Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa
File:                     86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa (raw, json)
Hash identifier:          /OpDrkRpKsqxlJIybnCrrcb8hmTWZbmG1nU18xdrFY8=
Subject key identifier:   F7:C4:D3:E9:9D:9F:B3:D7:F7:C3:EB:F0:3F:14:41:03:5D:4C:00:31
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584B25FC3EDC0ADDBE3407226400
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     46450
IP address blocks:        199.34.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3e:dc:0a:dd:be:34:07:22:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=bf5b3330-561e-4884-a232-8f211368c729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:8d:12:42:83:b9:bc:99:be:fb:6a:24:f6:
                    a8:09:d5:d6:bf:4d:13:63:ce:50:7a:e5:63:08:11:
                    9d:f7:4c:9b:52:82:df:57:1c:8a:c4:fa:d2:22:d1:
                    46:16:dc:fd:48:43:d6:82:31:44:0f:f0:20:ef:e2:
                    89:cc:01:c7:41:30:8a:fc:ba:5e:7c:36:69:f6:dd:
                    6f:bf:27:6b:e2:9b:d4:e9:c6:2c:93:cc:30:e6:d3:
                    84:1d:78:2f:dd:a0:73:0c:1c:75:b5:44:4e:cd:66:
                    b2:73:29:17:57:64:4f:d5:7c:54:ba:6c:7a:61:01:
                    45:ac:5c:13:a4:56:d7:23:64:7b:fb:be:4c:54:87:
                    c8:42:eb:9d:dd:21:4d:bd:a6:0e:17:d7:4a:9d:00:
                    81:75:d4:be:b6:49:bd:45:a7:30:87:5a:33:62:b0:
                    5c:b9:69:f2:f0:40:3d:cd:8e:a8:e1:6d:55:cf:12:
                    0d:a7:5f:e9:7f:a1:22:35:a1:30:c3:db:f3:c1:2c:
                    3e:7c:ab:99:fd:05:30:8b:f8:10:ec:f5:e3:db:d5:
                    ab:41:0a:27:e4:c2:dd:6e:4b:3e:88:73:ca:39:c8:
                    79:c5:85:6f:db:f5:b0:b0:ad:28:d7:ab:f7:c7:16:
                    53:ee:c5:17:0a:48:a9:f4:03:91:89:86:48:06:b5:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C4:D3:E9:9D:9F:B3:D7:F7:C3:EB:F0:3F:14:41:03:5D:4C:00:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:06:7e:38:f1:37:55:ea:cc:f8:0b:e4:6b:14:73:1b:95:
         e9:40:41:b9:c2:51:13:83:59:6a:b2:68:58:22:43:6a:91:02:
         5d:d0:d7:e9:3e:e6:a3:ab:22:f0:d9:23:f0:88:7f:51:46:48:
         4c:95:87:a7:35:ee:45:e8:96:7c:dd:05:ef:54:e9:2e:e7:59:
         bc:15:8a:77:5a:11:e2:39:c0:97:3b:65:0e:1c:91:56:6b:7d:
         85:9a:80:04:83:fb:5e:5e:c1:d3:f3:6b:34:ee:ff:0c:c6:1a:
         6a:ec:04:48:d9:97:96:36:a9:db:af:54:fa:03:14:31:5f:f2:
         f3:d3:b4:ca:39:ec:25:32:9b:cd:f8:65:2e:d7:28:96:17:c5:
         56:2b:70:2b:49:d5:5d:9d:6b:41:1e:cb:a5:1c:8f:b0:a7:2a:
         6d:6f:62:62:5d:d3:72:a3:81:27:34:72:59:2e:20:6e:93:52:
         08:0b:df:cb:f1:7c:47:5f:cd:54:b2:e4:77:7c:d8:59:33:51:
         87:91:4b:9d:6a:b4:60:6d:be:78:3c:c6:98:b2:75:aa:ac:d2:
         a8:36:a0:12:2f:75:ab:0f:f2:b1:34:4f:82:0f:fe:45:f0:cb:
         3f:3c:c1:2d:86:ac:e8:f0:5d:84:ca:90:75:85:3a:4c:cf:8f:
         6a:c8:e4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:12 2025 by rpki-client