Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/c0fbd0d7-8f9c-303d-889d-b8bcb385325d.roa
File:                     c0fbd0d7-8f9c-303d-889d-b8bcb385325d.roa (raw, json)
Hash identifier:          oNkPp8eoHHmUuzKqJSHV6EpV5M0POvVbrJ8/X5bN2MQ=
Subject key identifier:   F1:B5:39:DD:98:44:17:29:32:3D:6B:62:53:D9:EB:92:48:94:DD:09
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F4328584B9F6CDA655A5A3347E9390800
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/c0fbd0d7-8f9c-303d-889d-b8bcb385325d.roa
Signing time:             Fri 24 Oct 2025 01:00:30 +0000
ROA not before:           Fri 24 Oct 2025 01:00:30 +0000
ROA not after:            Thu 22 Jan 2026 02:00:30 +0000
asID:                     63023
IP address blocks:        167.17.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9f:6c:da:65:5a:5a:33:47:e9:39:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Oct 24 01:00:30 2025 GMT
            Not After : Jan 22 02:00:30 2026 GMT
        Subject: CN=494c1c49-3ff4-4fa4-a375-2a1ac160b92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:83:54:75:c6:bb:41:1d:0f:3e:fd:db:e9:
                    30:79:34:24:0f:76:dc:db:88:26:07:24:36:01:ba:
                    32:e9:8e:f7:12:78:00:9f:98:26:73:c9:bc:75:a1:
                    c9:26:6e:96:ee:6c:e9:4b:95:38:07:bb:b7:0f:66:
                    23:a7:85:bf:9a:dc:a2:42:ef:f0:e8:2c:41:8d:33:
                    e7:9a:ff:f4:37:00:fe:30:6f:31:d9:ba:9f:34:7b:
                    53:ff:8c:a6:60:58:10:a9:83:35:38:7d:9d:e3:41:
                    d7:95:70:8f:65:b5:c1:d5:30:25:a5:78:a7:0a:df:
                    92:3c:13:ef:4a:f6:8f:f0:b0:cc:3c:d8:17:1b:96:
                    eb:e9:f6:cf:bd:9b:97:33:2e:a9:d7:11:6a:9f:65:
                    9c:2d:d9:ce:38:39:06:dc:12:78:49:f4:c5:10:e4:
                    6b:de:72:30:b1:8c:f9:f4:2a:3e:23:7d:89:91:e9:
                    57:e8:be:cf:c8:b1:d1:c1:52:67:39:d0:b8:bd:f5:
                    7f:61:bd:71:a5:37:de:25:bb:d5:e0:4f:2e:13:14:
                    da:91:71:17:ea:fe:28:c9:7a:82:31:c5:22:59:3e:
                    18:59:6d:6b:c8:47:38:67:93:d8:be:58:d5:bd:a1:
                    b7:a7:ba:c9:8d:5f:fc:ad:8d:e7:3c:56:f5:0b:53:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:39:DD:98:44:17:29:32:3D:6B:62:53:D9:EB:92:48:94:DD:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/c0fbd0d7-8f9c-303d-889d-b8bcb385325d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.17.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:2a:58:bb:63:3e:e4:6f:bf:de:44:c7:0b:0e:04:2a:1b:
         4b:a4:b4:1f:c8:1e:2a:32:20:f1:5a:ab:8f:47:63:4b:2d:c1:
         1f:f9:03:60:d2:8d:63:de:b8:cb:03:8e:cd:44:a7:10:c9:aa:
         a8:1b:ae:6f:7b:6b:74:a9:c2:b8:ae:c0:28:a4:a5:76:08:6d:
         4f:d6:31:bc:dc:ae:88:3c:64:27:cb:b4:16:ad:3c:57:c6:9a:
         26:b7:41:d7:29:af:49:c3:c5:a9:04:a8:43:ac:c3:4c:d0:40:
         3f:0b:1d:cc:d1:d8:14:b9:a8:71:89:6a:11:a4:02:06:ec:5d:
         a6:f3:86:0b:64:6d:98:d4:ef:2e:bd:2e:64:47:e6:ce:12:f9:
         06:49:5f:c2:cb:8c:12:b9:45:2c:2f:8a:3c:fb:98:56:c3:2d:
         dd:9a:64:8e:72:c7:13:1e:c1:28:ac:54:0d:61:59:29:32:e6:
         7d:db:c3:4b:26:c7:7a:e5:4d:f9:ba:a7:5e:88:e1:9c:9f:1d:
         ab:b2:4e:00:77:5b:98:f5:38:d2:01:7a:cd:15:9b:5e:98:f7:
         c4:bb:e5:0a:71:e7:97:96:46:6e:8b:20:db:de:2e:7e:70:43:
         10:af:d9:ec:e8:e9:3e:b5:76:b7:cc:1e:bb:13:5a:01:7c:1c:
         be:dc:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 14:51:23 2025 by rpki-client