Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/a5169fba-de21-3d20-b236-278f8f4289d1.roa
File:                     a5169fba-de21-3d20-b236-278f8f4289d1.roa (raw, json)
Hash identifier:          n5L3SipiLksuu/3i4LzxvQN2T17D1NjsNM5dxGMryMY=
Subject key identifier:   B5:CD:AC:13:6F:05:42:81:61:29:EE:98:1F:83:CA:69:08:44:89:28
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584B8BE22A21EB83DABC01E3EB80
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/a5169fba-de21-3d20-b236-278f8f4289d1.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     2734
IP address blocks:        199.197.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:2a:21:eb:83:da:bc:01:e3:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=c6437b46-7a18-4920-9444-761ab6e72358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:e0:ce:52:95:c0:ce:82:20:3a:8d:d2:03:
                    50:63:d4:90:34:42:d8:5d:ef:a8:a1:d6:0c:1b:6d:
                    3f:c6:c4:fd:e0:ae:ad:c5:6e:e6:4d:c3:5d:5e:a2:
                    fe:ae:08:ae:b7:d5:f1:76:a9:25:13:14:cc:dc:dc:
                    b6:67:3c:c2:c5:10:63:c5:ab:34:d6:f6:dc:57:15:
                    16:3e:02:84:d0:d3:fe:75:fc:77:96:53:79:5b:a0:
                    e6:17:49:fc:ae:49:c3:ef:dd:61:9f:fb:58:50:d0:
                    53:80:0a:f8:c8:c0:82:e0:23:1f:fc:85:cb:6a:3b:
                    a5:9a:7d:a7:40:f0:65:8c:a1:88:10:c7:c7:43:c0:
                    29:2b:28:77:d5:56:78:d6:8e:76:2a:a5:87:27:38:
                    67:74:10:17:2c:2f:1e:45:c9:fa:a7:77:2b:34:e6:
                    2a:e9:db:71:15:37:b2:19:6e:6a:1e:0a:66:71:40:
                    28:5b:76:9a:f6:4f:d3:c1:7d:29:81:81:31:e8:25:
                    c8:5b:96:89:f4:20:6c:91:67:84:2c:f8:c7:21:b6:
                    7b:0c:d8:79:78:f1:0a:00:c5:bf:fa:57:fc:8c:dd:
                    14:75:e5:34:6a:61:9f:d7:b0:39:da:38:1b:8a:5f:
                    97:64:cd:3d:64:03:a4:f8:a2:2b:2f:ea:4e:ae:6d:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CD:AC:13:6F:05:42:81:61:29:EE:98:1F:83:CA:69:08:44:89:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/a5169fba-de21-3d20-b236-278f8f4289d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.197.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:78:7b:26:7c:90:c9:1e:84:63:80:b2:f3:82:25:59:65:
         92:25:90:a7:8a:23:00:48:c1:35:f0:1d:6f:2f:a2:3a:05:3e:
         1e:47:7c:2d:d5:20:f0:6a:c1:c8:60:c1:70:56:e5:10:a7:f0:
         d1:25:70:ac:e7:1d:61:71:48:f8:7b:e3:1b:e2:60:b3:0f:27:
         cf:fc:37:6a:90:c2:c0:55:1e:7d:b3:51:3d:c2:f3:d1:77:23:
         39:97:27:8f:70:35:4e:b6:af:2a:50:41:73:8c:d4:19:17:d4:
         97:78:20:6b:53:1b:af:93:6c:e3:ce:9a:64:09:5c:3f:0a:33:
         04:bd:94:1d:81:04:dc:fc:2c:fa:b0:6d:c5:0c:a5:2b:6a:60:
         6e:60:b2:c6:4f:bf:35:81:0b:32:66:e7:09:ab:1b:39:7f:f2:
         c5:71:ba:7d:b8:1e:39:2f:93:40:13:a2:f1:8b:88:c5:f1:1c:
         f5:20:12:dc:82:7a:18:5a:d2:a0:d0:95:67:2f:d0:7d:34:e1:
         6d:c5:bc:10:9c:ae:25:39:32:4f:9b:eb:98:52:b9:db:79:02:
         29:fd:2c:ea:c6:7e:fe:80:02:7b:5e:c9:fb:f3:83:fc:a8:09:
         ff:18:31:3d:b4:d4:19:4e:25:80:30:4c:e8:db:c0:39:d8:35:
         59:16:f7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 10:12:43 2025 by rpki-client