Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa
File:                     795fa07a-13af-344a-81c5-38585d67c87d.roa (raw, json)
Hash identifier:          FTGqSTUgSzvSIA23OMQG6ydYyp243Fg6Syd7sENXldo=
Subject key identifier:   C1:02:93:C9:3C:BD:4A:74:57:A0:E5:88:E6:CD:4D:17:95:3E:AF:F3
Certificate issuer:       /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial:       010D0C9F4328584B21CC2D509FE34470D697A900
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     398471
IP address blocks:        157.62.0.0/16 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2d:50:9f:e3:44:70:d6:97:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=8c405a8c-0644-469c-90f3-49448f5041e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:78:6d:80:07:e0:8f:46:68:96:77:9c:61:
                    d7:12:af:c1:8d:9b:22:3c:69:9b:9b:77:76:91:e9:
                    6d:8a:f0:3a:44:cf:20:77:0e:54:77:e3:bc:26:40:
                    24:50:f5:cd:ab:d0:6b:98:68:f4:c1:be:33:52:41:
                    5b:07:74:db:ab:55:81:a0:85:76:7b:1d:18:9e:29:
                    eb:9d:db:9d:24:74:f4:be:8c:8c:fc:76:f4:a7:e1:
                    80:79:1c:ad:4d:b2:60:c8:d8:f5:3a:01:ae:af:f1:
                    5c:fe:89:be:5c:98:bf:5b:22:85:e9:ad:b5:95:ff:
                    aa:6b:d9:65:f6:f2:ba:58:d2:7c:67:b2:c4:47:ae:
                    a7:90:7d:6a:5f:56:46:9b:24:19:b0:91:c3:4a:4a:
                    ff:51:ff:f8:13:68:3b:d2:87:c5:46:1b:aa:3b:04:
                    08:8d:7e:f0:6d:b0:8c:40:0d:43:75:38:b7:2d:23:
                    f0:01:62:db:75:12:46:87:1e:ee:18:ac:bc:82:e8:
                    c2:c7:00:68:50:49:2a:13:6a:61:3d:a1:5a:1a:30:
                    54:88:81:70:12:ac:73:8e:19:59:d1:e8:29:44:d8:
                    c6:ff:af:11:e5:8d:4a:ef:b8:8b:e4:83:e6:d0:ba:
                    a3:23:e1:b9:63:cc:8b:39:a8:9d:d4:64:06:f0:0c:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:02:93:C9:3C:BD:4A:74:57:A0:E5:88:E6:CD:4D:17:95:3E:AF:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/795fa07a-13af-344a-81c5-38585d67c87d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl

            X509v3 Authority Key Identifier:
                keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:3c:12:d0:2f:a8:5d:70:15:cb:9a:99:41:55:fa:ad:48:ce:
         1b:25:4e:09:fd:16:d7:70:2c:d8:c0:00:71:48:46:c6:56:54:
         cd:cc:96:09:87:49:9c:b8:0e:7d:02:dd:4c:15:f5:95:1b:df:
         58:38:53:08:0e:79:d0:55:94:7d:5e:bc:63:48:35:42:f7:b3:
         5d:ba:bd:76:aa:01:ce:34:ef:b3:a7:68:dd:6a:d4:85:3b:57:
         78:7e:61:1e:07:77:c3:cb:cb:93:78:c1:67:ff:cb:3f:b6:f5:
         dd:1c:4a:e0:f3:ae:30:91:60:86:67:94:4d:67:e7:e1:97:1b:
         c4:e3:42:7a:a3:e6:08:3e:1c:a7:34:5b:d6:05:3c:87:39:48:
         1c:a7:10:2f:14:62:fc:89:b9:11:39:2c:d1:e5:b3:07:f1:44:
         83:fb:ff:15:1c:04:c9:2b:e8:33:d0:90:46:fa:5c:0a:c5:9b:
         c4:30:3c:80:f1:81:d3:a7:b4:f2:70:05:02:f5:08:12:f2:9d:
         7b:d5:c0:99:21:d1:f4:b7:22:dd:78:c9:eb:e2:88:3a:14:fe:
         a4:72:8b:a3:29:aa:dd:b5:49:04:8b:ba:7b:90:3c:1f:5b:f9:
         e1:60:8a:c8:f6:a7:ee:5c:7c:81:84:ba:88:38:8d:c0:32:d9:
         9e:ec:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:32:36 2025 by rpki-client