Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/1986b36a-53c5-3448-96bb-3d16aa321a66.roa
File:                     1986b36a-53c5-3448-96bb-3d16aa321a66.roa (raw, json)
Hash identifier:          15R1/g0e+j2e1pflB31KXt6YiGJBTGzp09awkBaWdXo=
Subject key identifier:   C5:27:DD:1B:99:4E:C8:13:D7:8D:4B:59:51:90:CE:C9:77:CC:5F:C1
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584B891762EAEEA3AB8A617281C0
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/1986b36a-53c5-3448-96bb-3d16aa321a66.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     13807
IP address blocks:        72.8.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:62:ea:ee:a3:ab:8a:61:72:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=26d3da08-1a4e-4e55-a117-caafe8afb2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:36:0d:b0:01:42:94:48:f4:4a:81:c7:f1:cb:
                    9c:d3:e6:cb:46:52:4d:aa:8f:c3:40:45:62:b4:68:
                    01:a0:7a:6d:c3:a0:51:4a:55:e6:fc:c1:aa:2a:ac:
                    82:ca:58:ee:dc:62:4f:57:1c:43:b7:be:63:5c:14:
                    3c:cb:2e:03:e2:d6:f5:8f:d7:e8:37:0b:2d:5e:bc:
                    a7:f0:5a:4e:e1:00:a0:d4:99:2d:60:3a:f4:f0:60:
                    d9:9e:07:ab:0b:95:b0:43:9e:32:2a:7b:3e:71:94:
                    ee:92:31:5e:46:27:e3:f0:c8:32:03:4c:e1:49:b1:
                    d1:11:b5:31:f1:05:33:91:1e:23:f6:46:0e:2e:ab:
                    77:8c:f8:d5:03:ea:5a:4b:da:61:db:e6:7b:6b:0c:
                    a8:35:fc:bc:86:9f:bb:07:1f:ac:29:10:88:9b:bb:
                    94:b9:02:30:bc:cf:3b:ca:45:d3:e8:1a:c3:98:66:
                    e9:29:10:88:d0:d7:4b:ba:bc:b4:07:cc:62:d9:9c:
                    84:98:23:5e:24:7e:6e:a9:bd:60:70:de:4b:0c:24:
                    be:f6:e9:c9:34:3a:c6:70:60:3a:2c:5f:1b:59:f2:
                    09:ac:d4:39:e4:71:9f:cb:fa:64:c2:07:70:36:85:
                    b8:7b:ff:6b:cc:dc:e6:af:2a:3d:fa:1e:6b:6e:9a:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:DD:1B:99:4E:C8:13:D7:8D:4B:59:51:90:CE:C9:77:CC:5F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/1986b36a-53c5-3448-96bb-3d16aa321a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.8.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:f0:77:8b:d6:69:f6:09:d7:e2:6b:0e:47:8b:d7:fe:18:d3:
         7a:85:c0:55:cd:ae:bd:d1:a4:fd:83:31:e5:32:df:0a:a4:01:
         e6:df:0e:ea:8b:d6:35:6a:89:58:7e:d2:ee:06:d6:2f:1b:8e:
         88:9a:40:71:2e:2d:c6:f5:c5:9b:88:2e:55:f3:e8:9b:45:31:
         fa:eb:09:d7:a2:e4:18:73:38:2d:e3:ae:46:c6:89:bd:5d:55:
         df:ba:14:02:ef:9c:12:51:48:16:5b:13:c9:70:31:0f:4c:73:
         19:b6:59:bf:9a:d8:35:0a:39:86:e1:c1:06:76:db:b1:2c:da:
         f9:9a:65:b5:d3:61:48:68:0e:ec:36:f1:f6:e6:7b:d5:d6:9a:
         fc:9c:ed:2c:41:75:99:52:e7:84:9f:fd:77:2d:15:ed:58:d0:
         fe:34:66:a1:c8:7a:33:3b:06:e1:b5:8b:a9:67:10:11:12:6e:
         d2:ac:d2:b5:64:80:4d:88:1a:33:19:20:9c:e8:da:3e:45:3c:
         34:29:cd:29:36:0b:b2:97:a3:da:a7:ad:71:5c:0d:3f:7b:74:
         3a:e8:3a:6e:9d:f3:2b:b0:a5:fa:17:e4:dc:f9:35:3e:f2:9a:
         c3:a2:ac:8b:f6:63:d9:98:21:c6:e0:5b:2b:25:65:a2:85:dc:
         b0:05:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 13:49:51 2025 by rpki-client