Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/87fc178a-9a92-3f5b-bf3d-a3b6f21c6f96.roa
File:                     87fc178a-9a92-3f5b-bf3d-a3b6f21c6f96.roa (raw, json)
Hash identifier:          YAs8wDU5kyiOPbA/622ZdsTKeVMELJEgGiaMAp/hzJI=
Subject key identifier:   70:CE:6D:2F:C6:4D:A3:7D:F6:F6:AD:E1:AC:D7:C0:86:04:CE:BB:12
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B1C36CE6DF933C453DFE56500
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/87fc178a-9a92-3f5b-bf3d-a3b6f21c6f96.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     393249
IP address blocks:        142.231.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ce:6d:f9:33:c4:53:df:e5:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=b3eaef8d-cc2f-4602-ab3c-e2fb4763d555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:a0:8c:57:1f:06:bc:70:f6:ec:7f:b1:4a:
                    60:a9:5d:0e:f2:b8:44:09:8b:7c:1c:3c:25:95:b3:
                    aa:02:09:4f:4b:ce:24:f8:a4:8c:64:c0:4f:df:8c:
                    81:44:d8:db:e0:02:52:f5:a1:e4:d1:9a:7d:92:4e:
                    cd:34:ad:fc:b1:d6:9d:03:3b:eb:c7:76:b3:4c:fc:
                    44:86:77:64:bf:6e:4b:f1:8d:eb:46:03:42:5b:f9:
                    8a:ea:00:60:c8:a6:23:88:93:18:fc:b2:aa:a5:d9:
                    0d:4d:c5:22:f0:1f:76:4d:ab:1a:8a:0e:d3:9c:01:
                    bf:3a:95:cf:71:8a:e5:4a:e2:9c:00:46:6c:e7:c2:
                    de:10:e1:a1:6c:64:c2:32:7e:9b:d7:c0:9c:d6:44:
                    28:5d:33:6d:b4:4e:83:15:b7:81:2f:5c:0b:68:0e:
                    ae:bd:c1:0c:ba:2c:4b:42:cc:22:d0:e9:f2:97:ff:
                    c5:ea:4e:ac:05:f6:c0:0a:6c:c2:f2:31:8d:cd:e8:
                    e8:1b:39:a6:20:fe:bc:38:9f:de:be:41:84:2f:72:
                    6b:af:88:4c:4d:8f:ba:7f:3a:f7:70:8d:63:c1:b5:
                    80:6e:b2:80:c4:27:4a:4f:0c:ef:24:3f:a9:ec:13:
                    91:64:d1:69:e1:71:c2:dd:38:c7:40:d9:43:36:a8:
                    24:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CE:6D:2F:C6:4D:A3:7D:F6:F6:AD:E1:AC:D7:C0:86:04:CE:BB:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/87fc178a-9a92-3f5b-bf3d-a3b6f21c6f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:44:f4:2a:eb:b1:15:fb:8d:95:dc:61:01:18:86:c9:5e:54:
         11:06:8c:72:21:9e:db:6d:ef:1a:f4:d5:75:c9:5a:1a:8b:4c:
         29:1b:49:b2:85:ec:f2:de:a7:53:a9:dd:e5:e0:6a:13:7d:cd:
         34:1e:1c:1c:31:35:3f:f5:2f:5c:ef:4f:22:e2:8e:41:71:62:
         39:53:c5:12:ee:13:ae:27:f7:6c:08:73:50:34:6c:7b:a7:63:
         4c:44:74:54:95:b3:ca:68:cf:04:0d:ac:d2:0c:a1:6e:ec:f9:
         fe:13:fc:37:41:16:99:76:64:03:25:57:46:d8:52:45:b6:93:
         fb:44:5f:49:ad:a0:47:f5:a7:71:88:f0:a2:f4:e8:e5:6d:80:
         14:53:1f:68:76:28:e5:ab:41:c6:41:4c:12:11:a5:42:db:8a:
         0e:08:67:20:b2:ae:34:48:6d:25:e4:e7:20:64:10:05:82:ca:
         4d:30:2e:59:7e:f2:33:16:b6:13:7b:bc:86:10:69:03:6f:bd:
         03:73:9f:fc:d8:9b:49:b2:e2:81:56:2f:73:0c:e1:58:79:de:
         61:e0:2a:3f:55:f8:97:6a:f0:33:dd:c9:d3:a6:ac:3e:3e:b4:
         23:1b:88:d7:5e:50:f3:72:cb:d3:b1:07:e5:5b:ab:4a:6e:5b:
         5d:73:c5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:05:32 2025 by rpki-client