Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/41dcca07-860f-381f-8c2a-e453ea6881d3.roa
File:                     41dcca07-860f-381f-8c2a-e453ea6881d3.roa (raw, json)
Hash identifier:          Z2vUxIIEwxf4G+ErVm99iZIIOjRaK2mt0r+MA9GaRBs=
Subject key identifier:   B9:D1:8B:4F:13:3E:57:9C:77:0A:49:D4:B4:B3:90:D7:36:BE:AE:6E
Certificate issuer:       /CN=5cab4920-f916-4f6e-89be-328cbbe66f94
Certificate serial:       010D0C9F4328584B99D79A360E8BE5917735EC80
Authority key identifier: EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/41dcca07-860f-381f-8c2a-e453ea6881d3.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     15261
IP address blocks:        162.222.108.0/24 maxlen: 24
                          162.222.109.0/24 maxlen: 24
                          162.222.110.0/24 maxlen: 24
                          162.222.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:9a:36:0e:8b:e5:91:77:35:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cab4920-f916-4f6e-89be-328cbbe66f94
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=55256bb0-6188-4d89-b0e6-060f668870c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:1f:f5:64:bd:61:c3:ee:e6:b2:82:96:e5:
                    0d:85:04:f6:5a:ef:ea:20:81:8c:4a:47:fc:59:40:
                    33:d0:cd:e3:b3:94:a3:1d:91:cf:3d:19:07:e6:dc:
                    da:47:09:d6:e8:c2:e1:0c:5a:3d:dc:80:5e:15:8e:
                    c6:81:b2:72:e3:45:7f:61:99:da:ea:48:06:b9:0c:
                    0e:3b:fa:27:81:e9:eb:c7:f7:57:ad:20:6c:ae:64:
                    9d:1a:91:86:70:46:78:b0:74:5a:30:12:e9:4b:35:
                    77:31:2e:36:07:88:cc:3e:9e:59:0d:28:90:7e:5f:
                    e6:24:07:2f:f1:79:4d:39:18:c8:07:2d:03:c7:87:
                    d7:6f:11:11:58:d6:a7:c9:4c:8e:17:25:59:68:69:
                    79:54:cd:01:83:93:b0:8e:84:c0:fc:96:90:80:01:
                    cd:6b:b6:a4:3c:83:5a:0a:12:2b:b9:ac:54:e1:2d:
                    e5:89:e1:58:1a:4f:c3:b2:6d:2b:13:0e:c7:b2:a2:
                    90:c1:2f:4a:5c:8f:31:28:59:0c:db:ba:6d:67:49:
                    9f:f0:53:5e:1b:f6:53:39:56:6b:a5:3a:90:b5:22:
                    31:cd:80:ae:79:0d:6b:8a:d3:eb:9a:60:49:e8:16:
                    60:27:40:dd:1a:87:c4:07:fb:c0:d1:db:aa:07:b8:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D1:8B:4F:13:3E:57:9C:77:0A:49:D4:B4:B3:90:D7:36:BE:AE:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/41dcca07-860f-381f-8c2a-e453ea6881d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.crl

            X509v3 Authority Key Identifier:
                keyid:EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ed:af:b3:2e:ad:05:3f:47:b7:41:c3:f7:22:3a:ad:88:d9:
         64:1f:cd:7e:9a:eb:83:2a:06:52:0c:66:af:88:8e:72:3a:f4:
         ef:ec:38:06:7b:63:f4:ad:b6:c4:1a:6c:b3:8b:fd:b2:04:33:
         bf:0d:20:08:26:49:0a:85:d2:35:05:97:5d:1b:b6:f6:cf:07:
         90:ea:e4:ef:9e:70:a7:2f:05:b9:04:c9:73:90:61:37:4f:a6:
         4a:12:f5:bb:e8:33:59:43:c8:f1:2d:d3:da:67:80:0d:31:ff:
         65:3f:a2:be:3f:b9:1d:d7:0a:93:74:36:74:2c:b6:67:49:2e:
         72:5a:ba:af:2c:0c:18:2f:90:3b:07:d2:59:28:b1:eb:ea:a9:
         af:67:89:3d:ed:d5:30:de:2a:5a:1d:cc:8b:ae:ca:ce:17:9f:
         f2:f8:c8:97:7b:c7:2e:70:37:98:97:b4:bd:3b:45:66:e3:e3:
         7f:97:09:24:d1:68:09:25:ef:88:d3:84:40:21:3a:2c:a0:d1:
         f7:c7:2f:9d:52:c4:a7:10:8a:b7:b8:e2:e5:2b:ff:3c:cf:7a:
         57:ac:1e:82:25:ba:5a:2d:28:d8:c5:d0:4a:17:1a:d7:5b:19:
         71:0a:6f:0d:90:c1:d9:98:ac:b2:b6:34:2c:70:06:1b:b2:12:
         1d:96:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:40:21 2025 by rpki-client