Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/e293fb23-fe2f-324d-8419-24162f79f58e.roa
File:                     e293fb23-fe2f-324d-8419-24162f79f58e.roa (raw, json)
Hash identifier:          4+FqTcyPV+prJx2R+AaP+hLhAOJ5B44qFE0C5Cd83pA=
Subject key identifier:   A4:74:26:C9:1E:8C:10:73:EC:C3:40:C9:72:18:99:F4:C3:95:F4:45
Certificate issuer:       /CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
Certificate serial:       010D0C9F4328584A71EB4CC8B392D229BEF40A80
Authority key identifier: 41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/e293fb23-fe2f-324d-8419-24162f79f58e.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        162.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:4c:c8:b3:92:d2:29:be:f4:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=db267357-024e-4a50-9433-71aa915c963c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:4b:fd:23:c0:6e:cc:fb:db:1b:07:8a:fd:
                    96:28:f7:77:69:cc:00:cd:3d:c3:c0:8a:ab:0d:cb:
                    d9:14:5d:94:9a:1c:52:58:37:45:6f:fd:6f:22:37:
                    0f:34:e6:cc:17:87:93:a0:2f:76:e8:db:45:d0:4b:
                    98:9a:e6:14:3f:f3:1c:49:61:51:2b:24:ac:93:cf:
                    bb:38:2f:6a:ee:f7:c6:cc:e9:7c:ab:7e:ea:8d:5d:
                    98:91:73:1b:85:25:42:c3:d9:c4:96:26:8f:91:a7:
                    ec:28:67:09:2e:0b:d6:5e:42:a3:c0:90:32:fd:cf:
                    cc:97:ae:54:46:a8:0d:5d:bb:db:3c:87:22:89:97:
                    ea:58:cc:b7:c5:ab:7f:40:0e:38:cb:95:b8:10:43:
                    c2:6b:f5:65:2a:ad:45:a6:fc:b6:e9:b8:c3:9f:f6:
                    3b:0c:c5:40:9f:67:ef:3b:61:ad:bf:fb:c3:96:b0:
                    c1:fc:37:7c:0b:86:65:8e:ff:ae:01:91:5c:5a:2c:
                    75:b3:d3:ff:1a:8e:60:cc:82:fd:da:5f:46:88:0d:
                    c2:ef:ec:53:d3:f9:98:ff:94:20:9b:c3:2e:18:e0:
                    60:ec:45:56:91:86:40:a6:20:0e:bd:50:5c:a3:b9:
                    3d:dc:7e:12:49:3a:57:b8:13:8d:99:d2:27:86:33:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:26:C9:1E:8C:10:73:EC:C3:40:C9:72:18:99:F4:C3:95:F4:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/e293fb23-fe2f-324d-8419-24162f79f58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl

            X509v3 Authority Key Identifier:
                keyid:41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:cb:66:b8:a4:cf:65:c3:32:aa:02:d8:75:d8:0f:c9:c8:a7:
         95:0e:4a:6a:ae:cd:b4:a2:d0:14:f4:44:cd:9c:dc:ed:40:54:
         fb:da:28:6f:4a:f9:79:ec:43:fe:a2:08:2d:d1:c4:06:3c:1e:
         51:61:10:07:fa:0f:bc:f6:05:5c:46:fc:22:b3:b3:c3:c5:92:
         79:c3:01:5d:4e:89:2c:b6:7c:27:a8:fa:b3:f6:db:d2:f3:cd:
         8c:9e:c6:e0:43:a0:2d:3d:f1:0c:e2:84:28:98:21:f3:0b:f8:
         55:c1:48:0d:6c:d8:e4:ee:ab:4f:dc:23:63:10:5a:ab:97:f1:
         8a:85:17:f8:c9:3a:72:6c:53:93:08:cb:b4:46:9e:2e:56:6e:
         4d:d9:22:cc:3a:0e:0f:0d:a4:2b:94:75:49:ec:a2:8c:5d:7a:
         87:b7:7d:ce:35:66:b1:96:f0:6f:00:e6:c4:8e:3f:cc:95:8f:
         60:48:7c:9e:a2:d0:3d:85:c4:e2:9d:bb:46:8e:47:9e:a7:83:
         7b:bd:fe:e6:dc:4a:d9:04:d4:9a:1c:b1:88:01:23:00:70:f4:
         ef:c7:c6:9d:1f:a3:89:45:49:03:9c:54:3c:90:83:64:d2:3d:
         79:61:7a:9e:43:d7:10:15:5a:65:48:7d:76:1d:39:85:cd:08:
         f0:97:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:31:29 2025 by rpki-client