Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d13535fb-cbfc-3dec-b158-20eb919c9bcf.roa
File:                     d13535fb-cbfc-3dec-b158-20eb919c9bcf.roa (raw, json)
Hash identifier:          wSDTK0KwGujMO5RAvt1D3udWCiQZiGqKPjaY10W5WDc=
Subject key identifier:   41:AE:2F:D1:DC:EA:73:0D:A6:65:85:E3:2B:A3:73:4A:A5:F2:B4:DD
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584B2CF6DAA7446E7ED88D2058C0
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d13535fb-cbfc-3dec-b158-20eb919c9bcf.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     53768
IP address blocks:        162.134.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:da:a7:44:6e:7e:d8:8d:20:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=8a93fd5d-b3d3-4162-9408-3193f55ded54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:83:e2:06:cc:a7:85:45:4e:3c:fa:ce:61:
                    99:4a:b4:1d:80:75:8c:52:88:33:41:8c:e2:b3:a1:
                    dd:b0:d0:60:17:cb:77:d9:bb:06:56:92:96:9e:00:
                    23:b4:3e:31:7a:67:94:ce:08:63:8a:ad:19:a3:0e:
                    cc:1d:29:fc:ca:d3:b5:91:e2:fa:79:64:d2:10:41:
                    c9:4b:80:6d:13:55:97:42:5a:a4:56:81:55:ae:ba:
                    bf:dc:fe:91:4a:34:22:07:07:73:d7:5e:9b:ea:a3:
                    fb:00:f7:f8:65:9f:08:28:d6:a0:c9:f7:11:bb:a3:
                    6d:ec:c1:0e:bd:c9:cd:2e:6d:ad:0f:d8:cb:9a:c1:
                    40:c9:aa:ae:fc:e3:9a:27:76:53:de:fc:2a:2f:72:
                    fd:43:9f:61:b9:b6:66:71:75:2a:97:3e:79:1e:91:
                    96:67:00:ca:56:31:bd:9c:41:3d:87:d6:16:35:93:
                    88:4c:96:a3:0b:e3:e1:be:43:7b:b8:b3:8c:17:31:
                    cf:31:5b:42:06:1e:d9:ed:f0:78:d4:83:ce:f0:b3:
                    7b:a2:b8:46:cd:8a:d3:8b:b2:ef:ec:2a:19:07:9d:
                    a2:e1:c4:d0:53:4a:2d:a5:04:f0:17:26:56:60:ec:
                    94:69:88:d6:c8:f2:49:8c:85:1d:ff:d1:f4:0f:24:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:2F:D1:DC:EA:73:0D:A6:65:85:E3:2B:A3:73:4A:A5:F2:B4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d13535fb-cbfc-3dec-b158-20eb919c9bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b1:4b:12:aa:8f:ba:b8:10:da:54:ba:53:8f:60:fc:1d:75:
         a0:7f:6b:3c:9b:37:6e:f8:b9:81:94:dc:a1:ac:d9:53:a6:8d:
         64:dd:01:ed:b8:f2:13:79:b0:cd:21:25:7d:d3:db:01:76:51:
         ab:07:7a:2f:11:76:d7:ed:61:70:6c:ac:f6:46:18:3e:66:83:
         f8:a8:d4:ef:23:64:2d:87:d6:8c:05:0e:6c:08:21:15:6d:70:
         1a:65:1a:c6:15:29:7a:6d:56:5b:ad:53:7d:b5:f8:89:2b:84:
         21:a6:ac:ff:81:c1:a3:da:be:6e:23:bd:3d:18:c0:1e:aa:23:
         98:31:59:54:96:06:94:eb:63:ec:c2:13:91:27:f3:bb:df:8c:
         2e:bc:2d:44:e5:28:40:81:79:03:36:f3:cc:ab:d6:3f:78:d3:
         aa:21:26:62:be:b0:86:ea:8a:2d:d2:13:7a:1a:4e:3f:04:ab:
         a0:ac:2b:ba:25:4e:88:a5:c1:dc:d1:bf:17:7c:69:97:20:84:
         e0:0e:60:e0:62:fd:df:b5:16:6f:ca:50:70:00:1d:d6:fd:f0:
         44:37:ee:e6:4d:a5:50:e6:38:92:42:19:09:ba:d4:a0:c2:de:
         d4:32:84:41:7f:07:0e:a6:a3:8f:9b:e7:4f:da:72:56:63:6f:
         ae:03:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:31:23 2025 by rpki-client