Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/9850d207-19b6-3d81-ba84-ecb9b0da3c90.roa
File:                     9850d207-19b6-3d81-ba84-ecb9b0da3c90.roa (raw, json)
Hash identifier:          XAMsCB7EzUt2oidV2YgX4bDsoNHIMFmPzpC6djKPj10=
Subject key identifier:   AC:26:FF:58:AD:78:08:5F:8F:84:CF:84:2A:5B:64:51:A9:A9:C9:C1
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F4328584BD8C5BCE002980A53DBAD88E0
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/9850d207-19b6-3d81-ba84-ecb9b0da3c90.roa
Signing time:             Thu 13 Nov 2025 14:00:38 +0000
ROA not before:           Thu 13 Nov 2025 14:00:38 +0000
ROA not after:            Wed 11 Feb 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        162.212.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d8:c5:bc:e0:02:98:0a:53:db:ad:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Nov 13 14:00:38 2025 GMT
            Not After : Feb 11 14:00:38 2026 GMT
        Subject: CN=e3c80281-1b5f-4446-be38-6aaa3440342f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:d0:ca:8a:04:58:fe:0d:ff:0b:36:91:03:
                    75:44:db:1a:26:d6:71:a8:e9:34:3c:b2:c5:64:0e:
                    a2:71:ef:b7:91:bc:a9:3b:05:8b:e6:aa:ee:ec:58:
                    c4:a4:a5:f2:ff:61:6d:12:d6:26:d0:3b:b7:d2:69:
                    8c:1a:28:fe:e1:a6:70:fd:da:79:98:0a:66:a2:34:
                    89:e5:5e:e0:5d:97:00:ea:db:d3:34:76:7c:7e:82:
                    11:44:d5:f0:bb:e5:80:b8:06:f0:d5:7c:19:03:d5:
                    91:71:85:8e:a2:c3:1d:65:98:20:8d:b7:e4:e5:01:
                    cb:01:ed:1a:50:61:ac:c8:10:96:51:f6:97:8c:82:
                    35:81:61:28:05:08:b9:5e:ea:bf:e9:4c:fa:85:b2:
                    af:77:fe:be:60:38:0d:a1:f4:8c:ca:6a:5f:1e:5e:
                    81:cd:35:14:e2:56:81:65:90:21:30:24:e4:a2:35:
                    9f:dd:1a:42:cd:85:61:5d:4e:46:3f:b6:1c:36:a3:
                    ac:ff:27:d1:3b:f8:02:02:0e:1c:20:ce:79:dc:56:
                    d8:f0:b9:65:c8:94:5b:64:47:f9:91:44:1a:1c:d6:
                    93:03:1d:5f:54:40:4b:a9:b0:0b:d9:4a:0c:9a:a8:
                    98:db:1c:82:90:66:30:12:49:bf:62:02:a0:75:b4:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:26:FF:58:AD:78:08:5F:8F:84:CF:84:2A:5B:64:51:A9:A9:C9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/9850d207-19b6-3d81-ba84-ecb9b0da3c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:cc:65:34:79:b1:dd:24:d5:19:7e:51:91:c6:1d:a3:a1:
         38:d2:d9:39:16:c8:5f:1e:f5:32:df:54:b7:9b:a2:54:b3:3a:
         e8:1c:b4:82:9b:c8:19:7d:88:02:18:b7:5f:81:81:b0:d0:e5:
         42:a8:13:97:cd:4d:8e:2e:57:98:c4:88:fb:79:52:92:fe:f4:
         6c:72:4a:22:40:34:1d:af:91:92:67:2a:0c:ae:b9:4b:ba:6e:
         d4:21:65:ff:4a:cb:18:be:aa:e7:6a:8a:78:7d:bb:05:9e:1a:
         fd:b2:7a:c7:bc:d3:77:ee:0b:ad:24:df:6c:66:e7:f1:53:7e:
         d2:23:80:71:6c:79:df:05:56:ac:bf:35:1f:b1:8c:ad:b2:59:
         47:5e:4d:2e:dc:98:1a:20:10:3b:4b:ff:78:92:6f:b0:a1:17:
         e5:ae:63:4c:79:e6:33:eb:fb:7b:da:8c:a2:ea:20:42:37:dc:
         26:b3:d0:d9:b8:f3:d9:ed:27:f6:97:d3:fa:83:cc:78:87:cc:
         8b:fb:ac:e9:15:b2:32:4b:27:5a:67:d5:40:db:e6:e7:a3:16:
         f4:1a:32:af:5e:fd:fd:74:72:42:21:40:3f:2d:8c:a6:64:25:
         63:7a:65:a9:16:f8:44:07:e8:70:bf:ed:f3:8f:f5:d5:c1:84:
         07:c1:ab:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:21 2025 by rpki-client