Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85b10f94-e11c-36a4-b656-bac8c6c05f7f.roa
File:                     85b10f94-e11c-36a4-b656-bac8c6c05f7f.roa (raw, json)
Hash identifier:          KRMjEM0cMaaAq2JNcs1edWEIH61tWZ8r/PoXgFXHDhk=
Subject key identifier:   85:61:9B:F5:95:DC:B9:EF:46:4F:C8:E4:41:C8:CB:47:C7:55:85:31
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584B23F9C9B708DACE768B26C910
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85b10f94-e11c-36a4-b656-bac8c6c05f7f.roa
Signing time:             Tue 09 Sep 2025 19:44:17 +0000
ROA not before:           Tue 09 Sep 2025 19:44:17 +0000
ROA not after:            Mon 08 Dec 2025 20:44:17 +0000
asID:                     577
IP address blocks:        47.54.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:f9:c9:b7:08:da:ce:76:8b:26:c9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 19:44:17 2025 GMT
            Not After : Dec  8 20:44:17 2025 GMT
        Subject: CN=a916a106-0714-4222-ba94-afbee8d175d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:95:bf:0a:2e:42:40:9d:e1:5a:d3:a9:d1:20:
                    0f:10:83:5d:ed:cf:27:26:89:ad:d3:ad:84:53:a5:
                    81:49:d9:f6:9a:54:34:21:27:f2:2e:af:00:b0:d3:
                    53:1e:8d:aa:ed:1f:7a:f7:2c:48:7f:a4:c8:00:b8:
                    9a:a4:84:b8:5c:1b:8a:e9:d1:ab:93:19:d6:b2:a9:
                    54:0c:a1:c6:31:8a:4c:39:87:97:a3:b8:10:f7:31:
                    eb:98:f5:39:0d:9c:06:b3:0e:8b:63:c8:17:93:3c:
                    66:33:b2:c5:02:ca:46:31:cf:8c:b2:a8:1c:c8:d0:
                    24:4a:cf:a6:6c:7f:c9:66:1f:2c:a7:83:06:6b:e4:
                    85:2c:49:8b:66:c1:7e:59:90:54:8d:c2:cc:78:4f:
                    cb:e7:af:7e:f0:55:70:35:26:ea:b6:bb:72:a3:af:
                    91:4d:a5:aa:93:30:19:bc:40:cd:0e:b9:3a:23:82:
                    e8:9d:82:2d:50:ac:4d:6a:49:00:6b:71:35:8a:cc:
                    17:1a:8b:75:e9:7e:a3:f3:43:a7:67:27:64:91:85:
                    ff:88:f3:e6:a0:ca:76:18:a0:a3:1d:5b:55:b4:27:
                    43:2c:2e:cd:2d:c5:cf:20:e8:15:18:d4:6e:55:99:
                    50:2d:2c:f0:7e:50:62:4e:79:b3:f8:c9:57:97:68:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:61:9B:F5:95:DC:B9:EF:46:4F:C8:E4:41:C8:CB:47:C7:55:85:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85b10f94-e11c-36a4-b656-bac8c6c05f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:73:e9:df:90:1d:e4:78:56:d6:5d:00:f6:0f:42:bd:07:6c:
         7d:49:12:5b:50:29:d1:b5:fd:1f:d6:ca:b5:4d:91:bb:d9:eb:
         8b:6d:be:48:6a:d8:f8:37:14:70:41:35:f2:29:ab:e4:b0:d6:
         8c:3d:87:3a:7c:f1:fa:99:7b:7f:b6:36:2b:f9:1f:07:33:36:
         1f:e0:83:00:d5:a8:9f:31:ab:1e:7a:a0:ed:12:0c:80:27:be:
         4f:f3:51:1b:de:c6:12:a0:e5:c4:d8:f4:cd:e4:d4:71:59:c1:
         b2:89:e6:4a:92:4c:dc:f4:a1:8a:e7:0f:4d:4e:e8:6b:99:b5:
         99:6d:f7:ae:a1:63:3e:94:f5:58:93:f2:c2:ce:7b:33:77:44:
         91:0e:6d:01:36:8b:45:d1:e8:3c:78:c2:50:ab:db:fb:2b:fa:
         93:95:36:ea:4f:e9:3e:ad:c7:b0:29:5d:27:e3:71:ee:43:98:
         51:b8:f8:15:aa:b8:fd:85:83:da:7a:2c:31:47:07:97:8a:92:
         87:87:31:9f:f7:f4:01:e8:91:4c:b2:30:b9:72:85:b8:76:92:
         a0:5a:09:d5:dc:44:c1:6f:d2:e7:d4:83:d2:9d:6d:ed:3d:1f:
         5c:a9:3a:c5:51:57:28:a8:51:56:3b:f4:3e:42:0c:f7:cc:9e:
         5e:19:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:47:31 2025 by rpki-client