Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/c5b63724-35c3-3d6c-87c8-f5bf01fc267a.roa
File:                     c5b63724-35c3-3d6c-87c8-f5bf01fc267a.roa (raw, json)
Hash identifier:          N6CViCR48FpB4PVW/UewShNGGncqGGfoWHlDk9B9vOk=
Subject key identifier:   D4:F6:5A:8B:D1:06:2C:6B:CE:ED:47:8F:66:48:DD:81:3F:35:1C:30
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584B23CA395B1AF6B433D6AD4D4A
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/c5b63724-35c3-3d6c-87c8-f5bf01fc267a.roa
Signing time:             Tue 09 Sep 2025 18:08:27 +0000
ROA not before:           Tue 09 Sep 2025 18:08:27 +0000
ROA not after:            Mon 08 Dec 2025 19:08:27 +0000
asID:                     22926
IP address blocks:        208.84.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:ca:39:5b:1a:f6:b4:33:d6:ad:4d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Sep  9 18:08:27 2025 GMT
            Not After : Dec  8 19:08:27 2025 GMT
        Subject: CN=988cc10b-537b-4402-8322-79fe6c3cd51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:c4:5a:c3:2d:a9:37:07:96:33:47:9e:10:
                    e8:78:8e:83:a5:f4:84:2a:5d:93:ae:c1:12:50:c4:
                    1f:ec:bb:93:90:0b:98:87:a9:cf:c8:f9:38:05:31:
                    b4:b5:44:5c:5c:0e:f2:00:8f:b1:fd:78:df:00:85:
                    d4:ec:12:f9:c5:ae:b3:e9:3f:d0:72:49:b7:8a:cc:
                    20:ca:f8:5b:18:2d:bb:32:34:83:88:dc:d0:8b:9e:
                    57:c8:30:aa:2e:5a:cd:9b:26:68:d6:15:dc:45:da:
                    8d:e3:25:05:8a:e7:48:56:20:da:2d:b6:b2:79:84:
                    bd:7a:d6:bb:4d:e8:97:e0:1f:e0:68:1f:99:e2:22:
                    46:62:85:a3:2e:35:96:4c:6d:b4:96:c1:90:a1:3d:
                    d2:3a:17:f9:74:a9:a6:0c:fa:7e:ff:76:8f:f2:bd:
                    59:6a:b9:fd:c0:9c:33:f9:e4:83:d1:6c:66:3c:a9:
                    03:ad:79:2e:a9:16:8c:09:f0:fe:10:e0:c0:0a:0a:
                    2a:e8:87:dc:2f:fc:af:3c:41:ac:20:c1:9c:b2:33:
                    95:b7:10:33:45:ef:a7:03:e0:f9:8c:57:f2:c7:3e:
                    1f:aa:42:61:7d:d9:36:86:1c:51:8d:b6:79:09:30:
                    75:41:4a:ea:79:fe:44:40:72:d3:ff:04:62:b2:d9:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F6:5A:8B:D1:06:2C:6B:CE:ED:47:8F:66:48:DD:81:3F:35:1C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/c5b63724-35c3-3d6c-87c8-f5bf01fc267a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:cb:d3:91:67:2e:35:eb:eb:f0:6d:1d:03:7d:53:64:f8:2a:
         e0:6b:95:9e:c8:c2:45:8c:c8:30:f9:48:78:f0:61:f2:a3:67:
         b6:82:3c:6b:2f:69:9e:7c:88:e9:1a:37:24:1c:1a:23:f5:ee:
         4d:ab:8d:e4:24:27:ad:43:80:4e:e9:9f:ce:56:ed:8f:8a:6e:
         c2:08:64:c7:2c:9d:93:33:3c:53:8e:5d:c7:25:e2:05:3c:f8:
         82:2b:1f:2a:d6:c6:0b:25:9d:cb:6a:74:4b:f2:c8:8b:bb:be:
         a4:8e:57:94:74:d6:49:5f:f0:5a:10:a0:de:43:71:1c:01:b3:
         07:7d:c5:75:05:21:82:4e:18:33:81:15:48:67:28:43:b1:60:
         91:95:56:9f:13:8e:f8:72:87:8d:88:90:fb:55:da:36:5f:9c:
         de:69:a8:01:3e:4d:b1:b6:e2:4c:9a:20:9e:4e:12:60:75:92:
         e8:83:7a:fd:c9:37:4e:a8:37:df:8f:8a:ba:9a:98:0d:7e:d2:
         30:d5:a1:91:d4:8a:12:64:7e:5b:df:5a:63:92:14:70:ad:81:
         f0:b2:3a:98:ce:fe:f5:20:e4:1c:c9:fb:73:e5:ac:8d:b5:d7:
         2f:c3:f5:44:7f:36:b3:4b:66:5b:70:5a:9e:da:77:d0:5f:21:
         51:57:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 19:23:30 2025 by rpki-client