Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/bb906220-b008-31a6-b6d4-624eb734d7bb.roa
File:                     bb906220-b008-31a6-b6d4-624eb734d7bb.roa (raw, json)
Hash identifier:          W0wGQIuUUagvrF159o1Y5n6v0l2WPJFVLMOhxE6kH74=
Subject key identifier:   2C:F3:EC:7F:DE:39:DD:9C:9D:D6:FC:87:16:E8:BA:8C:C0:2B:EB:76
Certificate issuer:       /CN=59f6a973-714f-4843-8b79-fe69f46eb1ad
Certificate serial:       010D0C9F4328584B5C6C787FE4C6551004599C40
Authority key identifier: B8:9C:08:7F:F4:E4:E0:6F:26:19:F2:22:AC:33:BB:34:B9:11:31:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/bb906220-b008-31a6-b6d4-624eb734d7bb.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     134365
IP address blocks:        162.251.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:78:7f:e4:c6:55:10:04:59:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f6a973-714f-4843-8b79-fe69f46eb1ad
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=3d5beff7-e158-4bd0-90db-0171884938ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:09:0a:8c:6e:98:09:a4:1f:e7:9d:f6:99:
                    76:fb:cb:42:1b:57:7b:6f:1f:9a:d9:56:96:86:a7:
                    57:59:5e:ce:11:9c:14:1f:2f:6d:a9:42:a3:e3:ba:
                    e3:91:51:57:09:f4:95:05:28:81:cc:cf:21:81:5e:
                    45:03:98:aa:41:5d:e3:24:bf:cc:fe:6f:8a:d5:2f:
                    4f:b8:37:9b:d9:f8:63:0a:c0:6b:52:53:dd:19:3d:
                    67:e8:12:a9:44:f4:06:70:75:64:ee:d6:59:0a:7e:
                    f1:2a:dd:0b:bc:ac:9e:14:cc:7b:61:c5:4b:75:5f:
                    76:b5:1f:04:2d:79:86:21:fc:26:e0:2c:56:38:84:
                    a2:b0:dc:4f:1d:72:b4:e2:d4:6f:cb:ac:ee:b1:7e:
                    d1:2b:60:c3:f1:ce:37:4a:dd:60:f9:63:a7:32:c5:
                    e9:c4:75:ea:21:b7:16:7f:a7:ea:2c:b5:37:53:4f:
                    96:c1:69:b5:e6:b1:06:51:e2:7e:c7:f0:b3:f0:09:
                    38:71:e5:57:6a:ed:a7:68:c5:42:e5:f4:f2:82:2b:
                    b9:2b:e3:fa:a1:ff:8d:9c:41:ac:bd:37:0a:b6:be:
                    53:36:4d:fd:cb:f1:92:ee:fe:8d:60:1e:a7:d0:75:
                    d2:34:e8:f6:d7:6f:90:5c:c2:ed:02:a9:c2:78:af:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:EC:7F:DE:39:DD:9C:9D:D6:FC:87:16:E8:BA:8C:C0:2B:EB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/bb906220-b008-31a6-b6d4-624eb734d7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad/59f6a973-714f-4843-8b79-fe69f46eb1ad.crl

            X509v3 Authority Key Identifier:
                keyid:B8:9C:08:7F:F4:E4:E0:6F:26:19:F2:22:AC:33:BB:34:B9:11:31:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/59f6a973-714f-4843-8b79-fe69f46eb1ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:a0:c9:c7:d4:4a:36:37:32:a3:55:76:1d:2b:00:8a:69:
         34:ff:03:c3:c8:83:76:22:46:08:ae:8f:71:d2:79:fe:35:85:
         6e:43:25:1b:8c:5f:a0:96:71:9a:3a:37:03:78:2b:08:06:26:
         1e:43:d5:d3:35:a8:df:47:cc:7a:f9:98:34:7f:cf:11:96:75:
         be:48:80:71:4b:59:eb:3e:ef:2e:b8:17:10:ff:9d:26:cf:d4:
         16:26:06:bc:c1:6e:2f:21:34:38:47:ad:d8:2c:d5:3a:9d:78:
         2f:4c:dd:fc:2a:5f:23:ab:4f:3b:77:8e:98:dc:cc:6e:9f:f0:
         15:be:7f:89:31:ab:70:1f:53:99:68:fe:a9:b9:16:1b:1b:6e:
         55:a2:aa:62:43:9b:ef:ea:80:a4:67:d2:13:e8:03:5b:58:49:
         3f:26:0f:13:a3:fc:13:6f:c5:f0:5c:25:2c:5d:26:5f:eb:94:
         4e:02:bb:b5:7c:4e:8b:36:f9:e3:62:c0:a5:c4:c6:40:47:82:
         08:40:b2:50:b1:81:cc:d7:5c:f6:ec:dc:ad:e7:99:b2:97:f4:
         49:bf:50:32:f4:93:90:04:6d:87:53:92:e1:73:ab:90:bd:a7:
         b3:5b:12:ee:d7:bf:bb:fa:85:ed:08:bf:b7:bb:2c:5d:5c:e1:
         bd:2b:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:32:45 2025 by rpki-client