Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa
File:                     adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa (raw, json)
Hash identifier:          YE0VsinFjkFnZwIZ3UWOBazBMNKQOAEmFpVnCrU3UDQ=
Subject key identifier:   66:6D:FC:48:F3:35:F8:19:98:F8:DC:C6:C6:ED:C2:2D:A0:C4:AB:E8
Certificate issuer:       /CN=0457dcf9-b13b-4e0f-b761-d109e41cd945
Certificate serial:       010D0C9F4328584B01B14A0F33764C5CD75DD280
Authority key identifier: 5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     393301
IP address blocks:        162.248.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:4a:0f:33:76:4c:5c:d7:5d:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0457dcf9-b13b-4e0f-b761-d109e41cd945
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=d33a8e75-226a-4d33-a479-0585c0607cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:7b:24:8a:f8:fe:a4:09:df:22:b5:fc:fa:
                    17:01:1f:c9:3e:5a:3f:8d:64:a8:aa:ba:8f:c6:76:
                    a5:b2:8f:6b:c1:11:38:e5:44:18:d1:3f:5a:1c:3e:
                    11:22:1a:bc:f4:02:5b:c7:4c:a4:ec:dd:f3:42:9b:
                    0a:35:99:85:bb:f1:5f:5e:6c:e2:10:1c:04:39:07:
                    87:c8:56:25:f8:7b:59:3a:f2:fb:14:cd:7c:02:19:
                    4e:99:83:59:31:11:30:d1:69:f2:2a:a8:a7:cd:dd:
                    2e:ff:61:b4:42:16:6f:d3:d8:22:91:6e:65:90:b1:
                    66:71:fe:ee:35:89:a8:82:35:80:bc:62:fd:0a:64:
                    5d:a1:52:b1:a9:54:f5:0e:f4:6c:70:e4:67:06:c8:
                    00:c7:12:65:7b:16:69:eb:6a:de:8d:08:77:2a:9d:
                    a0:e3:0c:8e:dc:08:a8:01:d5:5c:5c:f8:e1:08:44:
                    39:38:55:07:70:45:9a:7b:a4:3d:f3:6a:00:8d:8a:
                    b5:2c:2f:a8:91:a1:b9:af:9d:88:e4:42:e3:38:63:
                    77:15:95:12:d3:7b:bf:87:95:28:06:4c:44:18:91:
                    3e:34:10:52:2c:14:85:ed:1b:88:3d:dd:65:d5:6e:
                    34:a2:f9:4c:d9:d7:93:37:c9:6c:31:f9:b6:2e:68:
                    dd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6D:FC:48:F3:35:F8:19:98:F8:DC:C6:C6:ED:C2:2D:A0:C4:AB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:fa:fa:30:d0:db:1d:05:3e:ee:42:da:62:e1:c4:0d:b3:
         17:d9:24:b0:73:19:05:2c:af:56:91:5f:c9:76:51:86:93:e6:
         96:ef:0a:1c:3d:e4:33:bf:65:b9:1f:b1:ca:6d:2b:ed:21:0e:
         17:07:cb:88:e0:08:f3:ab:dc:50:0b:05:38:79:b5:2b:ca:32:
         0c:cc:dc:b1:a1:94:16:5f:04:43:5c:73:8d:3c:70:39:3e:6d:
         6f:3d:5c:22:c9:ad:b1:12:08:9c:51:1d:84:56:61:8e:c7:44:
         56:18:b2:6d:09:21:78:e1:c0:a3:f1:25:47:08:ad:c6:21:63:
         df:fd:c0:b4:65:54:33:37:cf:76:6a:54:d9:bf:a9:b1:cb:e8:
         7b:3a:b4:07:cd:54:ec:fc:49:77:de:b0:3e:80:77:8a:cf:27:
         10:27:d5:91:00:d0:56:bf:dc:d5:cf:93:0f:a0:d7:80:81:de:
         a2:5c:23:d8:ec:8a:b5:33:e4:19:4a:7d:97:ec:4c:8b:b3:58:
         a6:ac:0a:42:56:7b:9c:fe:97:38:9d:bb:93:b5:4d:60:3c:2e:
         db:c5:a0:fc:9e:59:3c:35:4c:17:1c:94:62:61:62:7c:a3:bb:
         03:15:c2:e4:0a:e7:00:c4:57:60:9e:52:95:97:b6:aa:25:df:
         9d:50:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:09:11 2025 by rpki-client