Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/62121710-8f52-38a3-9ac4-8e5ed7edc999.roa
File:                     62121710-8f52-38a3-9ac4-8e5ed7edc999.roa (raw, json)
Hash identifier:          yIk/StMyiCVKE2xX01liCn8+sKlVh6dNtE4HavnV9rc=
Subject key identifier:   A0:DA:B0:16:61:55:67:BE:D4:24:C6:E4:ED:8E:C8:14:57:90:57:F7
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584B2A2C384F60144F30D57FA180
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/62121710-8f52-38a3-9ac4-8e5ed7edc999.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        141.193.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:38:4f:60:14:4f:30:d5:7f:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=144d0d24-2202-4d13-b9f2-5f74496cd710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fd:dc:63:c9:9a:48:bd:63:88:b4:11:24:b8:
                    6d:44:ab:9e:69:d4:a4:05:5f:6d:1c:48:0b:3a:c3:
                    6b:7e:27:e1:51:94:e3:a7:ab:f2:e4:08:ec:1e:62:
                    fa:7d:3c:13:05:2d:8b:49:58:67:ae:39:d1:8d:99:
                    87:a1:27:cf:ad:db:89:c4:02:6f:bd:db:4e:07:c2:
                    59:03:ce:a2:57:7f:de:ed:0c:06:c4:17:fd:81:82:
                    7c:75:cb:29:9a:ea:a6:3e:15:40:3d:bb:71:b7:1d:
                    7b:c4:92:e6:d8:8e:a1:95:da:3c:d9:89:30:6c:13:
                    8e:67:68:ca:c3:00:0f:c0:01:0a:92:5f:16:1c:c0:
                    e4:d2:6a:99:bc:75:6f:dd:93:67:07:b8:fc:fc:3f:
                    8c:56:f7:94:f6:91:36:ff:bb:24:59:9b:89:e4:a3:
                    e1:d5:e3:b1:64:50:09:51:48:9d:df:b2:44:e5:2f:
                    f7:ab:fd:f9:2b:77:ff:87:0e:b5:fb:26:64:27:c5:
                    79:0c:30:6a:b4:0e:39:d4:eb:b3:a6:42:c3:93:28:
                    9f:4d:dc:82:ed:d5:bc:98:56:2f:66:21:36:27:35:
                    b4:70:64:12:ea:a4:a7:7c:8c:af:3f:4f:6d:79:a8:
                    b1:f9:89:a3:09:8a:fb:d8:d9:1c:e4:2d:bf:63:ca:
                    c0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DA:B0:16:61:55:67:BE:D4:24:C6:E4:ED:8E:C8:14:57:90:57:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/62121710-8f52-38a3-9ac4-8e5ed7edc999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:46:5f:18:54:cd:92:15:40:ef:82:b0:a7:7b:09:28:07:19:
         56:77:23:d2:58:2f:01:77:28:0a:78:66:2c:41:a0:4d:3b:be:
         0a:b7:c4:90:c0:9e:fe:da:7c:a4:99:7d:dd:59:3c:a7:af:5e:
         1d:c9:7d:5b:4a:97:9b:22:64:c6:32:9b:57:e4:96:5d:eb:20:
         a5:f0:ef:4c:0c:9e:a9:51:c3:42:53:5f:15:7c:75:ee:f0:51:
         d5:6d:78:04:ac:6e:82:b5:95:71:38:25:80:d6:cb:2d:c0:d2:
         af:38:8f:46:cb:5b:90:dd:d2:5f:06:3c:df:56:80:62:6f:37:
         f5:8c:6c:cf:f3:18:0b:91:84:21:40:e1:d3:d7:cf:ed:9f:dd:
         27:40:a1:d6:b1:3a:46:42:97:9f:61:d2:47:9b:04:7f:1d:4a:
         dd:94:e2:30:1c:4f:5c:4d:fc:9e:ab:64:71:00:86:e4:73:28:
         cf:09:14:16:f8:6e:23:a6:ee:89:cc:05:4c:5c:92:b6:09:47:
         f4:2b:10:6c:b2:dc:2c:7f:35:b4:c4:ae:4b:b0:fb:98:cb:01:
         b7:1c:04:f4:80:62:cb:d0:01:ce:93:a6:40:37:71:65:36:53:
         bf:66:ac:dc:c6:5e:16:c3:af:64:64:bf:2b:40:49:00:9c:eb:
         e8:e9:f4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:24 2025 by rpki-client