Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/be070d10-f5a4-3468-b574-f6ee7a234742.roa
File:                     be070d10-f5a4-3468-b574-f6ee7a234742.roa (raw, json)
Hash identifier:          FS3Ar7+DmmsNMxH1JC+xTD81MMNzGf7i77pRr5rbWuo=
Subject key identifier:   E1:8F:84:9C:C7:23:E6:B5:EB:19:FC:BD:70:C3:D2:E0:31:98:D2:D8
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584A5FC5E74EC306300DE4A7720A
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/be070d10-f5a4-3468-b574-f6ee7a234742.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20253
IP address blocks:        162.222.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e7:4e:c3:06:30:0d:e4:a7:72:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=41507303-79f4-4d65-a9e5-f4c50ca7a79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:4b:4b:57:9a:60:15:53:da:0e:16:53:ed:
                    46:a0:f4:44:e4:08:cf:ac:96:6f:3d:3c:be:d6:e5:
                    ae:38:e6:8e:e6:96:c2:52:62:67:30:ac:d5:b0:41:
                    65:e0:ea:22:94:0a:e9:99:29:cc:54:0e:2b:98:f7:
                    26:e6:fa:f3:69:8f:cd:e5:61:4d:26:04:18:82:ee:
                    2b:45:34:9e:9a:c8:d1:b0:7c:34:9e:73:1e:07:e5:
                    39:6b:52:94:32:6e:04:eb:16:77:75:16:e9:d2:a6:
                    c0:8a:d4:a3:4f:19:e1:48:42:35:19:02:37:ad:f9:
                    f2:96:07:67:8f:80:6c:73:bb:e9:d4:28:a1:7b:8e:
                    ec:39:5f:20:eb:34:1b:61:bf:fb:8b:5c:cf:90:0b:
                    27:e1:bf:8e:85:9b:52:78:fc:74:9b:cd:5e:72:7e:
                    14:78:87:39:14:68:c6:a0:98:0a:fe:27:53:e0:75:
                    c4:9e:dc:24:fe:07:56:72:f0:04:4b:50:2e:86:48:
                    9f:e8:f2:87:d4:56:75:03:43:55:3d:4c:0d:15:a4:
                    1b:21:eb:78:ad:af:4b:9b:a5:b0:9e:59:9a:61:37:
                    6a:be:cc:f6:07:a5:f5:d1:30:5e:51:18:02:49:70:
                    e1:a1:20:c3:79:f0:de:07:e8:3b:87:5d:12:e8:92:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:84:9C:C7:23:E6:B5:EB:19:FC:BD:70:C3:D2:E0:31:98:D2:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/be070d10-f5a4-3468-b574-f6ee7a234742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:82:c4:12:a4:af:03:2b:d7:be:b9:be:67:4b:52:b1:fc:48:
         cd:94:3c:3c:f6:38:60:aa:ad:24:57:b3:d8:49:76:59:e6:20:
         21:da:da:02:0b:45:24:0b:86:e7:f2:8d:e6:2a:7b:1e:f0:c8:
         1d:16:ad:63:88:8b:a6:a3:d6:9d:a8:58:15:d1:e6:fd:6c:fc:
         72:b3:d4:82:04:96:15:a9:3a:46:5f:3e:89:0b:3e:5d:f2:dc:
         24:97:eb:12:86:5c:40:70:a1:6c:11:7d:98:e8:21:d9:8e:75:
         2b:8a:2f:97:d4:e1:86:99:57:d4:94:63:27:b5:37:23:7e:6a:
         13:4e:24:74:e2:2b:87:3c:b2:ac:43:21:0f:8e:fb:fd:02:22:
         17:6a:b7:a8:02:57:a9:02:fc:91:51:28:5d:d7:9d:be:5f:6c:
         78:ca:d9:be:64:af:ee:6c:73:05:3b:d1:7b:48:36:e2:04:f2:
         b2:cb:a0:ff:c1:0e:cd:a2:0d:c2:77:8d:08:8a:24:63:e4:f5:
         d4:17:00:6b:76:7c:4b:dc:dc:6f:7c:d6:77:26:0a:bc:7a:7f:
         c3:d1:39:97:51:4a:69:28:9d:13:29:a5:ef:32:c6:c9:a3:4a:
         34:24:7c:8d:0a:8f:43:b0:fc:65:02:e2:2b:c4:6c:88:35:34:
         f5:60:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:00 2025 by rpki-client