Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
File:                     894b6866-3a19-3c26-9b99-d25c3c417e70.roa (raw, json)
Hash identifier:          o/RG0Vy6kzLJsFjNDZEe0D9vXPqukafriO/9qaSspaw=
Subject key identifier:   94:A7:C7:17:D7:C9:A8:74:F1:56:A0:53:74:75:26:8E:00:77:D9:E4
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C0D54C78AF36DEB4E5200
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        24.149.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0d:54:c7:8a:f3:6d:eb:4e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=0364d61a-bcf6-4a03-a99c-f189e1780ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:65:f6:24:3a:a3:12:b0:72:62:4d:df:4e:
                    63:1a:c3:42:89:42:e6:e2:31:87:c2:c6:e1:c7:01:
                    78:72:44:8c:98:d6:f4:cc:d2:2a:67:62:25:e6:d8:
                    11:62:69:b5:1c:6b:7a:d0:1e:6f:02:d1:56:bd:f9:
                    a1:46:e3:3a:08:4c:ce:8b:35:a9:7f:e0:fb:b3:94:
                    08:5f:bd:a8:7a:66:48:19:2d:9b:06:30:03:10:80:
                    be:16:a2:3e:e4:c2:dc:f4:8a:3c:dc:ac:e4:a4:46:
                    1f:01:75:a1:0c:f9:86:13:bf:ee:e1:8b:8f:b3:e7:
                    b3:a3:8a:eb:85:b7:5d:b4:5b:97:a4:14:f6:ac:cb:
                    1c:eb:80:ce:8c:0b:40:b2:f1:69:a1:f2:c6:5d:bd:
                    c2:2c:0b:65:f2:97:a9:bf:72:46:bd:fe:c9:61:5c:
                    3b:e5:51:c5:b5:eb:8c:e0:07:12:26:1a:7d:82:61:
                    5f:1c:60:29:27:e7:6e:4c:f3:a1:a5:e2:3a:dc:5b:
                    48:44:ac:1c:fa:c0:31:11:be:6e:af:81:3b:2d:36:
                    65:36:56:83:a2:e0:06:86:08:e1:7a:97:04:3b:6c:
                    69:67:a6:a6:af:36:57:61:49:c0:a5:65:c7:f8:74:
                    7a:b8:8d:c2:3b:9d:ba:57:79:a3:80:00:b9:4e:a7:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A7:C7:17:D7:C9:A8:74:F1:56:A0:53:74:75:26:8E:00:77:D9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:86:c8:09:86:65:9f:68:52:8b:ff:31:8b:a7:73:f8:6c:
         b7:28:62:11:bf:12:e8:46:f0:44:32:db:26:3a:a4:fc:92:da:
         1d:ae:40:81:fe:cc:a8:f5:d4:26:9e:03:0b:c8:65:87:79:4c:
         82:b0:23:aa:4d:38:b8:45:ca:7d:bf:cb:51:08:6f:ea:f4:88:
         b4:ee:65:a0:32:1a:e6:03:68:e7:b6:87:a2:df:36:eb:29:2e:
         ca:4d:c0:2b:fb:1b:3d:96:fa:63:1e:f0:af:cd:a1:ce:0a:07:
         6b:6f:78:03:32:d9:46:f1:2d:18:da:78:37:e0:00:e1:d0:9b:
         37:73:03:c7:8c:69:08:e6:88:2b:04:55:a3:c1:be:89:f5:4e:
         0b:96:17:03:3c:6a:a5:b5:51:5f:d0:0f:6f:bd:a9:3b:3c:34:
         af:9a:af:a4:0a:45:20:ff:ed:fc:bf:c0:71:92:68:41:4c:a2:
         49:8a:09:f3:3c:41:70:ea:72:0a:ad:99:14:08:33:fb:f4:cb:
         7c:68:da:4f:60:b6:88:0d:28:51:0d:98:94:95:00:48:ec:d0:
         e0:e5:4b:6c:6f:11:d4:0d:2c:2b:9f:d2:42:3f:5c:91:19:75:
         31:70:9e:0a:e3:d9:69:24:f3:1c:31:b0:1e:19:28:06:bd:38:
         ac:54:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:53 2025 by rpki-client