Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
File:                     094ccd51-115c-3648-97eb-45a013b21434.roa (raw, json)
Hash identifier:          MTEHnW7x8JhdoeEFsIYODvEfpmQfX3fCtZXR7o8poSk=
Subject key identifier:   09:7D:F1:DC:66:20:30:48:D9:0B:07:F3:94:4E:14:1A:3E:04:31:CE
Certificate issuer:       /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial:       010D0C9F4328584AF95140870884A88B2D0D6380
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     39951
IP address blocks:        208.65.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:40:87:08:84:a8:8b:2d:0d:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=a762459f-18fc-4435-90e4-ba392457e4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:31:6f:0e:1b:83:bb:92:89:a0:5e:2f:91:
                    fd:f9:a9:66:29:75:99:a1:e8:51:50:4f:55:09:b6:
                    54:7f:29:9a:c0:8d:7c:ed:9b:9a:03:ab:33:db:d5:
                    93:b0:02:7a:78:33:7a:1a:5b:c8:f4:2c:00:68:7f:
                    4d:32:17:26:a6:aa:ed:28:df:1d:73:3a:ac:59:ee:
                    61:3b:31:ef:15:a8:2b:d7:2f:1a:96:15:e8:0c:74:
                    b8:7b:0b:cb:6b:be:ef:a3:a7:5b:4a:bd:de:12:e6:
                    2d:cb:67:7a:9f:c9:cc:b7:b1:89:f0:9b:bc:89:20:
                    82:41:79:48:7a:79:fb:d6:9e:f8:30:fd:18:52:2e:
                    83:03:09:90:81:a1:f7:2a:bf:94:29:10:e6:91:ce:
                    91:a9:0b:e4:de:88:d7:c9:b6:d7:16:44:68:18:46:
                    2d:a0:28:46:19:11:21:cc:fd:bb:04:ee:9e:f8:26:
                    40:c3:1f:98:93:ca:11:01:0f:6b:27:a9:91:f8:ff:
                    1d:dd:44:99:2b:f6:f7:24:63:c0:18:35:45:ba:9f:
                    53:83:10:f7:21:ed:ae:f5:06:9c:d1:7d:70:ca:97:
                    96:8b:e1:18:13:12:62:2c:34:c0:55:aa:25:3c:10:
                    70:5a:db:63:0f:ef:d0:d5:e1:55:12:df:92:04:25:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7D:F1:DC:66:20:30:48:D9:0B:07:F3:94:4E:14:1A:3E:04:31:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl

            X509v3 Authority Key Identifier:
                keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:45:62:42:05:db:52:1e:c3:54:92:44:28:56:29:88:78:
         c7:cb:a5:09:c5:d0:bb:d9:90:33:77:b6:fc:6b:f0:6e:40:53:
         6f:e3:96:84:3a:2e:76:df:aa:29:70:2e:70:31:1b:25:f0:c7:
         6d:1c:b7:10:42:df:6b:26:29:aa:83:f4:4c:f5:85:27:80:e4:
         ec:aa:c6:d4:fc:c2:67:e9:c1:5e:86:a1:c7:3d:57:bb:19:7a:
         9e:4f:96:c2:40:5f:f3:c6:ec:14:f1:09:54:b2:22:27:a4:3e:
         d6:a3:08:05:27:98:04:df:75:04:9c:ff:c0:13:fa:e4:d0:17:
         70:93:fb:60:76:51:ba:d9:b7:2b:6c:8c:6e:36:12:98:85:c5:
         40:6e:63:60:07:e6:dd:5a:df:7d:9e:14:07:48:c2:15:b2:82:
         7f:e7:b5:fa:80:c1:9e:69:8b:cc:04:aa:fd:5d:51:a6:6d:e9:
         09:ae:26:2a:aa:58:f4:9a:45:1f:ea:19:d6:d9:2e:d1:74:0a:
         0b:ed:11:df:d3:15:c1:b9:9e:bc:e5:ce:ff:2e:fe:6f:df:20:
         27:65:27:0b:66:58:13:24:86:3a:d5:3b:51:d3:29:7f:c7:9b:
         b4:8f:26:6d:8e:84:fe:39:2e:c9:51:8c:2b:31:b8:14:2b:d5:
         40:ad:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:39:54 2025 by rpki-client