Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/4a085550-2955-396e-9f1c-930034bb2305.roa
File:                     4a085550-2955-396e-9f1c-930034bb2305.roa (raw, json)
Hash identifier:          ieiDYzVp08wwV2OajXregIOVHvF9BGMHDcNFOW6ZWh4=
Subject key identifier:   C8:EE:70:42:E5:AD:43:C5:5B:0A:37:98:B1:01:80:E8:B2:91:B3:2E
Certificate issuer:       /CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
Certificate serial:       010D0C9F4328584B328C359BCBC5EAB154B23740
Authority key identifier: D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/4a085550-2955-396e-9f1c-930034bb2305.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     14183
IP address blocks:        144.167.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:35:9b:cb:c5:ea:b1:54:b2:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=e1f60258-7c15-48c9-ba4f-a3ba5045d5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ee:f2:76:9f:4b:ec:fb:5f:eb:0c:17:08:77:
                    68:92:42:5a:eb:fe:cf:4d:a9:43:04:47:e4:e5:f9:
                    da:94:0f:ee:9b:61:6a:ca:93:6e:f4:b0:9a:f1:01:
                    8b:c8:f1:8a:07:58:f2:d5:8c:b2:20:14:01:e9:ff:
                    05:f6:14:4a:43:50:4e:10:f7:d4:c4:af:1b:a1:c1:
                    f7:9c:77:bb:b4:51:68:c6:46:25:aa:cf:63:3c:d8:
                    a3:ac:ee:d2:e5:21:31:4b:22:a2:74:bf:ad:74:77:
                    b3:11:b1:24:f5:84:82:d6:25:88:0e:b8:71:0d:63:
                    81:89:1f:29:2f:85:ed:57:35:84:b7:58:af:64:db:
                    49:76:fe:89:43:85:99:6e:44:bc:80:3c:10:41:9f:
                    f5:a6:78:7a:fa:e1:3f:d0:fa:ea:e4:be:7d:c5:35:
                    2b:0c:ae:24:e8:cd:ef:57:ec:d1:1a:c6:b9:d6:74:
                    45:ee:36:98:f5:27:6d:bb:ab:eb:bd:08:3f:1e:f1:
                    89:57:92:79:53:8a:25:1f:55:af:3f:e9:cb:1a:38:
                    79:e8:1f:f7:09:ba:e9:ee:96:4a:4c:bb:af:cf:fe:
                    27:d3:a1:6e:2c:a5:19:57:4d:43:f6:56:16:5f:c8:
                    be:ae:5f:ca:e6:1c:57:fd:54:d4:b4:2e:eb:d9:66:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EE:70:42:E5:AD:43:C5:5B:0A:37:98:B1:01:80:E8:B2:91:B3:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/4a085550-2955-396e-9f1c-930034bb2305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.crl

            X509v3 Authority Key Identifier:
                keyid:D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:32:26:54:05:2c:d4:ff:83:c1:98:15:36:9a:ae:33:48:
         35:5d:82:b4:f0:72:95:80:f1:57:c6:a1:00:a8:59:45:dc:08:
         45:4e:53:3d:47:73:9d:3f:f4:af:31:37:9f:1e:09:68:ef:80:
         cf:64:9f:91:b1:c1:b5:6b:dc:c1:06:3f:2f:9e:62:38:7b:69:
         92:30:89:dc:ee:be:04:b7:ed:be:f9:a8:13:f5:b0:d3:f7:fb:
         70:86:bc:36:48:19:eb:30:f6:f1:ac:ec:8e:7c:80:a2:58:80:
         0f:99:fc:f5:76:f2:50:fc:00:bc:ac:cb:2e:83:ae:59:42:2e:
         ad:b5:c5:25:1e:d2:0f:e6:88:dd:42:00:c9:10:ba:b9:71:ab:
         79:e6:25:04:47:c5:d4:74:e3:b1:76:cb:ec:23:56:b6:cd:9f:
         3e:13:fb:d5:b4:b4:83:10:94:e5:a4:d8:04:ca:22:07:bd:40:
         35:55:fb:6a:f2:c6:9e:9f:91:bf:6d:f5:2b:63:27:ad:d5:6c:
         01:b2:e6:f9:9f:28:cb:14:93:c2:b4:bb:93:17:41:b3:25:03:
         c0:c3:bd:a4:e4:72:94:f7:83:9e:05:5d:d7:25:9e:5e:08:48:
         79:d4:85:15:a6:ce:fc:bd:fc:aa:93:10:aa:42:fd:6b:f7:40:
         d7:4e:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:45:40 2025 by rpki-client