Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
File:                     fc0068d0-a6ed-3e6d-8858-d68416365766.roa (raw, json)
Hash identifier:          riw3hSsynpQHC4dJPVY8/i9tORGtZJB6ps2oS6QB/tU=
Subject key identifier:   10:4D:76:CB:5B:43:9A:34:19:7B:D8:7F:78:70:FB:00:E7:9B:9C:27
Certificate issuer:       /CN=7770be2f-95a3-43e4-a139-53984564db4a
Certificate serial:       010D0C9F4328584B2496CBA171F5D05E4E25D0E0
Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        162.213.204.0/24 maxlen: 24
                          162.213.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:cb:a1:71:f5:d0:5e:4e:25:d0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=228060b4-2a4f-44d0-8ef5-ecd3bbddcfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:9c:b7:ce:ed:56:f9:78:1a:bc:de:0d:46:
                    af:02:22:86:6e:3b:c6:b9:ca:ba:1c:df:03:68:1f:
                    ee:0f:3b:e7:1c:29:4b:a4:97:3f:12:60:8d:50:b1:
                    2a:2b:76:a6:25:86:3d:eb:49:9c:4b:d6:cc:fe:09:
                    c2:72:6c:86:02:39:85:dc:d2:51:af:7b:69:83:bb:
                    8b:f6:31:0d:26:c4:f0:31:2b:4f:17:b1:02:5c:11:
                    03:cb:ff:cf:36:b5:27:98:11:ee:75:c0:47:9f:d9:
                    bc:ed:48:2c:ef:c2:f1:7b:6b:e6:ff:5b:a8:00:0f:
                    60:fc:b1:a9:bd:7d:8d:84:c6:dc:b0:5d:9c:2e:6d:
                    53:af:ca:d5:ac:df:08:e6:8d:84:33:5b:c4:a2:a1:
                    33:e2:cf:f6:be:6f:03:45:9d:8d:71:33:58:6c:0b:
                    ed:04:65:f9:62:98:76:61:6d:47:06:c3:50:1d:3e:
                    d3:09:52:89:74:9e:77:dc:30:7c:c4:55:f1:e7:07:
                    b1:f5:a0:ff:a3:43:55:ed:ad:76:30:26:7f:11:f1:
                    aa:4a:95:09:e6:60:59:c1:d8:56:14:65:24:09:68:
                    02:d2:31:23:3f:4d:76:7d:8a:f8:cb:12:68:6c:a8:
                    14:b6:2d:9b:27:bb:02:47:c2:a7:fe:b9:9f:c6:92:
                    82:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4D:76:CB:5B:43:9A:34:19:7B:D8:7F:78:70:FB:00:E7:9B:9C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:8f:19:c9:e3:8f:f2:cf:dc:c3:c2:a3:3b:eb:7f:33:0f:3b:
         c5:6e:a4:e8:82:c2:71:a7:00:db:b5:9c:5c:a4:db:f5:f2:87:
         6a:f7:db:f1:93:bf:18:9c:0f:da:f4:95:8f:24:82:ad:d9:c0:
         0e:fb:bc:34:3b:7a:e0:c4:10:bb:68:b2:c3:37:9e:83:ad:d6:
         89:fe:4d:60:55:48:99:4b:dc:69:12:81:15:b2:1a:58:62:bc:
         1e:ef:44:d5:15:7c:d3:bd:df:a7:72:f6:59:f2:ce:34:23:ac:
         93:cd:4d:f3:6a:e6:a1:d9:c8:89:36:9c:ef:27:e6:85:8f:6f:
         e5:fb:2a:77:6c:b0:fd:33:d6:b8:12:d3:e2:88:cd:b0:ce:32:
         d2:02:eb:47:b2:90:56:cb:15:8e:9b:cd:51:d6:5c:ba:7c:6a:
         9f:13:41:cc:4d:3e:5f:7d:cf:1d:02:7b:f3:4d:b2:5c:d1:75:
         8f:10:cf:f0:a7:c5:58:e6:74:30:4f:c8:6f:60:3b:10:1f:bd:
         5f:e2:52:a6:f5:87:ea:71:a3:47:96:60:5f:01:71:f5:3c:cc:
         7d:ef:11:7d:35:0d:74:06:6d:1b:03:7d:85:5d:f9:0e:e0:49:
         12:63:ef:52:cb:8e:10:5f:50:95:83:b3:ed:5a:63:26:d9:b2:
         19:6b:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:58 2025 by rpki-client