Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/a388aa1f-886c-34ab-87b0-133b348a887a.roa
File:                     a388aa1f-886c-34ab-87b0-133b348a887a.roa (raw, json)
Hash identifier:          wSXjiuQrJfgrJ364W/9rrWmsvSeNDWPrp4d5+lu39JU=
Subject key identifier:   23:43:86:07:40:4A:37:39:16:2D:23:21:37:AB:CA:E3:53:2F:84:A7
Certificate issuer:       /CN=39fea962-7ffb-4d29-beb1-e588e6436410
Certificate serial:       010D0C9F4328584B13D6AD93184802256DCFC570
Authority key identifier: C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/a388aa1f-886c-34ab-87b0-133b348a887a.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     394371
IP address blocks:        162.220.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ad:93:18:48:02:25:6d:cf:c5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fea962-7ffb-4d29-beb1-e588e6436410
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=6021fd91-181a-4fc2-994a-7438243ff4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:60:bf:76:16:62:4b:17:de:81:e9:84:3b:
                    51:7e:23:17:97:bd:92:0b:50:6e:e7:1c:a7:47:37:
                    37:e8:b4:10:4e:a4:55:dd:c9:7a:35:78:f7:26:d9:
                    7d:d8:ef:56:dd:42:ba:a1:e1:cf:cd:9b:80:3d:f6:
                    c8:15:3d:3c:cf:0b:dd:a7:54:61:04:ea:55:9c:b5:
                    ad:82:17:f2:60:73:a5:12:2a:88:6e:69:3c:cf:bc:
                    19:64:0c:d3:c5:94:ee:79:fc:68:b9:f9:55:ab:a6:
                    08:e7:de:b0:05:98:18:4b:11:2a:6f:7b:ca:bb:71:
                    20:56:7e:80:e7:da:16:8c:26:eb:5c:86:08:16:93:
                    38:48:30:bd:93:42:e9:4b:82:4e:bf:a0:c9:af:02:
                    5f:26:83:18:90:30:15:48:02:48:9b:ac:87:c9:38:
                    b1:81:e6:1b:bc:b4:c2:08:82:80:9e:3b:59:a6:da:
                    56:4b:1d:0f:0c:46:59:51:f1:14:65:95:9c:70:1e:
                    12:da:97:69:37:0c:ea:d1:3d:44:66:2f:43:d8:f3:
                    5a:d5:68:e4:c1:3d:d7:26:18:55:68:ad:31:fe:f7:
                    e8:d8:9b:04:2e:48:65:3c:f5:2c:86:cd:cb:49:52:
                    bf:04:10:f0:7d:e4:d4:2f:36:98:83:2b:c8:dd:8d:
                    02:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:43:86:07:40:4A:37:39:16:2D:23:21:37:AB:CA:E3:53:2F:84:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/a388aa1f-886c-34ab-87b0-133b348a887a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl

            X509v3 Authority Key Identifier:
                keyid:C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a4:8f:45:fc:23:e3:50:59:35:79:41:21:50:14:c5:12:4e:
         dc:ac:62:1a:85:25:2c:40:c0:ab:20:be:f4:10:ae:ac:fe:4d:
         a6:c9:05:47:8c:ac:ee:d5:fb:83:a6:77:5b:d2:d4:fe:d6:59:
         e3:84:01:8b:1b:b2:89:e3:c8:c7:1a:f2:22:14:29:d7:eb:d9:
         14:ae:74:12:62:fb:57:13:3d:2b:20:21:4b:f4:49:49:15:fd:
         4a:89:a8:3e:9f:da:ce:7d:de:7c:59:fb:9b:6d:2c:c1:1a:45:
         d1:22:9e:b5:5c:2a:4f:56:86:5f:c1:c4:f6:10:1c:6a:92:1d:
         f0:92:5f:0c:5e:c0:40:96:68:e0:81:cf:75:d9:c4:58:5f:f7:
         c5:13:f5:87:43:2d:90:b9:9f:28:39:55:99:1c:38:4a:eb:c7:
         29:f7:79:68:ee:a4:c7:01:65:df:cb:c4:87:a7:20:15:bb:42:
         a6:6e:6e:70:c0:97:9d:c2:f3:be:3c:fa:98:9e:17:d5:a6:5f:
         95:ba:c9:e7:d5:a5:3a:f3:b9:3b:ce:1a:ab:d7:a1:d6:82:97:
         c0:90:d6:8f:29:4d:94:79:15:9c:39:c8:e9:c9:8e:d2:ca:ff:
         6c:5b:c0:af:78:3f:8a:e2:9f:1e:7d:92:06:c7:90:45:8d:9b:
         de:2b:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:34:23 2025 by rpki-client