Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/4397a5ad-7d38-3fce-8a31-14ec655bb137.roa
File:                     4397a5ad-7d38-3fce-8a31-14ec655bb137.roa (raw, json)
Hash identifier:          x122GLxflLlXWIl1yOfAALZFzlsy/WNhNaxEgJ+PyJI=
Subject key identifier:   49:F9:44:33:3C:89:E5:94:4F:33:C0:14:65:58:B6:49:9B:8E:46:F3
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F4328584B2496D913CD79F9C52D8B14C0
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/4397a5ad-7d38-3fce-8a31-14ec655bb137.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     30513
IP address blocks:        162.213.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d9:13:cd:79:f9:c5:2d:8b:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=4b6ca6c1-aff6-40c1-9d2b-329d4f40d15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b5:e4:a2:aa:08:80:33:c0:c5:c9:e8:60:27:
                    46:ad:6e:79:58:76:fd:f8:df:78:83:7f:c7:1d:43:
                    cb:e3:58:b6:2a:48:cb:29:b2:b8:58:c2:5d:0f:23:
                    6d:f9:b7:04:04:29:e0:c9:74:a2:39:66:f3:58:0e:
                    ec:60:c2:4d:bf:c8:fb:58:19:9d:76:44:b0:58:50:
                    a4:55:53:22:2d:dc:45:6c:54:80:d1:6c:a2:f4:c7:
                    e1:96:1d:78:f4:c4:6e:bf:a1:c2:b1:d3:15:12:e7:
                    43:ce:93:b3:9c:e7:36:ba:f1:3a:7b:7d:1c:db:6f:
                    d6:08:9a:ab:e7:82:db:be:8d:48:8e:87:8c:c1:bd:
                    61:68:f1:11:c5:96:d5:50:63:0f:9c:af:f4:5d:e9:
                    e9:2d:3c:c9:23:54:ff:ff:29:31:d9:69:04:62:be:
                    ca:1f:ba:4e:ea:79:3e:3b:13:f6:91:29:f0:77:f7:
                    cc:72:ee:62:9c:bf:5b:0e:01:21:ac:6e:41:2f:c5:
                    93:6f:a6:2e:cb:0b:77:53:48:a0:c7:0a:75:d7:d7:
                    1c:3d:4f:ff:a4:96:a9:aa:a8:a3:64:ea:25:c1:28:
                    13:9d:bd:a3:cb:7c:9e:1f:41:c1:be:06:8e:4a:a6:
                    d3:93:01:8f:df:6c:e8:54:28:cb:38:9b:e7:39:5e:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F9:44:33:3C:89:E5:94:4F:33:C0:14:65:58:B6:49:9B:8E:46:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/4397a5ad-7d38-3fce-8a31-14ec655bb137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:03:d4:16:01:a1:20:68:4e:2d:f1:eb:f4:99:e2:06:44:
         70:21:a3:91:a8:e0:23:8e:bc:e8:58:02:4c:66:7e:80:e9:56:
         67:11:06:43:3e:d6:b0:30:4c:cb:58:4a:bf:33:4f:40:c7:7e:
         ca:fd:88:6a:ac:a0:69:5c:28:16:fa:ec:eb:bc:43:ed:9b:d9:
         7c:95:8f:99:a3:cd:21:b5:de:02:ed:d4:15:f8:1e:51:3a:72:
         5c:26:c1:8f:8f:93:46:96:1b:cf:e3:cb:ff:e2:ed:fa:2c:ed:
         72:0c:c8:8a:f5:1d:2e:7a:64:94:d7:66:3c:69:f2:a5:41:41:
         59:d7:c3:d2:39:b5:9a:06:aa:38:73:5e:14:6f:4a:4a:91:9b:
         0f:05:31:95:3c:22:b0:0c:35:e8:15:8d:20:ba:7c:a3:96:d6:
         68:a0:01:2f:ed:ae:2a:67:e0:25:22:0e:d4:0d:f5:22:58:d6:
         92:5a:ae:89:d0:55:69:8e:ee:c4:87:16:2b:1e:93:e7:d7:3e:
         90:dd:89:53:23:45:8e:3e:50:80:e2:aa:a2:03:91:2a:3f:2c:
         28:e0:ba:7d:a8:d0:d5:23:ab:8c:76:ba:16:16:c4:7c:00:00:
         5d:67:34:d7:25:ea:c0:19:94:93:4f:68:ff:72:46:ad:f7:6b:
         08:e3:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:12:01 2025 by rpki-client