Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5bf2ab81-bf2e-33c9-94ce-94b9c5e1c449.roa
File:                     5bf2ab81-bf2e-33c9-94ce-94b9c5e1c449.roa (raw, json)
Hash identifier:          sro0ugXIZ6mml0+NcWYzfxRWf1Xw1aE0ioZMMtkEm/Y=
Subject key identifier:   BE:55:A3:83:D9:DF:50:B2:4F:9F:57:6F:21:A3:EB:4F:C4:A6:A4:83
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584B38218D12ED387FA826D8DB40
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5bf2ab81-bf2e-33c9-94ce-94b9c5e1c449.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        162.215.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:8d:12:ed:38:7f:a8:26:d8:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=14b1fc9f-a516-4193-b1f1-32238901347a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:59:f7:ba:b1:27:f2:23:cb:20:b7:0e:3b:
                    7f:91:f9:a2:62:18:2e:fd:53:88:ae:7c:24:c7:f3:
                    cf:f9:00:ae:ef:80:2f:a8:b6:06:88:2f:2e:3a:c4:
                    5f:78:41:eb:d6:92:d2:ee:0f:5c:f5:89:97:e7:77:
                    a3:61:98:13:7e:29:36:a7:11:64:08:a4:ac:a5:d2:
                    25:0a:0b:05:2e:fd:89:30:8c:6b:10:69:e0:08:8b:
                    d1:7e:9a:cd:6a:69:b6:03:9b:56:60:71:24:87:8a:
                    bd:e2:1e:dd:07:76:57:81:a5:67:07:db:c5:b7:42:
                    1a:29:e3:e5:af:85:49:8f:59:8e:76:4b:cb:c6:64:
                    83:dd:79:61:15:81:19:ae:95:11:a4:a1:e7:2c:53:
                    72:46:06:d4:ce:7f:da:21:83:5b:0f:92:01:bc:7a:
                    4a:1b:4a:19:b8:99:d0:da:b4:24:be:87:66:28:91:
                    47:7b:34:c9:3e:cb:42:25:3c:65:51:1c:94:af:38:
                    42:27:08:bf:ad:d7:db:20:d8:df:20:0a:72:90:51:
                    cc:fe:8f:80:b0:3d:76:31:b1:6a:ff:fd:9e:34:d1:
                    c1:28:c7:52:f4:fe:e9:98:0b:7c:9c:38:6f:85:40:
                    a9:66:22:b5:bc:e8:1f:4e:9a:32:db:41:8a:14:67:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:55:A3:83:D9:DF:50:B2:4F:9F:57:6F:21:A3:EB:4F:C4:A6:A4:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5bf2ab81-bf2e-33c9-94ce-94b9c5e1c449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.215.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:64:cc:e4:92:05:d7:d9:31:a8:cb:a2:0b:7a:a3:c3:a6:65:
         97:e2:00:c6:ce:53:2e:68:38:b2:1b:d4:65:ba:6e:cd:27:26:
         aa:de:3b:9a:9e:78:80:d7:d3:22:f2:13:e1:73:73:bf:e3:47:
         c5:28:b9:7d:bb:6d:98:4e:b7:2d:2c:20:2d:90:94:06:84:c6:
         af:56:d4:ff:04:d2:9a:2e:f6:74:79:53:0a:fd:59:dc:9f:fb:
         d8:29:d1:0e:79:a2:03:5d:b3:d4:9f:27:5c:67:03:f9:8c:6b:
         80:8b:60:aa:8e:8a:58:fd:ff:db:95:e9:33:90:6c:46:a1:80:
         b5:c6:ba:01:ec:49:01:b5:1d:83:b2:4c:21:3c:d4:d9:f2:2b:
         ce:fb:09:55:f7:ef:89:66:ab:22:84:1f:a7:33:0d:3d:fb:5b:
         1e:3f:21:7e:35:89:1f:a0:23:49:07:71:10:a3:4c:25:c3:b3:
         3b:13:80:b0:c0:79:00:7b:ca:ea:c5:67:e7:c8:b8:d6:99:63:
         70:72:86:b7:28:77:6b:25:42:5b:68:b6:80:01:c3:45:a7:b8:
         33:af:53:95:1e:8d:8c:d2:b5:1c:4d:43:3b:1a:0d:06:59:49:
         f7:6f:1b:93:94:3f:38:d8:96:85:7a:d1:24:4d:e9:4c:fb:63:
         64:96:58:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:12 2025 by rpki-client