Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/5e43ac0c-a8c1-3ab8-92ef-a906a8443bf8.roa
File:                     5e43ac0c-a8c1-3ab8-92ef-a906a8443bf8.roa (raw, json)
Hash identifier:          +jT7ZhbP6Iyj35xSCE6uhUs2lKOp+SUB5E7H7CMzENM=
Subject key identifier:   46:23:2A:AF:74:F5:CB:C1:33:21:B9:9B:2C:A0:F0:E2:2A:D5:45:38
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584B6F4515A3F2F1C1243D350100
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/5e43ac0c-a8c1-3ab8-92ef-a906a8443bf8.roa
Signing time:             Mon 06 Oct 2025 19:01:37 +0000
ROA not before:           Mon 06 Oct 2025 19:01:37 +0000
ROA not after:            Sun 04 Jan 2026 20:01:37 +0000
asID:                     17275
IP address blocks:        161.107.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:45:15:a3:f2:f1:c1:24:3d:35:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Oct  6 19:01:37 2025 GMT
            Not After : Jan  4 20:01:37 2026 GMT
        Subject: CN=0b959789-7cb0-4931-92a8-1d0e871d437a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:c8:09:90:03:c7:0c:5a:0b:65:f4:e4:a1:
                    d7:3a:17:9a:ca:b6:b4:b9:03:db:2b:fd:3a:92:b1:
                    f0:46:03:95:5e:b6:72:7d:70:e1:17:6c:5e:6b:7e:
                    ed:f5:19:b8:27:68:68:22:02:db:2d:59:37:c8:2c:
                    9f:5f:f8:79:7c:8f:22:42:8e:89:99:2a:1f:26:8f:
                    f2:e0:e8:3c:95:59:64:16:6d:08:40:33:82:f1:5e:
                    57:8b:8e:3b:0b:13:f3:18:ba:84:58:68:16:78:61:
                    7f:48:4d:4d:20:20:63:e7:71:d4:04:6d:2d:7e:e0:
                    6b:78:25:dd:2a:06:e7:e6:e0:83:f7:dd:05:6b:e0:
                    9c:e7:5f:17:8c:5e:3b:c1:aa:4e:ed:95:5e:ff:00:
                    3d:85:ef:8f:18:b0:89:5b:81:97:16:05:01:f4:82:
                    d4:b5:f0:ea:a0:a6:41:7d:3a:9a:c8:2c:89:b2:7a:
                    36:74:48:e5:aa:98:5d:f2:84:5e:fe:8f:92:24:0f:
                    84:ea:c4:d5:f9:98:29:0a:34:09:3c:34:9d:4b:50:
                    ea:bd:2f:c3:a2:f2:e9:e3:60:e4:23:e5:c9:06:2e:
                    ba:a0:75:07:3d:b0:51:c7:2c:7e:b2:68:1e:06:24:
                    44:a1:85:f4:08:48:5a:ff:69:d4:8a:8c:0c:52:ff:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:23:2A:AF:74:F5:CB:C1:33:21:B9:9B:2C:A0:F0:E2:2A:D5:45:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/5e43ac0c-a8c1-3ab8-92ef-a906a8443bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:11:d6:22:ec:b3:c7:a9:ad:ba:91:8b:c0:40:59:6c:e0:ba:
         6d:69:d6:45:6c:8e:b3:d1:1c:90:06:00:cb:1c:35:1d:82:04:
         9c:79:c8:8e:2e:81:4c:7d:9e:32:f2:e3:ae:b4:5e:8f:bf:6d:
         f9:41:af:a5:be:71:ab:ef:6c:93:3b:8d:77:2d:54:7f:b1:d0:
         6a:be:b7:7d:08:71:45:e5:84:d6:e6:a3:3e:0b:3e:1c:fe:8e:
         9f:8e:b3:09:20:b0:11:8b:79:c8:24:53:6a:27:82:7b:6e:19:
         68:52:93:e4:7e:f7:ad:74:6c:77:e3:53:0b:a9:cf:1c:46:3c:
         e4:1e:31:60:43:35:bd:87:04:cb:46:cc:bc:a8:32:5c:f9:e4:
         d2:04:d4:de:dc:92:1d:dc:a2:51:c3:64:af:32:2b:b1:f1:8b:
         29:d4:27:2a:fa:4d:4a:9d:a8:90:18:9d:f4:02:b6:e9:70:26:
         93:ad:ba:5d:0a:27:b8:41:53:9b:ae:26:28:73:39:30:25:75:
         fc:00:23:8c:b0:00:24:0e:48:03:fd:04:8a:d0:17:f4:59:05:
         94:25:d6:a6:95:7f:49:23:7e:10:be:dd:fc:91:c4:0a:f5:3f:
         56:80:96:75:b2:9f:70:ed:23:c8:09:d4:cf:0b:31:6d:98:45:
         3e:66:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:49:47 2025 by rpki-client