Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/5a1f7559-7aea-38c2-838a-b618cd4bc2c8.roa
File:                     5a1f7559-7aea-38c2-838a-b618cd4bc2c8.roa (raw, json)
Hash identifier:          JPWYltPJ5r4+p8LCbbPj/UcC3xRQniSAqpUzLkUvbAE=
Subject key identifier:   B6:C1:9B:A3:66:85:0A:8D:BE:8F:EF:4A:D3:3A:74:C9:26:87:BE:19
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328584B2496CA8FB0493008879B6680
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/5a1f7559-7aea-38c2-838a-b618cd4bc2c8.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        168.238.4.0/24 maxlen: 24
                          168.238.5.0/24 maxlen: 24
                          168.238.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:ca:8f:b0:49:30:08:87:9b:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=15f81682-e1d9-4ceb-bb09-8cd0728cde70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:03:f7:06:04:0a:f4:ee:5c:0a:67:f2:54:43:
                    24:1d:16:86:b3:10:d6:c0:f4:6f:f7:33:80:f7:58:
                    d4:cc:3e:ed:b1:95:57:09:dd:70:04:b3:76:17:0e:
                    13:74:c8:e5:9f:4c:4d:f5:cc:10:83:90:80:12:60:
                    c6:51:b2:54:28:68:db:41:93:d0:dc:b6:3f:64:a8:
                    99:de:a3:15:93:d8:07:0a:16:31:d8:04:41:fd:62:
                    f8:b1:cf:cf:52:34:1b:17:fc:00:9d:b2:87:d9:b5:
                    53:ea:47:5d:e0:98:ad:4a:5b:55:80:9e:76:60:57:
                    0b:07:5f:1e:9c:d8:73:2e:91:45:8e:c1:45:54:32:
                    e9:d7:1f:a9:cc:49:fe:3e:0a:db:4e:d8:20:57:e2:
                    51:be:ec:93:94:b1:b0:d7:bd:4a:41:6b:59:95:da:
                    66:ea:3d:ec:f3:a3:09:3f:fc:fa:7c:6d:74:c2:38:
                    a6:bc:91:e1:fc:e9:34:48:e2:27:b7:93:61:37:f0:
                    14:12:9f:01:82:b5:e8:de:2c:1d:49:e0:e1:c7:12:
                    ba:20:50:d1:c6:d2:0e:f3:ce:8d:0d:aa:3d:70:8c:
                    ce:e6:53:b9:6c:fc:ce:20:a9:57:c4:ac:61:ad:1d:
                    61:5a:90:ba:59:4f:ab:e3:48:25:ce:62:9a:a9:f6:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:9B:A3:66:85:0A:8D:BE:8F:EF:4A:D3:3A:74:C9:26:87:BE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/5a1f7559-7aea-38c2-838a-b618cd4bc2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.4.0-168.238.6.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:49:4d:f3:a0:c7:3c:34:61:f0:d4:3b:a5:96:13:ff:39:dc:
         58:fc:a1:23:f4:89:f4:0d:e0:05:0c:be:1f:fa:f5:df:0d:c8:
         7d:e5:f8:18:02:dc:4f:54:f3:62:e8:bc:36:20:a3:52:1c:ed:
         34:c7:3e:d6:be:ef:47:22:d4:a8:d6:68:d5:81:2b:ab:70:28:
         e7:11:1c:c6:c5:c8:49:26:a6:e8:60:53:47:54:d9:31:55:a1:
         36:28:1b:c3:06:00:d7:77:f2:67:ea:0b:62:b6:9b:81:ef:1f:
         f4:af:f6:58:bc:29:ea:66:b3:5a:60:04:3f:5a:e3:45:37:38:
         c6:c5:7d:7d:8a:0c:06:33:72:53:3c:7b:fb:79:b0:38:86:7d:
         16:00:d1:a7:08:bb:27:50:32:ac:3f:de:be:74:2c:e1:be:98:
         54:47:18:3c:da:ea:23:35:ee:36:a2:61:1a:f6:0d:63:14:f9:
         89:f1:f4:28:ec:a2:f2:a4:a4:e1:7d:1d:b4:f7:72:5d:24:46:
         74:2e:c7:1b:14:6d:4d:fa:f5:c4:9e:35:d6:8a:9f:82:73:ba:
         65:15:e5:0e:c6:b5:74:3e:43:4f:bf:bd:15:51:e5:a9:85:b1:
         9f:6a:d3:ca:b3:be:89:9c:a6:5c:62:d1:3f:56:a4:2d:31:51:
         4e:ef:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:35:57 2025 by rpki-client