Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/2229c24c-5cbb-3606-87cd-8a75f11c1607.roa
File:                     2229c24c-5cbb-3606-87cd-8a75f11c1607.roa (raw, json)
Hash identifier:          QZxw6rl7pHs9IUcYE+c87Ezun2GWwmDIQkAjovU8J7A=
Subject key identifier:   7F:2E:BB:65:D2:4B:15:7B:2B:A8:71:0A:82:29:58:44:4F:7A:39:BD
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F4328584BD8C5BCC239A5709CBA65B880
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/2229c24c-5cbb-3606-87cd-8a75f11c1607.roa
Signing time:             Thu 13 Nov 2025 14:00:38 +0000
ROA not before:           Thu 13 Nov 2025 14:00:38 +0000
ROA not after:            Wed 11 Feb 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        162.212.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d8:c5:bc:c2:39:a5:70:9c:ba:65:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Nov 13 14:00:38 2025 GMT
            Not After : Feb 11 14:00:38 2026 GMT
        Subject: CN=009c8f18-8bfe-4e92-b0cf-8294cb796028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:50:87:fb:e1:aa:84:89:2e:4b:5d:2b:84:
                    7c:0d:75:7a:5b:16:2e:be:60:bc:b0:f4:d3:90:e3:
                    06:58:6e:05:fe:06:b3:5a:0d:f5:12:f7:00:c4:f7:
                    ef:d4:65:f4:bf:6e:75:1e:90:db:27:d5:6a:f4:1d:
                    6b:8f:10:0d:d2:fe:f0:79:b4:69:9c:ca:d0:13:ba:
                    91:35:bd:d0:91:66:1e:99:d6:17:c8:01:64:27:e9:
                    a8:c4:f9:f6:e9:38:02:88:10:4a:07:87:a6:33:6b:
                    0f:48:06:1e:14:bb:55:5b:d1:46:d6:93:b5:61:f3:
                    5e:d5:49:d9:c3:7e:0a:da:ad:1c:4b:2f:b5:65:43:
                    81:da:10:4c:02:96:3f:4a:34:19:fd:63:3a:f0:7f:
                    2c:b2:b2:72:32:a3:3c:be:35:4d:d7:6e:24:5c:c3:
                    3b:cd:fe:52:97:57:c0:55:ce:bc:d1:44:b4:bb:1b:
                    47:92:af:14:4b:18:54:3c:c3:ca:64:81:a8:75:d2:
                    60:31:08:97:2b:e8:85:2b:4f:70:48:f7:db:f3:e7:
                    bb:31:b8:e4:28:9e:49:c9:d7:7a:61:cd:ab:db:2b:
                    02:37:11:05:02:55:fc:45:50:21:22:ea:1e:1a:f6:
                    05:35:c4:1d:2a:70:d9:0a:a3:33:a7:52:4b:9a:50:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2E:BB:65:D2:4B:15:7B:2B:A8:71:0A:82:29:58:44:4F:7A:39:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/2229c24c-5cbb-3606-87cd-8a75f11c1607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a2:02:7c:e4:aa:2e:c2:fa:6c:ea:3a:89:e0:05:fb:45:c4:
         25:7b:e4:39:35:97:2d:7a:e7:09:61:00:5b:49:98:a2:46:bc:
         1f:19:04:6f:8d:29:3e:77:97:30:8f:b2:d0:09:eb:22:9b:f7:
         b4:c9:b3:f5:08:43:fa:c7:27:28:e4:16:06:c7:72:10:44:26:
         00:5d:4a:e4:48:6e:0e:77:0e:c4:73:a0:07:59:8b:d1:69:ee:
         45:8b:2f:74:f5:bb:e5:c6:02:f5:45:03:10:1e:66:26:00:65:
         da:26:74:63:4c:e6:7b:28:a3:00:20:6b:8b:b3:d6:f2:19:03:
         ac:e9:c6:a8:d2:5a:fd:27:dc:19:44:93:bb:cc:8d:63:ae:73:
         ee:8e:6f:44:6e:d6:cd:8c:85:64:3c:e0:6a:ba:a3:c7:b0:4c:
         f1:78:47:c1:b2:85:31:b4:da:a2:59:43:25:09:ac:68:a3:2b:
         8e:15:06:ed:d3:8a:d9:b7:a1:4a:20:68:e8:0a:6f:78:fc:4e:
         54:f8:f4:66:aa:6d:b1:9f:0f:25:c8:79:a0:71:3b:3a:e8:44:
         a2:19:d2:d9:8e:5a:58:72:a1:80:5a:e7:66:88:a8:94:b6:7a:
         8c:72:46:47:b8:ee:3b:f9:e3:28:cb:1b:ba:b4:7d:26:eb:43:
         a6:5e:bd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:51 2025 by rpki-client