Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e3f5f83f-75d1-3094-8b7a-52489dd6dda4.roa
File:                     e3f5f83f-75d1-3094-8b7a-52489dd6dda4.roa (raw, json)
Hash identifier:          aJsT2pPbugga2KLfQoLxsGkxhHqoUnDVaKxFiiG1A7c=
Subject key identifier:   F6:11:8A:72:33:C4:23:75:1F:1E:10:06:6C:E5:0D:A3:7F:40:DE:E7
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584B0B76D2250C97723449B2E900
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e3f5f83f-75d1-3094-8b7a-52489dd6dda4.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     54858
IP address blocks:        162.208.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d2:25:0c:97:72:34:49:b2:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=5c423ee6-b14c-423e-a3a9-7e720e6fe426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:2d:d0:51:01:f4:b4:d4:38:0d:70:2b:45:
                    c9:ce:a7:86:cb:ec:3d:85:bd:96:9f:d8:f5:01:d0:
                    9f:03:71:12:53:cd:81:da:8c:13:6c:34:9f:ef:f1:
                    a6:5a:fa:10:e4:cd:4f:96:60:3c:87:b8:2b:ef:67:
                    e0:39:95:33:32:62:ba:fe:ac:19:59:3f:e2:8a:ff:
                    1a:22:f6:89:c3:1d:54:a0:7a:8c:d1:a8:72:6e:47:
                    54:9e:d4:70:52:b3:96:a6:06:93:dc:08:52:0f:81:
                    4b:1e:61:9f:6f:4f:81:e3:26:47:e3:d4:19:9f:41:
                    d4:9e:6f:4f:12:94:d1:33:07:f8:a1:17:0c:88:9b:
                    eb:48:d3:7e:e8:fe:9d:5b:1c:52:33:3c:7d:fa:79:
                    1e:71:8b:44:d3:4f:59:0d:e1:dc:69:de:a5:e2:43:
                    cf:04:9b:d3:c3:b0:31:5c:3d:9b:c1:ae:f9:d9:9d:
                    72:ce:fe:dd:d2:42:72:8c:7d:51:e2:b7:3a:76:07:
                    72:b0:22:61:d4:d6:af:9d:88:67:ff:54:ce:1e:32:
                    2a:e6:4f:8e:04:a1:bf:fa:d3:0e:2b:25:13:8e:9a:
                    c5:d0:d5:3a:32:61:d0:4a:45:3c:37:75:ba:70:fb:
                    a0:99:e6:8f:41:19:b0:da:9e:b6:bf:cf:a8:0a:fc:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:11:8A:72:33:C4:23:75:1F:1E:10:06:6C:E5:0D:A3:7F:40:DE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e3f5f83f-75d1-3094-8b7a-52489dd6dda4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:e1:ee:5f:54:f9:19:ab:4c:9e:b3:38:07:f1:05:66:4f:
         e4:0e:db:21:e0:2e:bc:63:1c:d6:0a:7f:4e:16:de:29:82:f0:
         b5:ef:81:c3:b0:c8:1a:b1:e9:27:99:52:14:65:a7:4b:fb:09:
         3d:88:17:93:84:cd:53:3b:60:6e:b8:19:4e:1c:92:4a:f8:21:
         e4:e1:00:4c:90:9d:95:e3:c3:6a:a3:71:37:b2:a0:f5:91:44:
         67:55:e0:ea:7c:9e:73:f2:ee:28:c5:22:96:2a:87:14:0d:9d:
         1e:5a:6e:3c:9d:3e:b2:f5:f7:dc:42:7d:23:57:63:2b:3b:6e:
         19:88:ba:0b:31:9c:59:dd:dc:46:5c:9e:8f:ee:73:74:ff:64:
         eb:e3:ad:18:88:7e:80:c9:5d:0c:4f:26:2f:90:4f:99:e5:36:
         25:d5:45:3a:8d:33:59:dd:31:0e:c1:75:ee:d7:bd:7c:f6:ae:
         6b:45:2e:ad:a4:10:b3:dc:f7:4b:12:42:3a:4d:64:98:e2:44:
         18:6d:b7:45:72:54:49:61:7b:8e:59:d3:c0:93:9a:80:23:b4:
         94:09:c7:b3:72:0d:41:8d:a1:70:aa:c3:bb:18:9c:80:f5:1b:
         5f:8f:42:60:b6:86:22:a8:96:ee:0c:c9:98:79:94:63:8e:ae:
         fa:91:03:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:34:40 2025 by rpki-client