Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6ef8eea0-7b46-3e5f-a308-804da7f9900f.roa
File:                     6ef8eea0-7b46-3e5f-a308-804da7f9900f.roa (raw, json)
Hash identifier:          cFzHzcpFKAwcgkqZm+tYrFD/wzzgmGSCcjSOy5UzNw8=
Subject key identifier:   F0:99:CE:C5:1A:3D:75:D1:67:24:F2:2C:61:6D:2B:84:A2:8F:1F:E7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B1806C16062F66F23F909D380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6ef8eea0-7b46-3e5f-a308-804da7f9900f.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     6939
IP address blocks:        205.186.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c1:60:62:f6:6f:23:f9:09:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=f5078ee9-e419-402a-93a7-ef54aaecec0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:99:b8:9d:47:86:38:d7:e8:fe:05:d9:f9:
                    af:c1:c2:29:53:d2:53:b7:50:1e:76:bc:db:14:55:
                    e5:32:85:29:c1:eb:96:ad:48:bd:b7:87:b4:1d:15:
                    11:ba:2c:70:9d:14:a9:5e:f2:e8:3e:95:b3:50:6f:
                    f4:b5:3f:82:4b:3c:c4:77:e1:44:3a:bd:08:21:dd:
                    b6:be:33:20:20:32:ce:88:33:99:d1:b1:33:9f:42:
                    1e:e5:38:72:7f:20:1f:c6:ba:a0:d3:9a:54:1f:72:
                    c5:01:a9:b2:ca:02:7d:2c:d2:4f:97:e3:0b:b3:0a:
                    5e:aa:4e:67:12:33:6f:84:37:7f:83:6f:b0:0d:3e:
                    93:21:28:63:26:37:ce:01:9d:7f:2d:09:bc:c7:c0:
                    6f:45:2f:15:ae:e9:00:b7:b2:89:0c:69:98:67:97:
                    d7:67:2b:42:a2:61:1e:57:1c:16:73:35:7f:74:b4:
                    34:06:a1:6a:a9:7f:26:66:52:c1:3a:7a:0f:9d:fb:
                    b5:45:31:e4:bb:aa:19:15:ec:cb:5a:50:fd:81:f8:
                    48:b7:ba:92:6f:ba:5f:5b:26:4c:ce:21:a9:86:3d:
                    98:3c:c9:57:45:7b:da:66:61:e6:4d:12:f8:d1:f5:
                    6d:31:08:a4:b5:b6:14:e5:04:70:07:67:79:3e:e6:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:99:CE:C5:1A:3D:75:D1:67:24:F2:2C:61:6D:2B:84:A2:8F:1F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6ef8eea0-7b46-3e5f-a308-804da7f9900f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:68:77:07:c7:b6:8a:35:69:21:9f:3e:10:4a:47:7c:fb:41:
         a8:50:3e:7a:b4:53:ea:87:c9:7e:35:bc:22:1b:64:ef:72:27:
         43:a8:6d:2a:22:71:a9:d3:7f:50:3d:5c:cf:ae:1e:1c:97:a8:
         9b:97:11:b9:87:40:50:b1:22:31:03:32:d2:db:55:da:6c:32:
         7f:2c:42:35:fb:3e:34:51:10:3c:97:f3:5e:f7:c2:71:56:8c:
         50:6b:2c:45:1a:65:0f:ef:96:67:0e:64:3e:56:96:bd:c2:33:
         ba:32:bc:03:41:84:ae:7d:26:07:10:67:1c:fe:16:f2:d0:c6:
         a6:57:b4:64:ab:f7:20:06:95:19:fc:40:bc:f0:71:4f:4f:15:
         be:a9:89:e1:65:b9:8e:c7:71:e7:9a:40:2e:3a:1c:3a:54:a2:
         37:1f:3b:f2:64:d4:6f:88:e8:96:7c:57:9b:72:27:e9:b7:7c:
         1a:1e:34:02:98:26:4a:f2:ac:67:58:7a:7a:06:ba:81:ea:90:
         1e:a6:04:f1:30:80:c8:9b:51:ac:6b:bf:e4:1f:5c:1f:05:3d:
         ba:62:fe:bb:21:a8:e5:fd:c7:64:7c:79:66:0b:6c:83:ca:ab:
         3f:b8:30:15:6e:93:da:72:15:ab:65:87:73:25:68:7c:9c:18:
         a4:6d:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:22 2025 by rpki-client