Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/69f267a7-9e5c-3ab1-bdd0-d1e33746d525.roa
File:                     69f267a7-9e5c-3ab1-bdd0-d1e33746d525.roa (raw, json)
Hash identifier:          3KdhqhTDh9+U/9tTh2YZzsFvhXjgaCYU3JNHCuEhRLI=
Subject key identifier:   98:3A:B1:AD:3D:E9:5F:D0:70:AD:6F:07:0C:A7:AC:21:2F:44:AB:2B
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584B5F372ADA0C9925B027B2949A
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/69f267a7-9e5c-3ab1-bdd0-d1e33746d525.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     33635
IP address blocks:        162.255.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:2a:da:0c:99:25:b0:27:b2:94:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=cf104b03-411d-4349-bdff-f8423fbb4057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:6e:f8:62:ca:4a:56:6a:76:6f:92:5c:d2:
                    bf:d2:56:0c:25:da:dc:f3:80:cb:21:2b:75:1e:1a:
                    97:d7:95:41:22:33:f3:a9:60:de:24:31:a7:b6:65:
                    0a:84:b0:ae:1a:73:1a:61:1e:b7:0f:2c:a9:ec:8b:
                    25:57:6d:c0:a3:56:eb:37:98:c9:46:23:2e:8b:1b:
                    33:b9:a8:f0:71:7e:a8:fb:6e:f1:8c:25:68:da:1b:
                    d7:58:1f:95:6b:5c:de:75:ba:2f:9f:d0:c7:95:2d:
                    9e:f1:e3:90:50:cf:7f:ed:20:6c:41:35:c3:28:7f:
                    41:6c:5f:31:de:9c:87:86:ba:02:34:d0:aa:8d:11:
                    e7:3d:01:9c:7b:ba:49:57:9a:32:de:9c:4e:5b:e5:
                    a9:fb:0c:86:43:ac:ed:67:97:40:08:fe:e2:05:2b:
                    ac:77:40:dc:9a:8f:63:4b:cf:b0:07:81:0f:cd:06:
                    08:c6:bf:5c:d7:94:5e:b1:b1:df:c3:e4:76:97:ad:
                    73:fb:78:06:65:02:4d:e9:99:92:d5:ca:6c:88:ef:
                    41:5d:6b:62:ab:ab:f1:2c:4a:3f:03:8a:f5:1d:ac:
                    c4:29:cf:e9:9c:11:81:d0:68:dd:4b:f6:78:10:92:
                    0c:da:5b:37:a4:88:e4:24:b7:bc:b7:64:11:b8:33:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3A:B1:AD:3D:E9:5F:D0:70:AD:6F:07:0C:A7:AC:21:2F:44:AB:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/69f267a7-9e5c-3ab1-bdd0-d1e33746d525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:cd:c9:9c:86:c3:ce:01:b5:a6:ad:da:48:4b:fd:f7:ba:
         4f:d4:50:79:72:a7:5e:99:de:02:19:d9:bd:d0:65:50:08:79:
         dc:9a:f4:a8:5d:44:5c:8e:30:92:a5:2c:21:33:9a:3c:d5:66:
         5e:9d:83:c1:72:85:4c:2f:b4:c3:20:33:64:71:88:65:67:a2:
         ab:e5:c4:5a:2a:9c:92:e8:84:10:af:ae:76:a5:7b:39:73:22:
         bc:fc:55:d2:a7:c9:3c:a6:83:1c:ab:a9:79:e2:4d:8d:29:ca:
         cd:0c:c3:44:03:59:cd:4f:f0:e7:e6:42:79:69:79:c4:6e:8c:
         4e:d6:0f:29:67:54:53:7d:da:54:84:60:e0:d7:9f:bc:30:33:
         19:58:a5:26:4a:78:e8:20:b4:ee:1a:64:4e:d6:b8:0e:4f:bb:
         b8:79:1a:38:12:3c:a5:cf:a7:08:23:d0:7d:54:04:84:dc:30:
         ef:a0:24:17:93:cc:5a:bc:57:16:c4:05:03:e8:3e:70:87:7e:
         00:c5:b6:7a:06:ff:f9:8c:4b:3d:3c:f6:d0:3c:ae:25:25:66:
         16:08:0e:5d:03:20:39:13:4a:05:ac:a4:e4:8f:21:23:d6:c2:
         b7:b1:fe:96:1b:98:d4:86:0e:a2:92:6e:ef:96:f6:1d:a9:82:
         94:01:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:53 2025 by rpki-client