Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/6a2becf4-b64c-3837-8052-3ccfab76ad3c.roa
File:                     6a2becf4-b64c-3837-8052-3ccfab76ad3c.roa (raw, json)
Hash identifier:          uEer06N9PXs6KWk+f/+Q26xuTEw+kDY5E7+RoZcvWnI=
Subject key identifier:   87:4E:48:00:1A:70:C2:12:A3:2B:4A:FE:4A:C1:29:76:60:E9:D7:F2
Certificate issuer:       /CN=86b37376-2d1b-4536-b941-7858431c5839
Certificate serial:       010D0C9F4328584B1AD1743D307CEADBFC53A600
Authority key identifier: FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/6a2becf4-b64c-3837-8052-3ccfab76ad3c.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     63225
IP address blocks:        162.251.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:74:3d:30:7c:ea:db:fc:53:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b37376-2d1b-4536-b941-7858431c5839
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=5504e9c7-899d-4c08-84ea-5fca675de754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:37:f7:2e:52:ab:9d:5e:a5:79:db:38:cc:
                    26:46:77:8e:e5:a4:b9:97:c1:ed:8d:d2:da:64:52:
                    40:24:f4:f7:2a:2a:6c:f3:96:9e:b5:cd:c2:fa:75:
                    8f:ef:40:e3:4f:91:21:e5:63:53:95:ec:1c:d9:56:
                    60:24:21:c3:0c:e8:22:97:16:4e:3d:75:d6:0e:2f:
                    9f:04:cd:32:9b:77:37:bc:1b:96:0d:f6:e4:e8:81:
                    c2:31:c7:62:94:10:fa:6f:49:91:50:dd:8d:6a:f4:
                    cb:ed:91:e1:48:44:ed:52:56:ed:ba:1a:c1:b1:d3:
                    0d:a8:9e:84:66:38:42:17:1e:1f:eb:26:ef:71:5d:
                    b5:d7:1f:d0:d8:55:75:dc:bb:b4:ba:87:81:d6:94:
                    e3:f8:50:be:19:b2:8a:8a:86:dd:ca:8f:a8:4c:01:
                    f0:2b:49:4c:c1:8f:d7:d2:59:ca:29:54:ef:28:fb:
                    cf:dc:7a:f6:09:1f:16:31:0e:f7:3c:aa:03:f6:f3:
                    ce:3c:0e:de:7c:a0:df:3f:e1:a4:6d:d1:02:cb:5c:
                    0f:87:dd:ab:dc:10:d1:48:57:66:62:92:16:99:53:
                    fb:f9:5b:46:a9:ed:96:00:0e:25:9b:5c:bf:bd:7f:
                    5d:17:eb:85:ef:6f:3d:18:ce:12:57:48:74:20:2f:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4E:48:00:1A:70:C2:12:A3:2B:4A:FE:4A:C1:29:76:60:E9:D7:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/6a2becf4-b64c-3837-8052-3ccfab76ad3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl

            X509v3 Authority Key Identifier:
                keyid:FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:31:a3:01:91:2b:0d:21:52:0b:35:c6:94:92:ca:0e:83:0a:
         c4:9d:c8:6a:84:aa:70:a1:e0:b4:d9:e7:77:99:ed:a8:2c:9c:
         e2:cd:20:02:20:67:94:e7:46:09:eb:39:a7:9c:95:9d:ed:ce:
         6b:00:e8:67:0a:67:70:15:27:80:a1:d8:90:5e:e0:eb:51:a3:
         db:d0:a0:9e:07:03:4a:25:57:94:ee:06:52:f6:aa:e8:9c:8b:
         c6:16:09:1e:75:fe:13:92:3c:c1:ac:c7:a5:c8:06:5d:d0:c7:
         42:8e:3b:82:b5:5d:f0:5d:41:76:c5:e0:ad:f3:e9:0a:48:8c:
         19:e0:ac:85:c8:db:dd:42:d5:4a:51:41:b4:83:6e:54:95:4d:
         3a:a7:2c:ce:50:a4:b3:16:c4:f3:c3:b6:d6:11:aa:bf:47:4b:
         ed:66:ec:0a:32:f6:43:1a:36:38:56:7c:e9:9c:3f:6c:0b:20:
         a8:0e:b4:96:a6:86:34:fb:65:8e:d8:18:05:38:fc:0f:a0:6c:
         87:9e:3f:76:1c:66:8e:40:01:d5:cd:37:03:c9:d4:67:81:da:
         ee:9a:65:44:a2:5b:7a:6c:4c:06:c1:34:db:2c:db:0c:8a:8c:
         3e:85:46:6e:ec:8e:4e:cd:b2:d2:69:21:0f:2a:a4:c0:d0:c5:
         1f:60:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:33:06 2025 by rpki-client