Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/6e2226a9-7a87-342f-8ea2-6bbfc12168e6.roa
File:                     6e2226a9-7a87-342f-8ea2-6bbfc12168e6.roa (raw, json)
Hash identifier:          IAORqep9qykduiWGapdutecdCnOk2xJNNRi7dgCbFjw=
Subject key identifier:   70:E0:7A:6D:FD:3D:34:A4:57:0D:DC:82:68:F8:FA:13:D7:25:3E:A0
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584B2CF6DA907C72F8F8905CF220
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/6e2226a9-7a87-342f-8ea2-6bbfc12168e6.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     53768
IP address blocks:        162.134.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:da:90:7c:72:f8:f8:90:5c:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=6fb918bd-85b9-4bc6-8649-0aabb3c201c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:0e:ff:de:7e:66:63:f1:12:9d:ae:c1:c4:
                    ee:8a:6a:ab:83:97:cd:bd:30:c0:4f:6f:5d:0b:be:
                    45:a7:53:7d:b3:46:80:19:ff:a1:e9:46:0b:e0:90:
                    d6:50:ae:fa:89:b2:11:26:4e:b0:fe:db:15:fb:0a:
                    72:62:0e:5b:fe:0d:8c:7d:f7:89:63:df:e2:6f:0d:
                    30:6e:0f:2a:58:ee:05:95:67:09:07:3c:45:f3:13:
                    02:5f:cf:ef:32:58:cf:21:ad:0c:d9:86:33:d4:2a:
                    a4:7c:78:70:df:00:33:7b:9a:a8:41:46:8e:c3:3d:
                    e5:53:b5:21:36:62:3f:25:48:a5:51:05:0e:1f:36:
                    86:6b:ee:8c:77:50:c5:d2:dd:e9:d2:09:0a:0f:48:
                    29:c7:b0:bc:bf:33:8d:31:eb:75:d6:8d:14:25:ea:
                    8d:cf:38:ed:5b:14:34:cf:13:1d:8f:a5:bb:03:f6:
                    75:23:38:aa:71:a7:0a:28:67:fe:f5:39:34:b2:9e:
                    9c:19:51:a5:f4:fa:85:62:e4:80:cc:75:69:ed:9c:
                    0d:c9:fe:cb:cb:7b:99:2b:ba:2b:3d:4d:c6:ac:d3:
                    02:1b:3e:f6:24:b2:2b:ce:ae:86:9c:3c:b4:54:20:
                    51:72:60:3f:f5:52:91:5b:47:45:d7:5f:15:29:31:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:7A:6D:FD:3D:34:A4:57:0D:DC:82:68:F8:FA:13:D7:25:3E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/6e2226a9-7a87-342f-8ea2-6bbfc12168e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d5:92:54:de:43:f3:5b:21:98:b0:e9:50:fb:b3:de:0e:2b:
         ff:95:66:83:1f:be:b5:ef:fc:3e:67:88:2d:04:4b:48:96:40:
         dd:e7:f8:f9:ae:86:75:82:1b:23:d0:ee:d4:78:91:2e:b5:14:
         53:c0:55:5c:c8:99:f0:84:fd:9d:8c:06:3e:a6:eb:71:e9:12:
         6e:7c:89:28:57:85:76:c7:75:bb:05:6a:b8:29:61:f9:9b:a8:
         91:e1:2d:98:20:fd:03:aa:46:ae:f4:01:d3:5f:60:09:cc:76:
         b2:56:88:4f:a2:3a:a5:b1:66:0a:f8:c3:5a:df:d6:de:e3:29:
         98:36:8c:01:9f:57:c5:04:1e:29:e5:f4:3d:bb:2e:a0:bd:af:
         10:46:b3:21:a9:32:53:ea:26:6f:05:e5:3b:ea:9a:56:34:f0:
         c4:6b:a6:7e:dd:93:ff:69:3d:21:42:be:f4:3d:09:09:e3:5d:
         fc:ce:c6:16:90:27:96:bc:2c:71:7f:e6:0f:88:98:b4:87:65:
         42:26:e9:ed:c9:9c:84:e9:99:23:89:42:13:bc:32:08:00:fb:
         d9:bd:df:a4:88:74:f5:ec:50:eb:9c:fc:0a:f4:90:45:44:9e:
         77:e5:9a:93:9d:fc:f2:f0:ab:5f:51:a7:1c:18:67:fc:b6:f7:
         be:9a:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:33:48 2025 by rpki-client