Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/1994235e-c7e7-3805-8a27-83af0eb87dbe.roa
File:                     1994235e-c7e7-3805-8a27-83af0eb87dbe.roa (raw, json)
Hash identifier:          1gjysSZ4MXg+iONiXhVNXvX2sBldAJD5N8UNr/27spk=
Subject key identifier:   9E:9B:0D:38:6B:FB:E6:0C:AB:5A:3A:69:BF:7F:F5:7F:BB:E2:00:0B
Certificate issuer:       /CN=8def8532-8491-4ca2-9370-4768f22df42b
Certificate serial:       010D0C9F4328584B715CB80EE556925D54BAFD80
Authority key identifier: 78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/1994235e-c7e7-3805-8a27-83af0eb87dbe.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     36305
IP address blocks:        184.94.160.0/20 maxlen: 24
                          192.111.31.0/24 maxlen: 24
                          198.98.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b8:0e:e5:56:92:5d:54:ba:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8def8532-8491-4ca2-9370-4768f22df42b
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=f054992e-d374-49f6-8ac9-e65fc72774c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:54:8d:85:a8:73:e6:24:f6:44:fe:8a:08:66:
                    1c:60:c1:82:48:e2:db:e8:3c:88:9e:16:c8:09:94:
                    d9:5f:45:0f:8b:4b:ba:a5:89:5d:11:12:c0:4f:b7:
                    82:52:76:ca:94:58:8d:52:ce:d5:bd:c8:ee:e1:44:
                    83:0f:b4:4a:a2:0f:1f:75:df:25:d3:2e:3b:56:cc:
                    86:d1:31:64:57:00:1e:e3:96:d8:ae:f6:36:8f:11:
                    75:e2:df:55:ce:51:9c:5f:9a:fa:70:c5:43:db:00:
                    60:60:c2:48:47:b5:b8:69:ad:7d:b6:fc:4b:c2:5a:
                    b0:7a:d1:6d:6d:fa:93:28:8f:65:46:47:6f:03:b8:
                    56:92:31:a0:fe:de:c6:18:c1:ce:9a:f5:05:a1:33:
                    de:ca:4c:64:e0:d8:85:7b:94:fb:8d:0f:38:3a:cd:
                    8f:5e:c4:81:84:47:b1:33:2e:a4:36:13:77:c0:42:
                    05:7c:fc:ce:7f:16:02:54:cb:c5:45:5d:f8:3b:4c:
                    71:b1:a3:8e:52:8b:9b:6f:96:61:92:3c:cc:4d:58:
                    e4:d6:09:62:28:16:72:1a:40:1b:a7:e0:2a:37:92:
                    3f:15:dc:56:bd:e2:85:fa:51:ef:7b:2b:62:38:43:
                    48:5e:bf:ed:b9:58:84:0c:9c:0e:6f:d3:16:82:04:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:0D:38:6B:FB:E6:0C:AB:5A:3A:69:BF:7F:F5:7F:BB:E2:00:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/1994235e-c7e7-3805-8a27-83af0eb87dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl

            X509v3 Authority Key Identifier:
                keyid:78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.160.0/20
                  192.111.31.0/24
                  198.98.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:0e:6f:39:f3:89:37:a5:da:78:67:b0:00:57:e6:57:55:30:
         0e:bd:7a:c7:14:07:37:a0:b4:b1:76:b8:0a:f5:35:b8:32:ba:
         23:46:91:95:6f:99:20:8c:e8:a0:86:e3:8e:61:d7:6a:a5:a3:
         be:a6:ae:6e:84:d8:91:df:a8:ca:8d:6b:a9:e2:82:48:b4:4b:
         37:6d:f3:1b:c6:c8:e3:04:ee:8f:0d:ef:9a:11:63:b2:9b:34:
         4a:bb:83:27:b8:01:b2:ab:59:9c:f5:a8:a1:33:4d:cf:fb:d3:
         80:97:35:f5:c4:40:70:da:43:92:9a:89:66:48:82:be:42:17:
         06:72:82:5f:13:44:5d:d6:b5:be:0a:49:19:95:fb:b5:d7:3e:
         8b:82:6b:ae:44:99:1c:f1:4c:56:4d:2b:bd:79:3b:dd:24:e9:
         3b:b0:6b:c7:43:43:7b:b6:77:0f:ab:fa:af:9a:66:6d:f8:fb:
         af:9f:14:15:5a:41:99:16:55:cf:90:01:14:0e:34:3c:9f:6b:
         be:69:00:6f:ec:7b:13:77:c0:d0:bf:14:ec:c2:3f:21:fa:ac:
         a0:c7:3b:7a:7d:5f:14:b1:bf:4b:52:b6:22:c0:86:de:12:85:
         1f:0a:07:4a:7b:31:ff:87:bf:5e:1b:cd:cc:71:b0:dd:73:f4:
         0f:f9:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:32 2025 by rpki-client