Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa
File:                     bd22376a-0063-340a-9389-87a8253b2735.roa (raw, json)
Hash identifier:          +Frkp6KhZXlec/xxrXRgs4467OLdjrbU8wxLUqB9vUc=
Subject key identifier:   23:82:42:80:51:3A:03:46:1A:1E:EB:1D:0C:79:29:CF:B7:44:0B:A5
Certificate issuer:       /CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
Certificate serial:       010D0C9F4328584B2761762AC220BD3ADE612A00
Authority key identifier: 74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     46154
IP address blocks:        169.197.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:76:2a:c2:20:bd:3a:de:61:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=c701719b-9d12-46e3-9f89-9c5a7bbd5906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:0a:81:2b:99:fc:c8:5c:8b:1a:bf:28:46:
                    a6:30:a4:8b:b2:c7:45:ed:42:8d:73:30:af:bb:38:
                    06:63:ca:23:d7:e4:cb:0d:37:63:14:0a:33:68:ff:
                    79:30:5d:ef:85:23:d1:07:55:85:f5:43:98:b1:86:
                    c4:27:14:d2:05:ea:f0:81:2f:fc:e7:34:8b:8d:f5:
                    7a:2e:30:20:8f:98:54:10:39:85:e8:6c:9d:63:a4:
                    a7:c2:0b:2a:2f:e4:5b:50:a3:cf:86:18:a2:e4:0f:
                    09:2e:b3:bf:da:55:44:4f:10:d6:b4:09:3e:de:4c:
                    e6:98:b4:cb:dc:6f:4a:83:5e:ea:a3:db:2c:b7:ca:
                    0e:73:e9:a0:54:0b:90:65:dd:8b:72:14:cf:aa:fd:
                    66:cb:3e:e3:ed:d2:2d:aa:3a:a3:19:4e:a8:86:f1:
                    29:d3:06:77:01:bc:08:6e:6e:3a:a7:3a:d2:41:cd:
                    05:85:48:6b:9b:0a:2c:bd:89:73:c5:c9:1e:a8:33:
                    08:2b:e9:41:19:5a:3a:0b:6d:48:7f:98:a8:2a:45:
                    b6:20:9c:91:ac:14:00:df:26:c8:87:fc:d1:f1:9b:
                    28:70:9e:1f:a6:24:00:1c:2d:cf:d1:32:99:06:96:
                    dc:ab:c5:9f:63:d1:6e:dd:2d:16:c6:f1:7d:9e:82:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:82:42:80:51:3A:03:46:1A:1E:EB:1D:0C:79:29:CF:B7:44:0B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.crl

            X509v3 Authority Key Identifier:
                keyid:74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:14:84:48:69:67:22:ce:5c:48:ff:59:3f:4f:4e:20:91:c1:
         3f:1d:f9:71:1e:e1:24:2c:4b:0d:65:3f:72:d4:81:cf:33:1d:
         d2:79:7e:e8:36:87:de:7e:f6:53:6f:b3:bc:35:7f:9d:3e:c8:
         55:20:16:06:5e:4d:6e:0e:8e:e6:bd:41:42:9e:a1:ac:f9:c5:
         24:d2:9b:ae:ab:47:44:eb:7a:a0:2a:1d:d0:41:ef:eb:27:43:
         6f:83:51:a7:77:93:05:5a:1a:00:d1:57:53:6b:9f:06:fa:91:
         db:e8:a5:1a:56:b3:ec:94:d7:73:72:9b:7a:9b:42:cf:7a:6f:
         14:08:c2:f0:b6:bd:98:a3:f9:47:f8:e0:83:14:7d:22:2e:d8:
         7f:47:69:1f:48:e3:7c:10:22:b9:08:9d:00:d2:6a:08:7a:b6:
         1c:26:f7:1e:d4:0f:77:3c:6d:d6:68:e6:c8:78:f1:95:12:80:
         eb:58:43:1b:33:0e:4c:3c:9d:3c:dd:52:40:06:5e:ed:6a:ef:
         d5:39:9b:00:7e:bb:2a:62:24:a2:c3:c1:ac:ab:e0:2c:af:2e:
         d2:e0:07:f4:da:26:31:8b:86:69:87:0c:2a:b5:91:3f:06:af:
         c5:6c:91:16:21:7c:5a:4d:e5:76:86:2a:40:4d:d4:bf:fe:15:
         64:56:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 23:59:24 2025 by rpki-client