Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9377a247-d0f1-3351-95f5-998efb031916.roa
File:                     9377a247-d0f1-3351-95f5-998efb031916.roa (raw, json)
Hash identifier:          DO0oNu0lg7uVCMVpMZBP1j03gCw66kzb/oMb0jEQHzk=
Subject key identifier:   62:34:94:2C:00:A3:DF:92:5B:2C:2A:BF:4F:AD:94:B7:31:45:8D:8F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CFDF0732474F6C7547A80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9377a247-d0f1-3351-95f5-998efb031916.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        170.85.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:fd:f0:73:24:74:f6:c7:54:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=a5549fcd-b6af-4c5f-9f7b-182d705e8c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:c0:e6:5f:b2:6e:c8:91:4e:a3:c3:7a:2e:
                    65:56:6f:e7:0a:ac:b5:4f:3b:3d:63:1b:b3:9a:6d:
                    59:78:eb:fc:7e:73:2f:be:3f:9a:d9:3c:3c:22:d7:
                    c2:ed:2f:dc:6c:b5:ef:cb:32:13:15:39:cf:85:fb:
                    51:cf:ad:b5:98:12:44:09:9e:f0:ab:b5:26:c5:a3:
                    36:b1:69:6e:8b:e4:b5:aa:f7:a5:c1:a3:bc:69:9e:
                    f4:f9:0b:d3:91:5e:b4:5d:76:dc:01:be:6b:53:37:
                    c0:ec:09:1a:62:a0:73:04:7e:c6:08:cc:13:80:51:
                    cb:98:45:9a:ba:1f:d4:20:4e:5a:2d:3b:6b:27:9b:
                    70:a8:4c:26:0e:77:14:9c:ef:c6:ce:13:91:54:7d:
                    fa:a0:36:54:24:07:50:e5:ba:d2:bb:9a:c9:32:b8:
                    6c:c2:ae:f0:37:2c:8b:27:bf:6e:1d:66:d8:21:df:
                    5f:4b:13:48:0b:28:c3:81:78:59:fb:73:bc:cf:9e:
                    0e:3f:1c:da:24:87:68:2e:b8:e3:39:bb:89:ed:1d:
                    44:b0:7c:b2:ca:e7:78:b0:1e:3f:4b:99:f2:81:0e:
                    8e:20:13:f5:c6:c4:02:45:96:4f:02:62:ab:3f:79:
                    05:58:a5:4b:2e:b3:52:19:36:f7:b2:3c:ee:09:5d:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:34:94:2C:00:A3:DF:92:5B:2C:2A:BF:4F:AD:94:B7:31:45:8D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9377a247-d0f1-3351-95f5-998efb031916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:ba:3b:28:d4:93:3b:fc:1f:c6:93:1d:bd:e0:61:9e:4a:
         3f:00:32:4f:b3:0c:4c:b6:db:c4:94:65:1d:f0:3f:c9:58:8e:
         3c:56:c6:3e:a6:5e:65:03:b2:91:2c:fd:84:77:7e:94:31:6b:
         70:c6:34:9b:33:0a:85:7e:ca:00:e5:10:fd:6b:d6:aa:9a:bd:
         8c:0d:ba:9a:94:25:00:26:b1:50:1f:c7:d8:15:ff:b6:e8:53:
         78:0b:42:d4:2c:c9:8f:6d:50:0b:5b:4e:e7:29:e2:5f:1b:ab:
         ea:17:dd:ea:7e:11:62:70:6b:eb:19:09:11:56:69:bb:13:7c:
         c6:7f:d4:1e:88:38:c1:dc:82:da:94:8c:b0:8a:00:82:8a:c9:
         40:fe:5b:05:64:41:2e:ec:17:90:8e:e9:5f:88:fb:14:00:2c:
         53:6e:cd:2d:d3:8a:48:10:c2:0b:0d:93:45:2d:f3:ce:65:f2:
         43:ca:ed:5c:7d:dd:80:f0:7c:26:d7:4d:31:73:2a:c4:07:0c:
         2f:13:eb:23:4b:d3:ef:1b:04:39:cf:57:e9:80:b4:d8:ee:72:
         7d:dc:ad:07:29:2e:85:f9:84:fc:10:1f:24:d2:16:cc:9b:61:
         81:11:f2:7b:c7:2c:fe:69:ce:42:08:04:03:0e:f5:4e:37:8c:
         91:17:f9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:20:17 2025 by rpki-client