Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/fad3dc40-7180-3075-84bb-6775649efaa9.roa
File:                     fad3dc40-7180-3075-84bb-6775649efaa9.roa (raw, json)
Hash identifier:          r7Iy8qXcfwKREV6Pyc+pG2nQb+7twzwYJPase4SZSf0=
Subject key identifier:   2D:8C:0E:D4:FF:86:9E:D6:8B:E1:B0:2B:28:43:9B:4B:69:C2:58:E2
Certificate issuer:       /CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0
Certificate serial:       010D0C9F4328584B583C8BF7E8328D4B029F1D00
Authority key identifier: 58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/fad3dc40-7180-3075-84bb-6775649efaa9.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     400133
IP address blocks:        167.94.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:8b:f7:e8:32:8d:4b:02:9f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=8271c502-adbc-4485-b966-e28789c8faec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:24:6e:51:22:be:4e:77:a6:11:a2:33:fa:
                    26:44:5e:b8:94:32:58:6b:6b:47:87:97:44:ad:28:
                    ae:d7:b2:d6:a9:62:10:7d:7a:ba:8a:f5:25:c9:d6:
                    9b:b1:ee:ac:8c:af:b5:1b:70:9a:76:9c:6e:12:4e:
                    f1:6b:f0:7e:56:44:c0:73:d6:5d:73:f0:2a:da:57:
                    dc:fd:6a:d6:ce:b4:66:06:5e:9c:0e:d7:88:01:b8:
                    71:aa:eb:74:5e:32:ad:89:08:b4:9c:97:d6:ec:12:
                    30:cd:e8:64:96:e2:6c:6a:52:e2:5e:e0:a3:7d:6a:
                    73:55:ce:fa:ef:72:44:e7:94:11:81:10:dd:f8:f5:
                    cc:d7:40:37:22:5b:54:14:1e:b8:4e:4a:99:23:3f:
                    4b:d4:74:49:4b:89:de:24:47:7d:9c:9b:63:fa:db:
                    60:5a:d3:40:74:29:db:ea:db:a2:dc:df:ee:53:fb:
                    33:36:b2:5a:92:e8:57:76:1e:18:9f:26:15:18:40:
                    a9:98:53:72:a8:d2:0f:3b:30:09:0d:84:4f:36:5d:
                    fd:a2:05:e5:cf:bd:39:1b:5c:bf:a3:2e:d8:d4:f9:
                    30:1f:fb:da:a7:6e:1c:49:38:7e:cd:d4:a5:d9:78:
                    07:84:b3:52:cb:7e:6a:14:6f:d4:7c:2a:61:0b:33:
                    51:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:0E:D4:FF:86:9E:D6:8B:E1:B0:2B:28:43:9B:4B:69:C2:58:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/fad3dc40-7180-3075-84bb-6775649efaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl

            X509v3 Authority Key Identifier:
                keyid:58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:92:67:c9:fd:81:a6:6d:79:09:c6:55:2d:eb:a7:5d:b2:
         a2:38:32:4e:c5:cf:05:55:18:4a:41:f9:c9:f7:38:d5:4d:60:
         08:45:af:72:2a:68:22:a5:17:7c:fa:51:78:4f:9c:c4:a7:ee:
         99:da:2d:10:cd:7f:2e:3d:9d:4d:ca:82:dd:88:8f:5a:4f:9b:
         a6:0e:2d:9f:e0:f2:63:c2:83:57:c5:6d:cd:cb:c0:2c:26:fa:
         49:3b:62:77:a8:56:eb:2f:a2:0f:f4:cf:dd:b4:d5:b7:3a:25:
         97:df:59:c2:c6:fc:88:e1:aa:2d:bd:c3:90:aa:2b:f6:d7:9c:
         4c:15:9c:b1:ef:d8:c6:81:e4:4f:91:cd:f6:74:77:f2:1f:bb:
         3a:2b:9e:37:4d:7d:ce:e7:a6:96:82:12:a9:2f:87:ad:e9:35:
         0b:71:a2:a5:f4:e0:27:78:4f:09:d7:dc:0c:4f:53:9f:69:cb:
         34:3a:5d:61:2e:47:e1:c9:8b:6a:03:29:34:bd:2f:d3:0e:b9:
         f8:10:d3:72:7f:b1:2f:f8:63:7b:18:14:2d:e5:d5:61:80:25:
         49:67:b9:82:d8:7f:97:48:12:e7:fc:d9:9f:a2:5f:1c:79:fb:
         75:bf:ed:db:4e:92:24:c0:a8:30:b1:5c:59:8d:7c:7b:6c:4a:
         0a:67:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:56 2025 by rpki-client