Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1fb86e2-2789-3d86-8ef0-47c3a18a6bc6.roa
File:                     f1fb86e2-2789-3d86-8ef0-47c3a18a6bc6.roa (raw, json)
Hash identifier:          SSyVZZMv5n/OnF4L2b/0zGeHTNW8/3CDfRdTCWtvhmE=
Subject key identifier:   46:16:1C:A7:BD:FA:BA:85:D3:9C:C2:13:4D:D7:CA:6F:DE:C2:37:7D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7E5820D94528735F265F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1fb86e2-2789-3d86-8ef0-47c3a18a6bc6.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     394996
IP address blocks:        184.105.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:e5:82:0d:94:52:87:35:f2:65:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=62acc16d-e6fb-4556-b634-76da809e69b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:91:3f:3f:bd:9a:79:0a:a6:fc:53:5e:a9:
                    ba:6c:54:53:d5:63:8c:84:78:ef:84:5d:49:93:54:
                    62:08:cf:a0:1d:12:ac:25:a3:70:95:6a:7d:6d:05:
                    20:45:d3:bc:2e:f4:2d:09:8c:95:4c:a6:d9:2f:63:
                    71:ca:13:d1:d0:5c:1c:65:06:4b:55:c7:12:64:b7:
                    66:7a:ba:da:db:51:6e:7d:2e:ff:b1:9e:d4:22:2b:
                    7a:21:97:86:db:b9:cb:69:41:c8:1e:c0:26:c6:a0:
                    e1:88:5f:8f:b9:cd:b2:2e:78:82:6d:c1:a1:53:9f:
                    af:0c:18:da:5d:6b:25:b4:53:73:36:b3:d9:ba:79:
                    f1:cb:0d:67:5e:4c:98:ea:4d:51:96:f6:58:b9:f6:
                    b0:d1:ec:ee:02:04:93:ca:f6:da:ce:2b:65:9a:2f:
                    6e:03:26:0e:a1:6d:a7:17:0a:cf:82:f2:60:ec:e7:
                    fd:35:34:c1:ce:df:0f:24:4d:52:66:b8:cd:ce:75:
                    b1:3f:49:8b:8f:60:cf:36:01:96:e2:3e:c7:d4:53:
                    ad:dc:c4:0d:6a:53:28:79:18:59:40:e8:f4:cf:00:
                    c4:24:90:84:40:c9:ca:f1:d7:5a:72:15:38:07:be:
                    8d:9b:0c:15:bb:d1:1e:e3:a0:eb:32:53:eb:f0:31:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:16:1C:A7:BD:FA:BA:85:D3:9C:C2:13:4D:D7:CA:6F:DE:C2:37:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1fb86e2-2789-3d86-8ef0-47c3a18a6bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c0:a1:29:01:66:42:84:32:c8:f3:0c:6c:ed:b3:fa:cc:ce:
         1a:38:33:69:34:e3:54:c4:51:23:a9:65:7b:bd:af:a3:47:20:
         dd:b7:1f:4b:39:28:6c:64:19:43:49:55:98:cb:d6:4a:40:1b:
         ea:a7:05:31:2e:05:42:ec:49:6e:7e:ce:59:b9:6d:22:d1:2d:
         68:44:2a:b3:32:a7:7f:71:aa:39:21:1c:70:07:0d:36:5d:79:
         95:c6:a1:e2:ed:fd:3b:43:99:42:8f:39:ba:af:a0:15:3f:b6:
         92:81:39:32:c0:c1:e0:27:24:7c:da:4b:b6:93:62:38:c7:92:
         e9:44:6f:41:25:e7:84:06:25:ce:51:5a:4b:fb:18:ee:92:16:
         8a:cd:0e:0e:09:04:f3:c7:21:97:3d:ab:5d:66:c8:c5:4c:40:
         21:59:a0:b7:ff:6c:8b:ee:ae:f5:05:1b:06:45:54:41:a3:60:
         71:2d:83:9b:b5:4b:c6:fa:d7:6d:1d:3d:67:1b:9c:db:ad:eb:
         27:27:2a:95:f1:13:cd:a6:8e:5e:15:71:23:cd:36:fa:f2:8b:
         4d:a6:6b:43:9d:b1:65:51:8b:aa:35:de:7c:61:c3:3e:4f:49:
         3d:dc:e9:b7:ed:68:2c:4b:6c:64:a2:ae:0a:ab:49:da:42:35:
         41:3d:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:16 2025 by rpki-client