Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa
File:                     5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa (raw, json)
Hash identifier:          UyWKuLBdYtZwJ0OEPoJp00ILblRpWP1LrROjP9hJlwI=
Subject key identifier:   8D:5B:64:18:FA:DE:D4:68:FC:06:E7:B1:E7:77:5C:FA:92:1F:92:F7
Certificate issuer:       /CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
Certificate serial:       010D0C9F4328584B233184AFD5A8CA0D1A12E770
Authority key identifier: CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     401338
IP address blocks:        67.22.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:84:af:d5:a8:ca:0d:1a:12:e7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=59c95358-69c8-4ec2-89a3-da4c91e6dd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:3e:05:75:04:c9:8e:9a:90:21:0f:0e:0c:
                    ca:ab:a9:e6:eb:24:fe:21:84:4c:a4:28:06:f9:03:
                    b4:ef:2d:7f:2c:3d:d9:40:ec:62:11:0a:da:bc:b5:
                    7d:ed:1f:82:42:61:73:07:18:63:11:3a:c2:a6:f0:
                    58:af:36:a9:57:ae:58:1e:2d:b5:e7:f9:26:8f:8b:
                    d1:4b:ba:77:71:67:ce:e9:9d:ed:f4:32:d4:d0:e5:
                    5d:b9:d1:d4:cb:9b:07:9d:76:61:3d:e9:a3:00:cd:
                    02:46:61:dc:4e:1a:9c:b4:16:d3:64:8d:81:43:9f:
                    e6:e6:78:e6:3f:16:e2:8a:6e:92:2e:da:28:a6:cd:
                    b0:b4:1d:02:7e:c9:b8:a1:de:af:d5:e3:9e:f3:7c:
                    69:a8:0c:f1:6c:80:f6:7b:fc:56:5b:af:4b:d2:6c:
                    da:f5:fa:43:80:49:d5:1b:ae:72:ec:50:3b:92:36:
                    7c:8d:bd:75:d3:81:c8:14:2f:62:37:d6:c4:cf:e3:
                    f6:4c:ff:46:33:38:ac:96:0a:4d:a1:fd:0e:e2:3e:
                    d5:ec:06:d0:9d:a5:79:b1:80:b0:d0:fd:20:71:3a:
                    2c:24:86:41:e9:bc:15:57:04:38:2c:fb:ec:de:88:
                    e2:8a:94:06:11:73:9a:c4:ff:97:8d:83:32:7f:a6:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5B:64:18:FA:DE:D4:68:FC:06:E7:B1:E7:77:5C:FA:92:1F:92:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl

            X509v3 Authority Key Identifier:
                keyid:CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f0:d5:7b:d0:7a:aa:85:c3:a1:5f:34:b0:66:90:6c:b2:3a:
         5c:a9:47:6b:4a:ff:f4:36:32:2a:fc:5b:63:18:89:10:ea:fe:
         da:a6:21:43:2c:27:b1:f5:fa:f6:5c:c7:af:d7:a4:a8:84:74:
         5a:d3:e8:8e:00:c3:28:ae:6a:b0:28:ad:00:56:b9:a4:1e:77:
         95:6b:5d:b7:93:a2:4e:86:e7:78:15:2e:39:ab:af:bb:c9:42:
         31:8d:26:1c:9d:18:e2:6c:3b:aa:f2:d4:72:53:a6:3e:ed:dd:
         66:7b:60:bb:53:0a:f2:8e:fe:de:84:c9:93:75:47:62:da:fe:
         97:75:db:95:35:ec:89:62:6d:f6:91:17:f4:0a:e0:9b:2d:27:
         3a:3d:af:24:47:d6:df:4c:a8:eb:c4:92:e0:26:49:6e:8e:90:
         43:31:b4:2d:8f:9a:95:b0:7d:a3:d0:17:4f:a0:16:7c:bd:62:
         ca:7a:07:cb:c5:5e:7e:ac:79:96:64:18:89:d2:f3:16:13:fb:
         af:3e:26:ee:9b:88:98:0e:ea:20:d7:24:7a:3b:57:e4:d4:f0:
         8f:ad:00:28:20:f9:d3:47:05:79:92:c0:a1:50:84:0a:64:3a:
         69:b4:2c:52:d6:2a:75:9a:2b:39:18:e9:5c:b8:ff:4f:c8:8b:
         ac:57:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:13 2025 by rpki-client