Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/c7f5a7c6-4657-3bd4-899b-0e88594df27b.roa
File:                     c7f5a7c6-4657-3bd4-899b-0e88594df27b.roa (raw, json)
Hash identifier:          9DWpCww49/rhhDEdC/S38GUJIH6VGCRHabgmMliW7FY=
Subject key identifier:   DA:30:3A:09:74:A6:58:C8:73:8D:E1:D2:79:D4:D2:1E:0D:25:07:AE
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584B6D2CB6B23D41B5BBABB07BC0
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/c7f5a7c6-4657-3bd4-899b-0e88594df27b.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     18934
IP address blocks:        162.208.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:b6:b2:3d:41:b5:bb:ab:b0:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=0e9d1082-6cdc-4dd9-af5d-a4d928625c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:cc:43:e3:95:71:b8:03:6c:ea:cc:85:3f:
                    19:f0:ee:ae:6a:10:41:96:c2:62:7d:2a:55:29:d8:
                    b8:be:82:d2:b9:a8:d1:d9:c9:cc:40:92:43:b8:ac:
                    37:f2:d0:7a:68:ce:c2:8d:75:ec:01:ab:72:1f:6b:
                    6e:2e:2d:47:8b:13:9b:67:c5:30:ce:25:9b:19:3c:
                    3d:b9:1a:47:43:93:a3:b5:17:45:82:e5:7e:70:7f:
                    57:f4:71:b9:ca:2a:5a:3f:f7:8d:10:1a:56:8d:16:
                    64:ed:da:9e:95:93:82:6c:fe:27:10:cf:67:c2:3d:
                    58:7e:7f:70:f8:a5:cf:77:58:54:20:8f:89:9b:34:
                    c3:3a:c7:20:26:61:bb:9f:e3:b5:27:65:9b:65:66:
                    c3:c1:5d:fe:a0:38:23:05:e6:a7:d7:5a:d9:f7:f5:
                    96:92:62:0e:38:fa:92:8c:ad:cf:c3:04:dd:77:fd:
                    df:29:25:d0:c7:dd:29:4c:40:a6:5b:0c:5a:6a:0d:
                    2b:83:de:1b:30:6a:50:9f:66:ec:75:f4:00:cf:e2:
                    d7:39:e6:2d:2d:08:bb:b9:bd:c1:8f:08:fd:44:bc:
                    8a:a9:1c:87:1f:b8:6f:9a:fd:dc:53:b7:5f:71:6a:
                    41:35:30:5d:58:1e:06:ca:75:f0:a9:b3:de:64:9e:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:30:3A:09:74:A6:58:C8:73:8D:E1:D2:79:D4:D2:1E:0D:25:07:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/c7f5a7c6-4657-3bd4-899b-0e88594df27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fd:87:7a:22:b6:4d:43:7f:6f:8f:b5:cf:5d:e6:78:d2:d3:
         73:4f:97:9a:7f:11:04:9b:47:84:74:db:c5:64:a2:8f:7f:25:
         d9:68:6c:28:6a:46:6d:2b:ab:60:89:d3:5d:f3:e8:2e:2e:04:
         b4:dc:fc:f6:4a:83:fb:14:7c:f3:68:7f:5c:b4:c3:18:5b:41:
         26:08:9d:b0:7d:8b:bb:9b:c8:3f:ce:99:ed:92:f8:52:9e:5e:
         a2:d0:ac:92:62:97:70:26:57:10:8e:0e:52:96:44:0a:b4:c4:
         1c:49:7e:e0:ac:ab:42:3d:65:a5:e6:f3:62:e5:76:dc:7b:ea:
         b7:ce:f1:0b:66:db:7d:95:67:6c:ea:c6:24:d2:22:7e:ca:03:
         c4:09:95:5b:a1:37:21:ad:ec:9d:96:51:4d:b9:59:99:0c:2d:
         51:b5:60:f6:a4:69:b7:06:40:76:81:7f:ed:31:cf:49:69:8a:
         2f:51:ed:ed:d7:86:c7:42:62:ec:a7:1b:76:27:26:b2:c6:0e:
         72:e6:46:bd:cb:87:39:1a:bf:d6:ee:4e:26:e7:f7:be:1f:68:
         39:12:a2:84:eb:77:e6:f2:16:c1:c3:33:61:28:65:dc:c9:15:
         e3:b4:36:58:fb:97:0f:c1:34:55:58:1b:a6:75:03:9a:1a:29:
         00:84:9c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:16 2025 by rpki-client