Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
File:                     7c8dea26-fd51-3016-9371-cf841d680f6b.roa (raw, json)
Hash identifier:          SjxPGof8sFEKJx0NKMBxPvSXGGNsHzDZGmGhMx8ckY0=
Subject key identifier:   98:3B:70:00:08:1D:E1:90:A3:C3:D6:71:35:A0:61:48:C0:FC:93:BA
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F4328584B3AEC45021ED84B1B6400AB00
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     6079
IP address blocks:        167.253.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:45:02:1e:d8:4b:1b:64:00:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=ce25fbc6-8e0b-4a82-9413-5683a757e9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:2d:59:6c:5e:34:8f:99:fa:d2:ef:ae:c8:
                    34:58:37:40:d0:38:9a:30:87:11:e6:a9:e3:53:ab:
                    85:43:74:25:ca:4a:2c:fc:13:a9:bb:f3:98:51:fd:
                    e5:bf:48:ac:f4:ba:b6:73:28:42:4f:cd:5f:f2:10:
                    35:64:97:2a:72:74:d7:65:60:6f:94:40:b9:d4:9a:
                    55:5d:e7:7d:cc:a2:00:e9:41:4d:5f:f7:37:cb:06:
                    32:d4:24:a4:cc:a5:41:90:25:4a:1e:37:5b:62:87:
                    bd:af:f3:fe:75:b9:01:61:8c:0d:b0:a6:32:a1:82:
                    fc:d0:d6:78:ea:a1:9f:62:0e:b7:e1:df:23:35:fc:
                    56:04:dd:df:51:a0:1b:2c:77:eb:d0:8f:5f:f9:3f:
                    9b:95:22:74:95:23:ea:9a:0e:59:e6:6a:25:83:d4:
                    c2:5c:18:d2:2f:01:d2:4a:25:9a:d3:5b:b8:92:18:
                    8c:f3:18:c1:73:9a:11:f9:a1:a9:a1:99:51:e3:7f:
                    87:ba:ca:7e:0d:66:68:56:50:af:76:06:84:0c:76:
                    54:45:5a:59:d0:e9:bc:46:28:c7:98:4a:f0:9b:ab:
                    8d:e8:c5:83:1a:a5:b0:d0:85:08:0a:b0:a0:28:e9:
                    76:c1:f1:83:ee:c6:d9:0d:e1:cb:a4:31:42:dc:37:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3B:70:00:08:1D:E1:90:A3:C3:D6:71:35:A0:61:48:C0:FC:93:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6a:22:6a:3d:86:b5:19:37:bb:b4:c1:39:53:25:79:2d:07:
         2f:70:ef:50:e4:26:37:81:14:44:18:c1:a2:29:3e:65:d6:af:
         b9:7b:85:37:06:34:e0:02:f1:35:b1:63:15:f2:88:4f:92:30:
         01:f3:76:cc:41:1f:2a:ee:76:6f:d9:35:2d:bd:d0:36:e0:c7:
         4b:80:f4:ae:f5:7b:f8:71:cb:0f:2d:7d:6e:71:08:56:69:5d:
         3b:f7:a8:65:5c:88:cf:79:a6:8d:15:5d:b1:ce:af:53:d6:36:
         f8:c5:11:19:f1:5c:85:35:05:5d:0a:63:0e:e0:83:c1:e2:1d:
         1d:1c:3d:31:e8:7f:b2:9d:d6:52:80:9b:31:c6:fe:e9:33:a7:
         e7:4f:0f:24:4b:c0:07:3f:11:ae:ac:e1:1d:29:83:5d:4f:37:
         1b:4e:27:04:04:9c:32:37:56:81:a3:4b:83:2c:8e:ab:22:b9:
         30:ad:80:f1:0d:63:82:29:32:b2:74:75:80:d2:3c:66:d7:9c:
         d7:4a:5c:76:5e:a3:9d:ad:fe:75:04:9b:65:f1:c3:0b:17:44:
         11:34:a1:7f:3b:68:50:d6:15:64:5a:d1:0a:46:d3:35:a0:0d:
         3f:17:f5:a6:f5:c0:e5:66:c2:4c:d1:1c:f2:15:1e:fc:59:b0:
         82:70:a9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:42:12 2025 by rpki-client