Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c91566a6-ebbf-3fc4-866d-2ad4ab66daae.roa
File:                     c91566a6-ebbf-3fc4-866d-2ad4ab66daae.roa (raw, json)
Hash identifier:          kq0VAz07lkUN8Z6brdyr0gSZ6dOPEXFkNznk8UnHmfE=
Subject key identifier:   02:97:BF:7D:F5:E6:92:81:DB:AE:DD:88:DC:B9:90:0D:A1:D2:4E:8E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF9E4FDAE2D83FA5A3510
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c91566a6-ebbf-3fc4-866d-2ad4ab66daae.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        165.225.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f9:e4:fd:ae:2d:83:fa:5a:35:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=8665ea04-5d4a-4791-b508-985486246d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:56:cd:f6:ea:4b:3f:b7:44:c4:a4:95:4c:
                    36:9a:ad:55:df:6d:ad:b3:74:33:26:30:24:e4:6f:
                    7b:ac:25:51:98:b9:9f:c8:15:da:2b:f2:71:54:ff:
                    56:f3:ee:20:b6:09:b0:83:84:05:ff:61:82:61:e3:
                    7a:99:ce:2f:3e:fe:01:61:64:43:69:39:8f:7b:ae:
                    64:20:60:08:fe:ad:d3:18:97:32:d0:9f:8a:17:e5:
                    3a:4e:0c:2d:cb:a1:63:db:fa:3d:ca:f1:32:41:d7:
                    1f:31:e3:71:25:f5:31:d6:84:37:2b:d2:56:cc:3c:
                    85:4c:4c:cf:5f:f5:dd:f2:d7:e0:b0:1b:49:06:33:
                    d1:f3:b1:47:95:8a:f3:18:db:c6:60:34:e5:a5:67:
                    bf:bc:c4:df:21:08:73:52:01:24:c4:08:ed:f3:62:
                    d4:65:26:db:6c:4e:53:09:91:9b:78:ef:46:9c:d3:
                    55:93:d8:c9:30:a5:64:32:04:74:05:db:65:34:b1:
                    90:67:9a:0d:08:22:9b:65:b6:4d:53:55:60:5b:02:
                    36:79:a5:92:6d:32:b4:28:e1:08:60:fa:3c:28:65:
                    9e:00:0a:0f:4b:8a:ee:fa:8a:7e:78:41:2b:3a:ad:
                    39:c1:85:10:89:0e:61:09:e9:9f:f2:9e:32:a5:ef:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:BF:7D:F5:E6:92:81:DB:AE:DD:88:DC:B9:90:0D:A1:D2:4E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c91566a6-ebbf-3fc4-866d-2ad4ab66daae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:a5:0f:52:1f:4b:74:a0:19:93:8b:be:f1:64:09:88:a5:
         e7:81:28:b2:f6:d3:06:dc:3e:88:14:f7:46:a1:5a:44:20:86:
         4e:56:30:68:75:ee:3a:50:db:04:97:7c:60:61:b1:20:0e:eb:
         e4:74:90:05:f8:2c:5c:e2:1e:74:98:a9:aa:2f:76:15:bc:b6:
         e2:51:04:8a:04:51:cb:2a:0e:6e:5c:35:97:04:e9:49:31:22:
         fb:0d:45:3c:73:5f:52:60:d3:74:65:5f:69:5a:dc:ee:e3:b5:
         21:83:c4:e1:01:70:8a:28:ad:66:0b:6e:0c:27:ca:2f:46:ed:
         14:9e:dc:b5:f0:34:13:1f:cd:ff:1d:2d:f6:48:7a:52:be:23:
         8b:85:e7:0e:df:3e:a1:26:fa:83:49:ba:65:df:5b:e4:a7:c4:
         83:ef:ff:ad:d7:d3:5a:4f:7b:6e:94:6c:43:5e:7d:f6:8c:5a:
         4f:67:44:98:8e:ee:f4:d5:60:92:08:62:48:7a:23:1a:df:f0:
         e5:10:4f:47:89:6f:c4:7d:a4:99:13:8c:10:3f:f7:5c:d6:bb:
         7c:b7:ff:7a:54:25:e5:e2:32:58:aa:38:85:c4:c7:ed:d1:95:
         9b:78:c0:3f:a4:cd:50:6f:b7:66:42:7d:b8:5c:28:fc:2e:78:
         fb:28:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:25:41 2025 by rpki-client