Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/41f823d6-4729-32ca-a636-02d6663b52bf.roa
File:                     41f823d6-4729-32ca-a636-02d6663b52bf.roa (raw, json)
Hash identifier:          ZMZEl8APl5oMt0DDoYQ4QMIANzhFMAmA0cMnstYs0bE=
Subject key identifier:   E3:09:CD:9D:0D:C6:8A:D3:D5:F9:3B:62:75:33:10:24:52:67:1B:64
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584B110C0057BE4421A204B46000
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/41f823d6-4729-32ca-a636-02d6663b52bf.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     22333
IP address blocks:        162.250.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:00:57:be:44:21:a2:04:b4:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=ed92323e-5f0d-4842-a2bc-74b94c2b740b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:e4:c6:d7:82:03:b6:a6:e6:c2:63:a4:b3:
                    fd:f1:3f:f5:df:5a:7d:bb:c4:09:24:87:07:39:92:
                    a6:91:0f:fa:ad:67:96:e7:41:6c:4c:0e:5c:b9:1a:
                    a6:ce:3e:b1:15:85:20:2c:19:c8:bb:7c:20:1b:48:
                    ce:af:69:a2:07:ac:3f:f9:b9:f4:05:cd:a5:88:58:
                    36:50:6a:14:ba:9b:02:9a:5a:01:0b:bc:41:a4:79:
                    e2:ac:70:d5:85:8a:06:5e:a0:93:b4:7f:65:94:cf:
                    6f:08:f0:08:46:05:93:77:85:f0:2d:21:ae:e4:f8:
                    20:d1:ec:f1:19:3d:7e:aa:c4:f3:a0:53:99:b7:30:
                    82:55:6f:8e:cc:90:db:56:ed:a3:73:5c:11:75:84:
                    01:b2:88:96:24:36:2a:ad:96:07:f9:0d:96:16:a1:
                    d7:82:5c:0b:79:0c:13:fc:a8:a3:3d:43:65:65:2e:
                    7d:94:19:f8:f9:f4:83:94:67:d0:b2:39:7a:1e:f2:
                    6d:f3:be:6c:68:93:c8:e3:8b:f5:3c:4d:23:f4:c1:
                    d9:0b:d1:e4:8f:25:50:e9:2e:90:0a:f0:ad:c0:0e:
                    00:5e:21:6a:fb:d7:ca:69:a3:6b:bc:ef:06:5f:4d:
                    ee:4f:41:cd:cc:97:59:98:7e:b6:49:22:f5:b5:05:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:09:CD:9D:0D:C6:8A:D3:D5:F9:3B:62:75:33:10:24:52:67:1B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/41f823d6-4729-32ca-a636-02d6663b52bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:6c:90:98:5b:0a:ac:f2:de:bb:12:99:a6:3e:0f:05:5d:
         aa:d0:c1:42:da:e5:56:08:26:93:c3:70:45:0a:5b:a9:76:da:
         b7:b5:c0:8b:40:94:01:af:cd:ba:fe:b8:d3:1b:e5:2c:6d:fa:
         37:e3:eb:73:13:cd:80:bc:8e:fd:25:52:ac:65:e2:0a:3e:7d:
         0a:68:d3:56:7c:98:f1:e3:83:7f:fa:09:88:41:e1:00:2b:7e:
         c9:03:c3:cb:86:e7:c1:ec:e6:54:e3:e1:65:5d:ba:f5:06:75:
         2b:10:8f:c9:fc:3d:6c:12:ab:96:11:94:d9:c6:20:ee:c9:76:
         8f:e2:fd:36:07:55:b4:c0:c7:f0:87:97:6c:10:cb:e3:02:4e:
         00:64:ef:e6:9a:ba:cf:1a:e5:a5:59:e3:a6:43:16:a8:99:49:
         ac:62:1d:87:4c:72:b4:f2:9e:7e:9d:28:1d:48:b9:91:bd:9c:
         e9:15:ec:30:e8:cc:27:44:fa:c3:76:ce:da:14:b0:b6:96:fd:
         2b:cb:38:09:fd:8a:82:6c:3a:a5:a4:5c:1e:5f:e6:cc:de:12:
         2b:9f:a4:ca:d5:27:50:15:4d:ab:d9:67:54:67:fd:e6:78:dc:
         47:1c:ae:e4:16:f4:b7:2a:70:e7:8c:18:fc:d6:d7:20:42:97:
         af:1b:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:54:47 2025 by rpki-client