Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/744ede6e-7fb2-3fc1-a79a-4c277c893f40.roa
File:                     744ede6e-7fb2-3fc1-a79a-4c277c893f40.roa (raw, json)
Hash identifier:          u1OZb7x8eL3t31i/3FXdF6Exg96xXiHdXRkam/k8E3U=
Subject key identifier:   B8:75:8B:EB:AE:DF:A0:79:B6:07:C6:6A:AD:F3:39:0C:6A:D6:2F:97
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B233193D0A2DBF098FCD43980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/744ede6e-7fb2-3fc1-a79a-4c277c893f40.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        192.178.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:93:d0:a2:db:f0:98:fc:d4:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=e269cac6-eff2-47e4-bd00-92c13976acd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:da:e6:e9:cd:7b:9e:52:b8:9d:c7:7c:73:
                    2d:57:05:21:b5:70:86:4f:16:e8:03:cb:9d:24:e8:
                    22:2d:97:c4:0b:34:85:52:e3:90:f9:6a:85:0e:d6:
                    ee:13:4f:3e:6a:44:83:0d:a6:61:e1:42:00:77:c3:
                    be:69:98:24:cf:43:96:99:bd:d6:f2:c6:2f:e9:39:
                    ae:51:e9:68:9e:71:5a:1d:97:38:4c:52:6d:43:55:
                    b1:bd:13:aa:66:75:c2:d2:bf:41:f4:4c:34:f8:13:
                    66:4a:62:cc:bb:58:81:35:fc:8a:fd:e0:c1:82:5c:
                    5f:2b:1e:0a:71:18:56:a5:fe:7b:29:04:95:37:c1:
                    6f:46:9c:5a:8c:2c:08:c5:cd:f3:02:df:2d:0c:0f:
                    a9:22:ee:3e:51:65:66:9d:14:2d:76:62:05:6a:63:
                    53:03:f8:42:c3:4e:f4:85:97:78:36:f1:19:b5:ee:
                    24:91:59:bc:af:a8:cd:67:10:93:b6:8c:71:5a:90:
                    30:4e:87:b7:dc:33:79:0b:93:17:5e:6c:fd:a9:c8:
                    6e:ff:63:00:dd:ba:b5:a2:2e:85:86:84:ee:05:5a:
                    ce:8c:39:77:f4:39:8a:ca:06:c7:65:3f:c4:e1:0e:
                    c0:be:d4:ca:1f:02:41:07:df:36:17:b0:9a:c2:0a:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:75:8B:EB:AE:DF:A0:79:B6:07:C6:6A:AD:F3:39:0C:6A:D6:2F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/744ede6e-7fb2-3fc1-a79a-4c277c893f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:4f:d2:f2:cf:c2:7e:6d:58:c7:ff:89:0f:c3:ce:46:5f:
         68:4a:0f:97:1b:79:0c:59:47:c4:e5:cf:7b:12:e8:b7:a8:cf:
         06:86:02:66:00:cc:f3:ec:70:61:c4:13:66:44:25:e2:e0:e1:
         77:e3:39:d0:c5:12:34:cd:0c:be:49:9e:7e:20:80:16:79:fb:
         c7:70:cb:54:09:a2:92:82:0d:11:2c:84:81:ed:49:bf:a9:94:
         9c:c0:58:c2:6e:ff:53:7d:0c:c8:35:52:ff:bb:5f:9a:13:38:
         ab:ea:35:bc:be:5f:15:32:81:ce:45:31:2d:a5:46:26:92:da:
         eb:ff:10:07:58:5e:49:96:fd:bd:37:58:08:66:f4:b5:ba:e3:
         c4:87:20:4f:b1:69:0f:57:23:b4:c9:ac:6e:81:67:07:6a:63:
         51:09:a1:50:a9:f4:d8:6e:02:0e:49:aa:76:c8:a1:cd:b5:06:
         54:fa:9c:1f:e2:d1:b8:e2:55:d7:7c:3c:55:61:f3:ac:d7:41:
         ca:ef:ce:08:cc:82:42:c1:47:be:c4:0c:18:45:41:53:11:0b:
         be:3b:02:01:4d:e8:06:14:58:b4:81:8a:e6:bc:9f:48:67:cb:
         5a:c6:c7:54:ef:90:28:38:ab:e2:2a:7f:fd:fe:51:f4:67:03:
         48:ed:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:34 2025 by rpki-client