Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/022748d7-5389-327d-b06c-5c0aa2a2134a.roa
File:                     022748d7-5389-327d-b06c-5c0aa2a2134a.roa (raw, json)
Hash identifier:          oCTf+8/12KBzNwR4w18IObjE9C/RjifJMJlFtcVADSg=
Subject key identifier:   E9:EF:FE:90:60:46:1F:BC:52:C0:88:DA:75:4F:DE:16:58:65:F1:B4
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F4328584B6A61ED5596103649B4DE6600
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/022748d7-5389-327d-b06c-5c0aa2a2134a.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     19605
IP address blocks:        192.230.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ed:55:96:10:36:49:b4:de:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=2eac1e10-dbec-4b81-9167-c1ec110dfbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:8f:5b:04:e0:f4:0f:01:9c:c5:2f:5d:c4:
                    74:36:f9:1d:b9:83:5a:63:26:78:4c:d9:e3:58:0d:
                    cf:25:db:80:10:a6:39:f5:71:9c:51:d0:ac:2a:86:
                    cb:46:5b:d2:8c:09:4f:f3:66:66:87:11:0d:32:d2:
                    7d:92:21:b6:d5:28:29:cf:96:56:b1:75:fe:12:a1:
                    80:ef:26:44:ab:b7:b2:ea:03:b1:ae:49:97:da:7b:
                    b9:9a:de:0a:89:71:20:9d:31:06:68:4c:fa:4e:4a:
                    e2:30:c7:7d:db:10:c9:1b:44:d6:3b:37:83:08:51:
                    5c:8f:8a:8a:65:87:f9:90:2d:7a:d4:e1:3f:be:10:
                    e3:c3:d9:85:21:40:35:d3:43:da:15:f1:5d:b9:e9:
                    d8:d0:60:9f:ac:66:a6:b2:ca:5d:30:cb:91:d6:4c:
                    fc:a7:12:b5:17:2d:c5:c7:72:31:1a:f4:a5:bf:5d:
                    b6:64:8a:a7:c9:db:20:b8:8d:f7:57:c9:ba:2b:c4:
                    c0:a2:e3:3f:c9:34:47:2f:95:6b:5a:7e:28:03:20:
                    47:4e:cb:45:be:67:34:b0:90:7b:78:56:b2:42:26:
                    92:18:46:2c:82:b5:ac:13:20:2e:df:d3:1b:f3:2f:
                    40:d7:9d:97:45:e2:e3:22:02:fb:71:fa:08:c8:dc:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EF:FE:90:60:46:1F:BC:52:C0:88:DA:75:4F:DE:16:58:65:F1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/022748d7-5389-327d-b06c-5c0aa2a2134a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:a4:e8:82:2f:e0:10:a6:f9:ee:5e:90:9f:af:11:f6:f4:
         72:69:fd:21:b6:d2:87:cd:97:30:68:4a:61:5f:75:da:cb:c3:
         fa:08:1b:22:ae:c0:0b:da:85:df:90:0a:df:4e:d7:cd:56:06:
         81:99:4e:8e:3d:f1:47:6a:25:6b:a0:77:d7:92:1c:41:6a:8e:
         a7:c4:19:6a:ac:9a:db:d6:c3:67:da:b7:60:cc:21:00:a3:31:
         c4:f6:c7:2c:98:4f:7e:0e:04:a7:eb:71:08:8c:1e:5c:16:e4:
         82:7d:3e:47:84:95:95:16:e4:7f:ce:cb:9a:82:c7:1b:30:fb:
         c4:83:d8:bc:e5:47:eb:08:82:f4:c3:80:34:e4:90:b4:13:31:
         b7:20:e5:29:fe:99:6c:a3:1d:3c:05:fe:ef:77:5e:86:aa:2e:
         58:0f:56:5a:a3:e3:1a:69:a6:19:c9:54:0f:8a:82:1c:3c:ac:
         9e:86:68:8d:21:4e:96:af:50:3f:e4:85:11:bb:35:f3:ed:95:
         4e:4d:50:3e:d1:54:15:60:de:68:c9:a5:c5:e8:79:25:5c:c7:
         0f:62:ce:fe:3c:49:4a:18:c3:d9:0c:18:22:8a:49:06:e8:f6:
         c7:1c:3a:8e:48:d3:3e:37:16:1b:7f:4a:5b:51:4d:2f:16:80:
         29:69:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:56 2025 by rpki-client