:92:a5:92:75:bc:e7:8f:af:53:04:c1:f7:31:7a:5d:
         63:e6:10:dc:00:ff:b3:21:e8:d0:11:3f:03:4a:71:be:e0:e3:
         ce:c9:7e:09:fa:8d:57:5b:69:72:4d:8a:c6:26:a2:22:3e:73:
         eb:ba:1a:95:c4:3a:36:3f:51:69:3c:d0:bd:49:b7:89:65:c2:
         22:e8:06:c2:97:dd:70:02:84:89:93:0c:71:87:f2:13:ee:24:
         82:bf:7e:d4:52:db:29:2a:aa:76:b9:dc:7a:62:a7:f2:e5:e7:
         ad:c3:19:b8:83:ba:8a:12:a7:9c:de:6b:a8:29:37:d6:dc:da:
         e6:f8:7e:66:05:ef:2c:6f:df:3b:f9:56:ae:a1:3a:34:96:71:
         74:88:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:03 2025 by rpki-client