Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
File:                     0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa (raw, json)
Hash identifier:          UcAqMQbaBbkYXGof4kxvoOPYkOyzzqxDUgDMM68VQos=
Subject key identifier:   02:AF:06:22:CE:2E:76:34:88:11:CF:26:F7:15:47:2B:53:5E:4D:BD
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F4328584B6A61F20B3CD5123622EDCE80
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     19605
IP address blocks:        148.59.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f2:0b:3c:d5:12:36:22:ed:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=3a1c2499-7993-4dad-9d25-f855b9b02d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:58:04:8b:3f:1a:35:a9:a3:cd:76:d2:92:
                    3e:2f:39:af:e8:b5:0a:09:eb:db:ab:ee:a9:a8:5f:
                    ef:2d:10:49:0d:b6:ef:14:c3:7f:0f:0d:25:42:13:
                    c8:b7:9a:17:70:28:84:bd:62:12:ed:0b:73:2b:68:
                    20:63:94:26:fa:84:8e:97:e8:24:ec:d0:96:23:61:
                    06:d3:07:ec:95:89:e1:37:74:64:a3:c7:f5:04:0e:
                    d6:79:73:36:c4:c9:e5:3d:54:fe:87:10:58:f6:b9:
                    38:fc:00:22:b5:04:af:40:12:ee:3a:3f:73:f3:09:
                    a6:33:59:a9:8d:78:28:4d:c4:4f:39:35:88:27:84:
                    b8:89:22:f9:be:57:d9:aa:96:c9:8e:03:a5:e7:d9:
                    19:ca:17:18:8a:68:f5:94:b9:07:8f:eb:f3:02:a8:
                    54:6d:f3:7d:8f:d7:14:ad:f0:56:e3:06:3e:4a:aa:
                    f3:6e:b1:40:4a:53:6a:5c:25:b1:73:eb:a0:31:d0:
                    7b:75:29:cd:15:a5:37:4b:ee:5a:40:88:a7:19:e6:
                    df:18:e8:53:63:16:51:ad:1b:eb:52:6d:0c:0d:d7:
                    fb:ac:f1:0a:71:a5:52:ec:9f:3c:38:f0:e5:d7:eb:
                    98:74:de:a7:aa:89:3f:b2:00:23:51:e2:12:c7:fe:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:06:22:CE:2E:76:34:88:11:CF:26:F7:15:47:2B:53:5E:4D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/0d9b0007-25f4-32e3-95aa-4bc97dcde6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1d:53:a4:d5:b0:cd:7d:97:92:a9:56:e4:42:c6:bf:07:46:
         09:eb:41:b3:8a:e7:68:a9:30:55:40:04:ff:12:05:2c:dc:db:
         71:cf:f8:e5:ba:21:da:01:d9:58:7d:7c:48:a3:21:af:2c:87:
         ab:02:15:7c:b3:83:f9:47:70:e4:ed:5e:ca:96:b5:4e:96:c8:
         d3:55:6b:46:50:98:6e:82:19:63:27:66:e2:5a:4d:12:32:1a:
         74:3d:db:de:ad:0a:75:4a:7a:5e:91:7b:31:84:40:72:46:4f:
         d2:42:6d:c5:d2:d9:80:d9:99:5a:8b:94:a8:9c:86:b9:84:eb:
         b5:8e:f9:d5:5d:76:63:a3:26:3a:21:6a:c2:07:a9:52:a8:e4:
         ef:51:78:a0:90:c1:08:45:fb:80:8d:71:76:9e:2b:74:9e:9c:
         72:85:fb:70:27:13:97:7b:eb:32:20:63:d2:ad:ab:3e:6f:66:
         09:f9:76:33:05:02:7b:ed:ef:8e:f3:50:c2:0a:72:df:ea:25:
         69:9d:9f:db:cb:08:a6:d5:e8:9e:b0:87:5c:ba:4e:9f:c2:dc:
         b1:c1:65:18:a9:c2:d2:f4:26:89:8a:dc:27:12:58:2e:33:78:
         dd:37:46:fb:aa:a0:c1:2a:cc:96:31:52:66:18:58:30:29:c0:
         be:b1:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:52 2025 by rpki-client