Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/95f9b86b-9416-3389-ac87-c3210bde5d0a.roa
File:                     95f9b86b-9416-3389-ac87-c3210bde5d0a.roa (raw, json)
Hash identifier:          pdAAb71By9lAMG7zC9lPOZRcj5zonxgYmcwT0I2aNDQ=
Subject key identifier:   21:70:19:13:32:96:64:B8:A9:DD:EE:19:74:45:53:A1:FF:B0:00:47
Certificate issuer:       /CN=7770be2f-95a3-43e4-a139-53984564db4a
Certificate serial:       010D0C9F4328584B2496CB899F9F83CF4B7AA700
Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/95f9b86b-9416-3389-ac87-c3210bde5d0a.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        162.213.204.0/24 maxlen: 24
                          162.213.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:cb:89:9f:9f:83:cf:4b:7a:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=51c65ccc-900d-4bfa-a794-9fb614606ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:52:e0:8c:77:bb:d1:a1:f2:3a:26:f0:ee:
                    f2:bb:fa:0d:4c:d9:09:fa:30:9b:48:c2:b1:50:08:
                    0f:ae:d5:62:3b:55:ff:1c:a3:eb:d1:c0:35:e0:25:
                    af:d0:5e:4f:94:eb:44:8a:eb:eb:e1:b6:0c:66:56:
                    31:d5:ee:47:38:0b:62:dc:13:c5:b9:ec:e3:39:69:
                    80:1c:b6:d0:9a:e7:68:c7:f9:e7:99:dd:4f:3a:c3:
                    75:84:57:c1:27:0b:9e:ff:c9:a9:3c:cc:67:64:37:
                    a5:2a:9a:d4:2c:38:2c:9f:60:d6:0f:7d:60:57:93:
                    1d:b5:51:82:dc:37:7b:04:3a:49:ec:02:49:52:2c:
                    45:14:51:b7:00:72:50:42:64:fc:89:b4:84:3a:c0:
                    9a:89:68:b2:bb:2e:00:9a:bb:d2:b1:f4:ae:6c:ca:
                    75:4f:02:5a:fd:2e:4a:b1:dc:6d:be:5f:fb:c3:b0:
                    2a:d7:ed:b1:78:42:39:fe:f9:31:b9:4a:87:13:34:
                    c6:7e:1f:01:b6:02:14:95:96:ad:89:92:79:ac:11:
                    4b:d5:db:aa:92:f2:b3:3c:8c:4a:56:85:5e:82:a4:
                    d5:3f:05:08:75:ff:0b:59:b1:41:b3:8c:19:29:db:
                    f7:02:66:9d:e4:ee:03:25:ad:74:b4:65:31:e9:c7:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:70:19:13:32:96:64:B8:A9:DD:EE:19:74:45:53:A1:FF:B0:00:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/95f9b86b-9416-3389-ac87-c3210bde5d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5b:f9:60:56:ac:2f:38:20:70:20:a0:62:3a:29:92:6d:a8:
         4f:65:a9:6a:4c:53:cf:e0:fb:6f:96:06:b3:3b:0a:3d:e6:a9:
         64:40:50:1e:da:a2:c5:db:0b:f2:13:e0:d2:d1:b9:01:d2:1e:
         16:42:51:a6:da:92:56:4f:e0:0f:7b:88:ba:a2:3d:06:df:cf:
         72:66:19:3a:a5:5c:76:45:f7:7a:a9:94:b9:1f:67:50:07:7f:
         12:44:3f:c3:9c:d6:c2:c3:c5:d3:3b:b1:46:37:37:bc:24:3f:
         16:95:b1:11:77:01:e9:66:a3:d5:61:85:96:62:24:69:09:9e:
         c6:2e:fd:54:e0:f7:ff:03:e1:36:fe:6d:f3:20:79:9d:1d:c0:
         54:f0:ac:64:fc:5c:bd:bf:6c:96:0c:d9:e0:8c:a5:23:b7:16:
         99:df:3c:23:10:0b:08:02:4d:b3:4f:7c:38:53:f7:15:e3:eb:
         41:66:86:5e:bf:ba:81:c3:a8:b9:39:96:9b:a1:8d:0e:96:44:
         b0:4e:5c:61:32:8f:ad:ce:b4:78:d4:98:bc:0f:50:ab:3f:6a:
         be:fa:78:2a:be:7a:21:40:a5:19:0f:22:4f:c2:17:3e:6a:11:
         68:37:17:31:36:d5:73:6a:2e:48:4c:b4:be:2f:2c:fd:ac:26:
         5e:b4:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:15 2025 by rpki-client