Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa
File:                     b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa (raw, json)
Hash identifier:          OIoh6j0L7XPvrXJIqlLxBXvaFeSWSkVhcse73IMKEeg=
Subject key identifier:   5F:60:FB:7C:5B:DF:5B:19:C6:84:29:74:E9:EB:CC:E9:49:69:46:9E
Certificate issuer:       /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial:       010D0C9F4328584B4616FAD2CCD8B59A065D9980
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     22299
IP address blocks:        65.254.160.0/19 maxlen: 24
                          162.249.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:16:fa:d2:cc:d8:b5:9a:06:5d:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=69779361-c203-4277-8cb3-c36d527492f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:ec:48:13:d2:9c:2f:fe:d4:69:57:93:db:
                    b0:a1:1b:98:d3:0b:7c:19:07:42:6a:02:f3:9d:b0:
                    6b:c2:80:02:9f:f2:34:6e:71:92:2f:77:29:ac:06:
                    d0:8e:ef:18:54:05:dc:9a:dd:cd:f2:fb:da:08:5b:
                    1f:3e:f5:69:1e:f6:d1:1c:f9:48:7c:f5:1e:33:9f:
                    e9:f3:e6:9e:01:e1:9e:65:d3:52:4b:fc:80:45:45:
                    fc:4f:55:db:fb:22:36:94:9e:b3:2b:61:9d:54:5c:
                    ef:6e:69:4d:05:b7:f3:92:07:12:1e:8e:58:4c:53:
                    f3:b9:84:01:56:4c:38:ab:5f:c1:a2:fb:d3:bb:da:
                    31:55:2b:c8:9d:5a:85:13:dd:fb:1c:52:ee:32:eb:
                    47:9c:3d:58:92:60:4b:59:6e:8b:d4:2c:92:48:5f:
                    6d:2c:d0:1f:8f:25:15:ef:e0:1a:86:63:4f:6f:6d:
                    e0:22:54:28:aa:f1:e9:d4:8e:00:db:db:2f:98:e6:
                    9f:13:0b:b0:94:f0:71:c3:4e:17:46:2e:43:43:cb:
                    15:d3:03:8c:f7:74:48:4c:4a:c8:b9:4c:65:7c:f6:
                    7b:54:f6:87:18:2f:b6:33:fe:b8:06:f7:52:1c:99:
                    a8:ad:e2:c4:d8:14:82:c9:74:fb:53:99:52:16:64:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:60:FB:7C:5B:DF:5B:19:C6:84:29:74:E9:EB:CC:E9:49:69:46:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.160.0/19
                  162.249.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:95:4e:c1:12:89:4e:e4:28:e5:0c:53:71:c4:f2:a9:c4:af:
         d0:db:16:df:f6:9e:c5:53:30:8e:eb:10:9b:67:bd:8d:99:25:
         21:a2:3c:e0:1b:a3:33:d1:5c:67:9b:29:f8:d8:94:f4:86:72:
         21:24:68:48:ca:3c:f1:c7:5b:cb:ec:76:64:3e:3a:97:84:ee:
         af:74:57:89:44:87:17:b5:9f:78:87:d1:ac:fb:a7:f5:d6:a4:
         7e:a3:4a:f5:f8:a8:18:cf:ea:fe:db:57:9f:3c:08:06:82:4b:
         16:34:4b:6d:64:92:f3:13:28:f9:cf:e4:3d:17:84:14:87:3e:
         a1:fd:17:3a:f3:74:c2:a2:1e:a6:9a:a0:dd:15:dd:7e:d4:12:
         ec:d6:54:aa:0b:1c:67:f6:24:ac:38:9e:91:49:24:a0:40:e2:
         49:e0:d6:0b:c9:b1:3c:96:8f:2a:9f:9b:87:22:bb:aa:45:4a:
         07:47:26:46:16:94:e5:f8:b8:0c:22:56:48:29:af:ee:c1:d9:
         d9:18:71:32:eb:2b:8a:ca:00:43:15:18:7f:6d:35:b8:6c:26:
         65:4d:7a:b8:c7:30:a6:ee:08:47:67:19:ec:f0:77:eb:d7:db:
         d7:ad:44:41:3d:54:a9:43:01:af:a5:a6:85:cf:0f:2b:b0:06:
         b8:9f:d6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 18:34:42 2025 by rpki-client