Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e78fdcba-2c95-3da0-97f8-cd5674b247ff.roa
File:                     e78fdcba-2c95-3da0-97f8-cd5674b247ff.roa (raw, json)
Hash identifier:          boZgytltsp3aGi1r8+lPp59tDY21VQe3kF9S8KjKqy4=
Subject key identifier:   2B:F5:11:EC:08:DF:EF:D3:B3:05:89:63:2B:CE:56:B1:BF:4E:FD:D4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B4081E19F983FBA16B03A0980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e78fdcba-2c95-3da0-97f8-cd5674b247ff.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     401152
IP address blocks:        168.93.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:e1:9f:98:3f:ba:16:b0:3a:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=e813f252-a8e7-4037-a203-7802ef3205b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:51:b3:80:60:18:48:2f:40:7f:d2:b5:93:
                    05:51:df:56:28:e9:80:bc:ee:ac:cb:1c:b9:cd:f1:
                    83:12:02:9d:bc:d4:d8:fc:e7:ad:46:b3:28:ef:00:
                    a7:bb:c7:61:6f:a8:7c:bc:5f:4c:ac:35:f0:81:7c:
                    45:47:5f:c6:32:50:12:5e:18:d4:f0:6e:c4:cd:65:
                    9d:67:fd:d9:ed:6c:53:97:db:41:e4:9b:9a:4a:e2:
                    58:78:1a:3b:16:c5:5d:81:68:7d:e6:7e:99:db:b6:
                    94:6a:3d:95:58:fd:ff:2a:2d:7d:8b:20:51:71:67:
                    87:0a:bd:a7:fa:2f:0a:3f:e6:c6:4a:27:1f:fc:25:
                    33:c0:f5:f3:fd:6b:1b:ce:61:d3:96:54:a4:c8:ff:
                    ae:13:5e:e7:65:9a:69:b2:70:b1:83:c1:c4:c0:a4:
                    12:98:b2:8a:8f:c6:e4:fc:7a:69:2b:80:96:20:28:
                    8f:df:59:54:14:e6:bc:17:c9:5d:05:02:df:00:bd:
                    cd:fe:01:ed:82:26:0f:c8:28:3f:03:73:3a:95:82:
                    a6:b8:d6:c1:19:17:18:9f:f8:2d:36:b5:3e:06:13:
                    a2:88:83:20:1f:8c:69:76:08:5b:c5:94:68:a1:4c:
                    8a:11:d1:68:92:db:cf:4a:da:85:09:bd:16:33:4f:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F5:11:EC:08:DF:EF:D3:B3:05:89:63:2B:CE:56:B1:BF:4E:FD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e78fdcba-2c95-3da0-97f8-cd5674b247ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:57:38:89:9b:1c:7f:d2:64:b7:ad:2b:4f:30:83:a0:ce:dc:
         54:9d:fb:4a:e8:52:80:d1:03:38:8b:7c:06:a3:6a:d6:78:46:
         53:3d:d2:2e:c1:e1:60:db:49:96:ad:75:2e:ee:29:41:67:9c:
         35:c8:06:95:51:2e:61:fd:bb:74:49:c4:51:c3:b2:77:c8:8e:
         98:ce:19:30:9c:67:4c:76:2f:78:d1:39:87:24:98:8f:d0:d0:
         ba:62:35:c9:50:56:f9:6f:b8:b5:45:14:a1:da:c3:af:e3:bf:
         d3:51:4d:f5:98:25:5e:5e:de:73:5c:5b:c7:d8:a1:22:71:e1:
         9b:21:9b:e8:34:6c:ea:a8:44:46:52:77:da:ce:7b:ce:84:91:
         e6:ad:7d:58:78:27:ad:31:98:82:ec:9b:2e:c2:12:b0:70:e7:
         d9:f3:af:12:a3:01:45:cc:52:36:27:ce:d1:31:a0:01:57:a9:
         26:1b:36:70:0c:bb:32:80:a6:2f:f2:ef:ca:d5:3b:f5:71:1d:
         b7:bc:70:d7:98:6e:55:f1:ea:b0:94:2c:e0:a1:03:09:31:ce:
         e6:8f:16:10:8f:93:e2:19:6f:34:33:65:39:cc:a9:5d:b7:6c:
         60:67:96:55:60:9a:9b:8a:3b:49:e3:a1:c5:94:36:40:9a:43:
         5f:78:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:46:45 2025 by rpki-client