Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/480d7a14-dda4-3eaa-860b-15903be57295.roa
File:                     480d7a14-dda4-3eaa-860b-15903be57295.roa (raw, json)
Hash identifier:          f83BxYnL4SlAp3BoGrZByJJ7UWCIoXZSVhMRukIw8c4=
Subject key identifier:   72:D6:41:F2:A9:3F:27:A0:C9:D3:62:68:C2:70:8B:8A:97:A8:89:4F
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584B004BECCFA5EB0DAA88FF3E80
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/480d7a14-dda4-3eaa-860b-15903be57295.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     10497
IP address blocks:        199.165.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:ec:cf:a5:eb:0d:aa:88:ff:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=c16a51e6-53a7-4c06-a94b-1bf63fe43f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:62:4e:25:57:97:6a:e3:ab:f7:2d:4d:48:
                    31:10:45:be:3a:6a:94:18:f3:a8:ae:22:a1:1b:03:
                    15:1b:42:3f:0e:07:c4:7e:e2:05:fa:65:d8:3e:58:
                    bf:d5:f9:22:bb:19:5f:37:d0:cb:26:15:c2:87:6b:
                    c8:c3:90:a2:ea:11:4e:a0:ce:61:30:cc:74:6a:b9:
                    74:97:23:bf:94:43:d1:81:d0:97:be:cf:ac:1a:63:
                    cf:87:4c:cf:b9:77:24:ed:de:a3:c5:9e:dc:cd:e8:
                    9c:61:ec:09:5a:02:a3:66:73:ee:c2:89:0e:71:76:
                    6e:20:84:01:96:50:6b:9b:00:1a:89:63:39:63:ab:
                    76:d0:e8:4a:c0:94:2a:99:59:7d:16:ff:75:18:6d:
                    61:0a:38:45:af:ac:03:91:9d:16:8a:26:37:1f:22:
                    b0:34:bb:ad:dd:e4:12:0c:1e:76:4f:cb:ea:3f:e2:
                    69:48:b3:f9:96:db:bf:07:40:3e:7f:79:c9:8a:02:
                    0e:de:a8:29:cc:24:1c:94:e0:fc:95:a4:85:c4:04:
                    1f:ca:13:9d:c5:62:76:db:9d:ab:e6:a8:23:59:f8:
                    72:19:ca:ab:e7:4f:4d:ed:98:c0:27:21:8c:34:15:
                    a4:60:fc:9c:6f:72:59:5a:08:eb:b5:ab:52:61:41:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D6:41:F2:A9:3F:27:A0:C9:D3:62:68:C2:70:8B:8A:97:A8:89:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/480d7a14-dda4-3eaa-860b-15903be57295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.165.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:8a:64:d8:52:e5:e4:61:32:b5:69:90:10:c0:b5:8e:85:
         17:85:f9:84:d6:84:be:e5:b8:70:c4:56:17:e3:26:f9:75:c9:
         ae:45:73:b1:9c:2f:29:9b:2d:58:dd:4f:80:b7:82:47:de:52:
         7d:4a:59:19:07:fc:9b:6b:25:bd:9b:0c:fc:83:64:76:57:4f:
         5e:36:33:55:84:b0:86:b0:a2:23:1c:ae:a1:36:70:fd:4f:16:
         5e:25:f7:ad:2f:1e:a9:2c:d9:7b:52:45:63:24:61:9c:d8:01:
         5f:39:60:2f:ee:ac:23:84:de:9f:02:4a:be:84:fa:19:e0:8c:
         12:ca:06:f0:42:3d:2a:44:ac:a5:1e:8f:d9:12:ad:a8:98:01:
         1c:aa:72:6e:33:fb:5a:72:16:fa:34:91:f5:86:4a:0c:dd:1b:
         70:b5:dc:45:4b:a0:ed:56:c6:36:b7:f8:89:1d:cb:4f:24:d9:
         3e:50:bd:2c:16:50:24:8a:b0:22:9c:91:7a:5a:6c:c1:7c:cb:
         8a:d9:60:bf:ed:b7:ff:b3:7a:9d:30:2a:3e:c1:42:ce:91:49:
         15:53:15:ae:b5:40:2b:18:74:a5:5a:8b:75:fa:89:11:d0:4c:
         8d:38:18:92:e0:56:5c:c4:ba:7b:7a:4b:b1:e9:67:88:d5:5a:
         9a:83:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 19:49:30 2025 by rpki-client