Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/923e8850-cfe0-3825-bfad-bd433a1c0778.roa
File:                     923e8850-cfe0-3825-bfad-bd433a1c0778.roa (raw, json)
Hash identifier:          h6XjHWY7QwQDX0qOBa8HPpJyapYMtltPeHK3+xGIET4=
Subject key identifier:   C8:A8:64:83:EE:2F:F4:87:28:3E:B6:A2:14:95:48:27:A7:9D:53:DA
Certificate issuer:       /CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
Certificate serial:       010D0C9F4328584B1D9C2BAB5AF5DBE5678E5480
Authority key identifier: A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/923e8850-cfe0-3825-bfad-bd433a1c0778.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     400164
IP address blocks:        65.75.212.0/22 maxlen: 24
                          2606:8ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:2b:ab:5a:f5:db:e5:67:8e:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=4e2f979d-3e92-4a22-9fab-42b58f7f71db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:ce:65:00:e3:b0:32:27:11:c3:bf:b7:6b:
                    ae:b0:9d:51:cb:95:e4:b8:8a:f4:fd:80:b1:9b:7d:
                    00:11:7e:bb:5a:95:d5:ea:60:84:28:9f:7d:96:3e:
                    eb:00:76:79:27:d6:ac:f2:0f:04:c0:db:a7:a7:0c:
                    f3:c6:be:a4:9c:5b:96:4c:82:6a:04:6a:f0:0e:88:
                    02:73:23:8c:5e:d6:1b:5a:bc:b0:99:c5:37:f0:54:
                    9b:74:db:be:2e:60:68:91:a0:a9:d6:ee:c4:7e:31:
                    e9:b2:55:d5:e5:8c:fe:6c:89:97:be:fc:e6:10:b2:
                    a9:79:33:95:b8:2c:a8:e5:f9:6c:7f:0f:b3:40:9f:
                    ef:49:ac:8f:0f:00:b9:08:34:d3:ce:e0:1a:92:30:
                    57:ff:e3:39:dd:ee:65:25:de:9f:02:f0:2b:98:29:
                    a9:a9:fb:bc:7f:b4:ba:f8:1e:b6:15:46:0b:14:65:
                    26:5f:8a:e3:7e:d7:e6:34:6b:0a:45:ab:b6:dd:e6:
                    2f:ff:c3:b6:b6:11:32:e2:83:4f:7e:67:a7:80:e6:
                    0d:5f:79:0d:74:b8:9e:65:ab:27:fd:aa:60:84:c5:
                    61:e6:8f:33:9a:fb:05:c0:2c:c9:3d:f6:c4:25:82:
                    8d:cb:2d:6e:8a:a3:dd:c4:47:0e:2c:06:a3:58:f1:
                    6b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A8:64:83:EE:2F:F4:87:28:3E:B6:A2:14:95:48:27:A7:9D:53:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/923e8850-cfe0-3825-bfad-bd433a1c0778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.crl

            X509v3 Authority Key Identifier:
                keyid:A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.212.0/22
                IPv6:
                  2606:8ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:10:cd:fb:fc:c2:6b:a2:3f:8c:2a:b7:5d:d4:96:4b:4d:
         72:6e:e3:3b:76:d7:a4:9e:63:e1:5b:9e:9d:5e:99:2a:34:87:
         54:2b:3d:39:c6:a7:d7:91:99:7d:1e:39:3d:03:5d:d8:f3:83:
         85:70:dd:f9:e0:f3:aa:8e:b1:bc:f7:c0:bc:6a:0a:ea:6b:68:
         56:78:a8:cc:56:7e:41:f8:0a:a7:f3:41:e7:9f:6c:39:03:05:
         ef:fb:ed:6c:59:3d:9a:a8:62:23:b6:2b:9d:32:b0:4b:5a:40:
         44:15:ff:3e:38:e8:80:f7:97:d3:00:86:ee:18:0f:d7:51:ff:
         09:b2:66:04:d9:98:43:0f:24:8a:b2:c2:1e:bf:09:4c:c4:28:
         a7:4c:b9:8e:44:e8:bd:37:46:f1:05:6d:88:fd:c0:2f:c1:f4:
         2f:df:52:15:3e:89:8e:5d:ed:e8:51:bd:bc:89:40:e5:05:50:
         03:32:86:2e:c7:f3:6e:c4:8e:96:73:3f:b5:59:05:0d:f9:5c:
         fe:2e:5e:b9:14:05:fc:38:eb:01:2b:85:18:61:06:f6:26:d4:
         9b:dd:41:87:11:7d:12:1b:13:87:21:0d:69:f2:5b:ab:c3:8d:
         3e:0c:56:68:68:42:14:46:88:37:76:b9:1b:25:ce:bc:63:d9:
         68:c5:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:45 2025 by rpki-client