Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa
File:                     e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa (raw, json)
Hash identifier:          TjYcEV40ctvmBKhRRxC0x3Cm4siyxSd09cdYFbasQgw=
Subject key identifier:   A3:A8:5A:8D:CC:9B:DB:FF:27:82:F1:77:23:00:AD:A2:C1:AD:E0:07
Certificate issuer:       /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
Certificate serial:       010D0C9F4328584B715CB12468852B343CF8CC00
Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     398203
IP address blocks:        142.202.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b1:24:68:85:2b:34:3c:f8:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=7827b9ae-5961-49a0-9d16-6df65972d13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:3f:63:80:b2:70:3d:b5:4a:30:2d:07:96:
                    a9:09:e7:de:78:75:60:db:8a:ab:4a:3f:64:a6:e0:
                    94:4d:e8:af:d4:38:72:49:fd:3f:b8:01:da:aa:17:
                    98:5a:62:86:c5:b0:30:04:38:d1:cd:8f:e9:c6:ef:
                    23:b9:9d:4f:0b:7c:1e:1d:d6:7a:70:c8:03:9b:98:
                    8e:08:66:43:45:b1:88:36:4d:e1:9d:84:0d:5b:95:
                    8a:14:4c:8c:e9:6f:81:25:eb:7d:30:7a:9d:8c:6b:
                    e3:54:60:51:7b:d8:cc:c2:b0:a8:5a:17:61:78:9c:
                    0d:9f:5a:45:c1:22:8f:b8:3a:53:67:63:41:9c:a2:
                    4f:96:88:a4:80:eb:6f:89:4f:d8:fe:ea:0e:41:38:
                    81:fe:79:2b:15:37:d6:b2:0d:c3:1b:c4:50:59:93:
                    b2:c3:1f:be:2c:dc:f7:15:46:33:dc:d4:46:4e:9b:
                    4e:b2:52:1e:3c:f9:06:63:e9:b5:f5:5d:41:35:bc:
                    74:99:c4:34:c5:ee:73:b8:14:ea:da:5e:d0:45:e1:
                    85:5d:64:04:17:c0:bd:48:1c:2e:db:50:bb:6a:21:
                    19:46:ca:83:44:8e:c7:5c:a5:ac:95:42:3f:19:2f:
                    41:0b:2d:ef:04:7a:3c:ca:bd:1e:7b:4b:42:63:f3:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A8:5A:8D:CC:9B:DB:FF:27:82:F1:77:23:00:AD:A2:C1:AD:E0:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ef:98:7e:bc:df:40:ea:b7:2a:bc:18:07:a9:42:9b:44:ad:
         ab:0f:21:88:bb:33:9b:83:22:73:4b:2b:ba:aa:50:1a:a5:f1:
         34:44:f2:37:22:86:60:2a:14:b7:69:ed:f5:d3:ae:0d:e3:d3:
         72:80:cb:62:ae:05:9c:57:a3:32:06:80:ba:54:49:ea:1d:1a:
         38:06:bb:5d:34:5e:1a:95:7c:3d:f1:e3:d7:5d:ee:7d:2a:fa:
         99:7d:ac:67:32:16:fd:c8:85:bb:e1:d1:9c:b0:01:da:90:df:
         67:8e:a6:de:2b:87:6d:1f:09:47:e0:83:7b:c8:ca:ce:01:6a:
         02:81:63:b4:e7:e1:7a:5a:4c:3d:e6:2e:a9:88:ba:cf:c5:b8:
         47:dd:7c:59:d6:63:16:9b:64:21:35:b0:1b:57:6f:db:a2:91:
         9e:e3:43:92:de:b5:76:c8:ef:a3:2c:36:46:52:e3:2b:f8:ca:
         ad:3a:fb:84:9f:54:35:d8:dc:b9:7c:1a:0f:6a:5e:eb:d5:3c:
         70:8f:f1:43:fb:1b:94:e5:56:41:ca:8d:f3:86:35:58:7b:9b:
         1f:a6:56:90:08:8e:51:18:39:dc:98:39:9d:54:bf:28:9a:8f:
         8c:da:80:a1:3d:48:77:d5:ee:33:05:76:90:e0:6a:86:e0:44:
         6f:b1:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:52:15 2025 by rpki-client