Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/0ccd293b-4237-33a7-aafe-24d59d62dd47.roa
File:                     0ccd293b-4237-33a7-aafe-24d59d62dd47.roa (raw, json)
Hash identifier:          EA4SUKa1SLXFUgrN3LFzqxM5Rk4RGLIKJc79XSPllWk=
Subject key identifier:   D3:59:D9:82:73:4D:0D:CF:D6:AB:04:50:AE:62:FB:37:46:B4:E5:8B
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584B4616FD7A00BADDFD6D053418
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/0ccd293b-4237-33a7-aafe-24d59d62dd47.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        162.138.64.0/24 maxlen: 24
                          162.138.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:16:fd:7a:00:ba:dd:fd:6d:05:34:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=d992c320-fc90-4d71-8bca-ceecf3a41bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:84:f6:02:ea:be:0f:3b:9c:27:89:5e:fe:
                    29:c5:f3:bb:7a:69:5e:b4:63:45:97:94:87:87:cc:
                    83:de:f2:0f:13:f9:a8:5f:7e:b9:83:4f:30:ae:34:
                    f0:94:7b:8d:24:39:98:dd:50:ee:97:5d:cb:84:bb:
                    06:e8:02:d0:f0:5e:89:ba:44:8f:95:0e:53:76:5c:
                    70:08:d8:17:fd:05:da:be:c9:61:d6:67:e1:c6:59:
                    ce:87:48:62:83:0f:4c:dd:74:ea:a5:ba:68:19:40:
                    f6:40:ee:d6:a7:f7:d5:b6:d4:57:fd:b7:a4:16:0f:
                    ac:71:f8:63:48:63:03:c5:af:ae:e1:3e:d8:a8:4e:
                    15:4b:70:80:13:76:e5:ec:f4:65:80:93:65:56:bc:
                    d8:b5:a0:e8:2f:d3:10:df:b4:d9:56:9c:60:6e:7a:
                    e4:90:43:69:e0:27:a4:52:25:38:fd:4b:6b:6e:93:
                    43:35:1f:87:cd:52:00:cf:bf:ac:bf:a8:3c:b9:d5:
                    6a:63:66:75:c0:dd:06:c5:2b:39:c8:a8:ca:f4:18:
                    a6:6d:0d:f1:47:a1:3b:2c:77:fe:f7:65:af:31:ab:
                    d9:06:f1:b4:c6:4a:d0:d8:5e:08:f6:60:a1:24:c8:
                    42:b3:7f:c3:c9:af:49:0e:50:0c:eb:a4:32:fc:e0:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:59:D9:82:73:4D:0D:CF:D6:AB:04:50:AE:62:FB:37:46:B4:E5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/0ccd293b-4237-33a7-aafe-24d59d62dd47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.64.0/24
                  162.138.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f7:27:94:36:2d:09:c3:4c:bc:11:92:cf:08:ad:a3:ef:b5:
         e9:00:2c:5f:30:a1:90:0a:a4:1d:f3:2a:a5:dc:73:e2:16:c3:
         0e:8e:15:f2:4b:ad:c0:40:81:8d:e4:fe:f2:03:07:32:be:e3:
         f7:af:37:39:46:50:83:83:3a:73:5d:24:81:ac:28:ec:49:ab:
         69:c4:fd:b4:18:2f:49:e8:d9:fd:09:a9:a6:2d:cf:47:c3:bf:
         2b:04:ea:af:68:99:f5:e9:49:da:08:21:35:80:9f:9e:13:e2:
         96:5a:03:a1:f4:31:c9:86:c7:35:f4:8d:ba:b6:72:f2:f7:ba:
         b8:8c:43:33:82:63:24:ca:00:78:55:54:03:a1:ad:0d:1b:38:
         13:9d:c5:b0:33:d6:f0:af:48:d5:1a:76:b1:a8:37:7b:ec:5e:
         4d:d6:c0:28:f4:25:ad:51:8a:1a:4a:b8:e7:f6:41:f7:b4:9f:
         9d:b9:c1:46:b5:b7:77:f4:28:87:d5:fe:74:92:48:5e:65:11:
         32:1c:a3:c9:af:7b:4a:7a:0e:54:c6:ba:4b:0c:7c:59:35:d5:
         8c:b0:2a:86:ad:29:f0:37:07:d5:ee:b4:d3:c1:3a:59:11:0e:
         79:34:d3:e6:4f:da:19:98:f2:f8:01:b4:b5:73:27:b5:06:5c:
         7b:9a:67:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:31 2025 by rpki-client