Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa
File:                     afaa99ac-9444-373b-8b95-8e74320c2b99.roa (raw, json)
Hash identifier:          dhL4edgwu35SL7gyj4NKqpmDxpZxPyjm73aKEgAF168=
Subject key identifier:   E0:F7:5E:0E:B4:BA:D9:05:83:0C:EB:34:73:86:98:C1:AA:4D:F8:86
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B2A2C4B34025EEC3B01B67B00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     54113
IP address blocks:        167.82.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:4b:34:02:5e:ec:3b:01:b6:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=ea1ff793-c645-4f19-9be6-78de0ec768c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:37:6c:06:ff:a0:e3:14:61:23:dd:c5:e5:
                    92:ac:4b:00:a6:a3:86:73:e4:61:1e:15:b0:7d:b6:
                    ed:ba:b4:59:fb:3d:79:ea:91:ab:cf:f8:78:94:2a:
                    6f:c6:80:5f:b6:8d:73:58:68:ce:65:4c:54:c9:b8:
                    ec:1a:8e:d9:c8:c8:fd:ef:2b:c7:5b:b5:a4:a1:4d:
                    14:de:ff:31:22:bb:13:fd:8a:c8:12:a9:d3:95:85:
                    a9:f5:92:29:bc:f6:f5:22:36:f9:6d:cf:d2:29:46:
                    c4:db:62:85:1f:54:d7:5c:d2:36:e7:fb:ad:b3:10:
                    28:d2:37:c5:2f:dc:54:91:74:5d:20:a8:46:d6:bb:
                    7e:17:80:4f:37:cc:70:d7:21:fb:c5:15:85:f4:74:
                    ba:5d:77:a0:11:df:f7:9b:55:17:14:c3:42:a3:e9:
                    bc:ba:f1:7d:70:c6:23:2c:f5:19:6d:07:4f:98:10:
                    22:42:47:5e:93:f6:a4:71:37:6f:a9:79:7c:46:6c:
                    62:fc:98:e5:30:11:d1:d1:0c:6e:f2:de:07:d4:d6:
                    d3:23:ac:f1:72:15:35:db:51:b4:8e:14:22:0e:ba:
                    40:b0:d7:29:8c:22:7d:65:32:60:54:5b:02:8d:1a:
                    2c:b6:aa:e8:10:1b:6c:36:8b:43:5e:f7:11:3b:f4:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F7:5E:0E:B4:BA:D9:05:83:0C:EB:34:73:86:98:C1:AA:4D:F8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.82.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:7f:3c:4a:e0:9c:74:20:f3:63:81:d5:2c:9d:7e:8b:5d:
         de:61:ce:b6:fd:47:47:5d:ff:3a:a2:45:de:eb:d1:c9:dc:03:
         84:8f:18:2e:ff:42:47:71:12:cc:2d:de:16:53:6a:c0:7d:7b:
         c8:3d:90:ef:da:3d:6e:2e:5c:9d:d3:44:b7:de:0e:53:89:69:
         12:8f:8e:59:d4:77:ed:9f:c2:0a:bf:d0:d9:ce:dd:72:eb:d7:
         96:fd:3b:61:cb:67:4a:3e:bd:c9:d2:2f:80:54:64:d6:24:6c:
         90:7f:b2:ed:9c:07:6c:77:0e:2c:99:bf:0e:9b:ff:8a:43:99:
         61:a5:b4:7f:ff:13:30:d2:c7:63:4b:6f:61:cd:0a:be:85:ac:
         d6:33:ae:80:b6:69:59:49:c3:ea:48:4f:24:c4:1b:c8:8e:9c:
         9b:0c:ac:98:5b:20:99:a3:b4:ed:5b:d6:0e:ec:f5:b0:67:61:
         6c:ec:00:77:12:7c:09:fa:f3:90:70:4a:63:be:24:47:5c:7a:
         b4:00:03:b6:ca:3f:12:ae:a2:05:2c:57:c6:58:8d:0d:8d:1e:
         b0:60:bb:35:59:e6:88:0e:cf:a3:b9:70:8b:af:86:20:83:4b:
         fc:0e:9d:64:ba:00:db:a1:e6:a8:fe:b0:63:79:62:9c:d2:36:
         b9:b9:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:47:27 2025 by rpki-client