Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/a73ceea9-fd62-3916-9a1f-f10edb610619.roa
File:                     a73ceea9-fd62-3916-9a1f-f10edb610619.roa (raw, json)
Hash identifier:          VkLQ86E5WMQ53uC2IHiGfgc2WhHsbs31cnCpJtVuWJM=
Subject key identifier:   C5:C0:82:6E:58:81:BB:86:79:8F:6F:9F:37:C0:29:B5:C3:D8:7B:34
Certificate issuer:       /CN=bf862f27-363f-42ce-ab7e-31739b3660a0
Certificate serial:       010D0C9F4328584B79CF4400156B53DD66B63700
Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/a73ceea9-fd62-3916-9a1f-f10edb610619.roa
Signing time:             Fri 10 Oct 2025 13:38:07 +0000
ROA not before:           Fri 10 Oct 2025 13:38:07 +0000
ROA not after:            Thu 08 Jan 2026 14:38:07 +0000
asID:                     174
IP address blocks:        199.244.88.0/22 maxlen: 22
                          216.38.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:cf:44:00:15:6b:53:dd:66:b6:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0
        Validity
            Not Before: Oct 10 13:38:07 2025 GMT
            Not After : Jan  8 14:38:07 2026 GMT
        Subject: CN=83585ed4-ebc8-41bb-9cfd-e47e425f2a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:2c:9e:b2:30:40:fe:92:48:c0:65:46:ac:
                    a9:c2:2d:be:67:ad:43:fe:c3:a1:98:35:7d:85:0d:
                    16:87:34:ca:c2:a9:24:3f:20:80:bb:b3:30:d7:8f:
                    4a:04:b3:5b:c1:f9:09:91:c3:a7:91:d7:ff:20:3c:
                    ef:96:d3:e2:c6:a5:68:ec:04:a5:b5:a7:88:15:78:
                    8f:fc:2d:8b:c0:24:95:ac:23:a3:34:a2:9e:c1:23:
                    a0:13:77:4f:96:83:f3:05:97:3c:c5:39:13:1c:a3:
                    78:f6:d5:63:38:b1:3f:17:c0:ee:09:7a:ac:9f:8f:
                    74:a4:d5:bb:14:4a:67:16:e3:99:3a:32:66:c8:6b:
                    d4:02:fc:04:f9:23:92:23:f5:20:fe:7d:30:52:81:
                    e3:b4:92:6d:2a:d6:b9:c6:20:1e:89:38:d2:21:f3:
                    52:33:59:aa:7d:f7:a9:fa:cb:47:cd:7d:db:1e:ae:
                    d9:37:19:25:8e:9f:91:8b:b0:16:d2:c3:04:a6:9e:
                    04:4e:0f:24:1e:56:b8:7d:19:7f:02:17:ee:ec:51:
                    45:47:65:59:e6:4e:dd:16:ec:7d:9b:e2:b0:fc:44:
                    6e:61:01:83:9d:af:ca:fb:9b:d1:62:dd:dd:20:b7:
                    7f:29:6a:3e:a2:80:2a:1c:e5:7f:e0:3d:44:f3:fa:
                    ad:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C0:82:6E:58:81:BB:86:79:8F:6F:9F:37:C0:29:B5:C3:D8:7B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/a73ceea9-fd62-3916-9a1f-f10edb610619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl

            X509v3 Authority Key Identifier:
                keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.88.0/22
                  216.38.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4d:25:ac:6f:85:75:89:b6:92:e7:88:22:fe:a3:9d:5d:fb:
         fe:89:a4:f4:c9:a9:26:f1:8a:d7:af:c1:7a:fe:6a:9e:cc:56:
         60:44:d5:97:6f:a0:26:b6:98:22:a0:7d:88:5b:7d:5c:a5:99:
         9c:9c:2c:70:84:1d:ea:29:17:8c:c8:16:49:02:9f:6e:63:83:
         9c:5f:d4:01:35:56:d4:c8:63:bb:78:2e:31:76:32:1d:8e:67:
         90:86:e5:d0:7d:1c:fe:46:cd:15:1e:f6:4a:37:7e:cf:c7:84:
         70:fa:72:b7:b8:4e:65:56:7c:d9:94:3b:c6:25:26:23:0c:ea:
         d0:92:22:8a:f2:78:3b:a5:c1:d7:d0:59:10:3a:db:a9:fb:fe:
         05:5b:a9:04:33:58:5a:e5:9e:07:fe:a4:2f:83:04:5f:92:98:
         95:f1:af:fb:5a:3f:6a:28:c3:e3:3d:36:07:0d:c2:2b:14:5c:
         6f:b1:be:a4:11:af:a4:83:f0:44:25:cd:b7:04:2e:36:25:d9:
         25:1f:f1:5d:b9:14:6f:21:19:47:ac:0f:45:a1:b1:70:77:cc:
         b1:02:3d:4d:64:37:06:24:dd:51:32:24:6e:67:83:ae:7d:6b:
         72:71:a9:96:67:09:6f:ed:25:e4:1b:e2:a3:e2:8f:b7:cf:66:
         a7:59:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:49 2025 by rpki-client