Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4a64df62-3227-303a-86d3-3a8f9afba845.roa
File:                     4a64df62-3227-303a-86d3-3a8f9afba845.roa (raw, json)
Hash identifier:          sjPZ7e9OAbGSJKKRW854E0PtBrv+5enaNJZYBvIT4/Q=
Subject key identifier:   C2:F6:28:B9:6C:B9:95:2A:8E:4F:10:AA:72:8D:56:1C:A9:5C:81:F3
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584AFEE6AB6ADDB970F56FE96470
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4a64df62-3227-303a-86d3-3a8f9afba845.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     20253
IP address blocks:        162.222.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ab:6a:dd:b9:70:f5:6f:e9:64:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=f4c26a87-af07-4783-bacd-43862dab21b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:38:86:6c:ec:23:3a:81:1e:e7:86:07:82:
                    2b:8a:3d:74:11:32:15:b8:20:4e:76:9f:a7:9f:e5:
                    90:3d:3f:78:5d:92:a7:08:a3:3e:9a:96:8e:10:d0:
                    b6:2e:cd:47:d9:ce:85:d1:f8:06:5e:a8:9c:70:ec:
                    fb:3e:e5:2e:5e:f2:d7:e9:9e:b3:02:88:f9:3e:26:
                    fc:39:f1:08:f8:13:a7:f3:39:62:ad:40:ee:ef:34:
                    d5:33:42:8d:e4:fe:84:90:a5:1c:b6:e2:f8:66:f8:
                    5e:ab:f0:f2:25:67:34:ab:22:4b:65:30:5e:90:9d:
                    60:37:aa:b3:4f:0f:c6:00:9e:c6:28:9a:b0:76:d4:
                    37:f9:22:13:e6:4b:a0:e9:c4:b3:df:af:dc:ea:75:
                    1d:a7:7f:15:f5:e6:d6:db:88:d9:a0:be:25:2f:2e:
                    c0:87:87:3d:90:10:58:e7:6d:5e:d1:4a:0a:cb:4a:
                    67:c5:6c:c4:45:87:7a:b4:9d:45:3b:65:ce:7e:e9:
                    1b:a6:62:90:cf:e3:d1:77:88:62:9e:2c:27:6a:ae:
                    e5:7a:70:72:d2:9b:77:cb:0d:90:95:14:ca:eb:f9:
                    76:31:ff:86:7a:29:d8:bd:22:95:26:54:d3:11:ef:
                    72:25:4a:3e:92:5e:a1:83:39:94:58:40:67:29:25:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F6:28:B9:6C:B9:95:2A:8E:4F:10:AA:72:8D:56:1C:A9:5C:81:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4a64df62-3227-303a-86d3-3a8f9afba845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:08:9c:4c:48:fc:db:60:08:c1:76:9d:2a:bf:15:0a:b3:2f:
         b5:f6:2c:8d:d1:15:18:8a:c9:95:84:a0:26:be:49:af:90:4b:
         82:93:c5:33:e2:78:f5:c8:e9:1e:6a:b2:a6:d2:8e:11:84:4a:
         69:f5:e1:bc:79:cd:a8:ad:d2:35:f6:b7:7b:af:0f:ce:f8:1f:
         4b:9e:39:a6:d8:f4:ed:36:c8:8f:50:6e:e6:31:01:fa:44:75:
         9c:e9:54:5e:09:c9:b3:cd:e9:f3:45:1d:ac:3b:33:75:43:52:
         7a:9d:7f:54:78:be:22:2e:e5:66:77:5f:15:26:8b:08:91:8b:
         25:69:51:db:4a:0b:b4:cc:6f:99:88:d0:d2:77:e9:61:88:7f:
         9b:6b:90:d0:ab:a5:a2:83:68:fd:32:f8:a6:b6:e4:2f:3f:a7:
         9c:fb:7b:da:7d:c2:b4:22:9f:a4:a9:60:c9:7f:c4:19:b4:74:
         f9:38:13:bd:72:cd:d6:1b:16:3a:57:72:07:b7:4d:b3:6c:95:
         e3:3e:2b:f2:fc:ec:e4:05:d8:f6:a0:af:40:76:e4:ba:65:0a:
         a0:17:df:51:5d:5c:3c:7c:bb:47:d9:1f:54:9c:3a:37:3a:ce:
         9a:8d:45:6a:d9:47:27:2e:98:bc:9b:a7:b1:24:ed:6f:cf:4d:
         fa:a3:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:47:03 2025 by rpki-client