Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bf187163-b0b5-3dd0-83db-e56d3fb14116.roa
File:                     bf187163-b0b5-3dd0-83db-e56d3fb14116.roa (raw, json)
Hash identifier:          CzIEDtbdtIn5zZlZQmyK/fBkhMQnBqHFW3XmjqEWCvE=
Subject key identifier:   E5:CF:6F:E7:16:60:A0:5B:3F:5F:9B:AE:26:BD:FF:C6:93:BA:50:A0
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584B6BC7448D3FFCBC0755704700
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bf187163-b0b5-3dd0-83db-e56d3fb14116.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     19901
IP address blocks:        9.134.32.0/19 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:44:8d:3f:fc:bc:07:55:70:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=8cb3178a-6cd6-45e3-8da3-647be7b4ac25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:88:95:d9:eb:c0:2a:3c:ab:e0:9d:f9:9c:
                    d7:df:09:f0:c0:a7:ff:fe:d7:ff:a5:5a:6d:bd:00:
                    1c:e8:26:4a:74:a4:35:8a:2e:c6:38:de:91:bf:c8:
                    17:ce:f1:c2:42:78:21:1e:7d:fe:05:37:61:5e:38:
                    ba:50:43:d6:81:aa:be:52:7a:67:34:c5:70:94:b2:
                    da:00:36:e5:cb:57:ca:33:d3:78:c5:aa:8c:52:35:
                    3b:6e:c9:32:77:9e:d0:84:60:7d:4f:79:c4:bb:52:
                    aa:67:9b:02:7a:a8:bb:a0:81:b8:96:51:99:81:3f:
                    10:53:71:6e:ae:8b:2a:dd:c4:a4:56:76:8c:a0:cb:
                    9e:10:f8:a5:e9:74:29:ce:13:3b:cd:82:69:88:4d:
                    39:33:ec:0c:0b:1e:21:b6:9c:42:07:13:14:4a:61:
                    de:c0:5b:97:3f:f1:09:d8:13:9b:0c:1a:57:cc:de:
                    1a:d4:ab:a8:80:73:d6:c9:eb:4b:1a:ee:d7:a6:20:
                    5b:bd:25:80:cf:12:d9:de:f0:2d:a0:ac:ea:98:2e:
                    af:70:e2:9f:d3:81:a3:f2:05:d3:50:5e:82:ee:d6:
                    7e:7c:93:ad:cc:80:92:2b:fe:f9:70:b6:0f:6d:7e:
                    8e:27:24:4e:63:c2:41:4a:a0:74:5d:78:57:99:df:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:6F:E7:16:60:A0:5B:3F:5F:9B:AE:26:BD:FF:C6:93:BA:50:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bf187163-b0b5-3dd0-83db-e56d3fb14116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.134.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fa:28:dc:b8:b1:6c:20:5d:7d:51:d0:a1:87:3a:fb:f0:87:
         06:1f:79:4c:45:8b:2a:6a:ef:82:60:ed:99:4b:21:b3:e6:2f:
         7a:dd:fc:60:18:f5:5c:f9:0f:e6:d5:35:db:25:b1:58:ee:36:
         56:89:c9:56:38:9f:9d:e1:66:75:61:9b:36:ae:ad:bb:74:2d:
         60:0c:b6:73:05:36:85:71:64:ae:87:ca:75:89:9e:e4:4a:ce:
         e3:ed:45:77:8d:40:41:a0:15:37:5b:99:f4:8e:3b:6f:2f:ef:
         72:d2:ff:37:c5:7f:1a:33:b7:b3:7a:9b:70:4b:e9:1a:9c:d4:
         b4:68:a2:29:f0:60:5c:74:d3:82:3a:c4:1d:32:a3:b8:50:71:
         4c:62:53:d5:70:87:f9:ce:eb:99:27:93:57:03:a6:76:e8:8b:
         cb:a5:91:9b:f7:c3:58:d3:12:e8:ae:48:21:5b:f6:e5:65:f8:
         5a:53:9c:4c:c6:d2:a6:11:73:b5:ed:6e:96:87:db:30:c9:e5:
         1f:03:50:5b:a8:ba:1e:92:f7:03:49:bd:9d:c4:2c:84:99:5d:
         5a:2d:27:71:b7:d2:3e:2e:ab:a9:eb:6e:5d:b6:d6:82:d6:2a:
         59:90:70:e3:4d:89:9d:ba:7c:d3:00:c7:73:54:d3:e7:57:01:
         89:7e:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:59:52 2025 by rpki-client