Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/86b21429-190f-3fcf-a5ed-9ea45aab3d66.roa
File:                     86b21429-190f-3fcf-a5ed-9ea45aab3d66.roa (raw, json)
Hash identifier:          JUsAWsMMRcfShZf3hPx2tnBnE2wXN/nQSQdbkILeqcA=
Subject key identifier:   23:6C:A6:81:39:62:AA:79:C5:1A:00:A0:DB:11:8D:6B:CF:47:56:BA
Certificate issuer:       /CN=e9769409-4db3-443e-9837-3afd4dca595d
Certificate serial:       010D0C9F4328584B9E078F9B4D6C5F08F33F0880
Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/86b21429-190f-3fcf-a5ed-9ea45aab3d66.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     23316
IP address blocks:        170.62.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:8f:9b:4d:6c:5f:08:f3:3f:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=6231a171-6472-4b11-bd4c-f4e93bbf5e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:b3:05:77:36:ef:d6:a8:d9:a0:bf:d2:c3:
                    45:71:49:00:03:2a:91:20:14:25:6a:a2:98:37:48:
                    94:13:04:9b:d3:45:e8:dd:b8:fb:62:ec:26:0c:77:
                    66:00:7a:3b:f7:67:05:71:8a:61:53:30:4d:a2:e7:
                    b1:db:75:e9:5b:b5:22:df:88:f0:7c:a6:0c:79:4d:
                    50:53:63:9b:0c:ab:6d:c7:75:3d:e2:d5:2a:d3:b6:
                    5d:07:90:8b:f2:f4:2d:15:40:ba:1c:31:31:cb:ef:
                    ef:40:2e:18:d2:a4:77:6e:b1:e8:ea:9f:ec:7f:32:
                    be:97:09:fb:fc:14:f8:6f:68:97:89:6e:6c:dc:d7:
                    f7:ca:16:f0:51:17:e4:1b:17:24:e8:71:e6:9b:4b:
                    ac:be:36:13:ab:86:2c:58:85:e6:30:c6:20:49:0c:
                    da:c4:3c:9f:0e:7c:c9:4e:d8:be:40:ed:04:8e:0d:
                    b8:38:7f:d0:07:f9:dc:b7:3f:d8:3d:03:b3:ce:d5:
                    58:61:7f:2c:dc:2d:81:02:5d:ad:d3:be:f3:a5:2a:
                    c7:bc:1c:c8:bb:a5:d8:99:b1:e5:2c:c7:47:d4:c8:
                    cb:49:a1:4c:19:84:a0:c4:2e:67:49:6d:f7:14:9a:
                    cb:c4:25:f9:82:aa:ae:e6:11:56:70:da:95:33:c1:
                    35:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6C:A6:81:39:62:AA:79:C5:1A:00:A0:DB:11:8D:6B:CF:47:56:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/86b21429-190f-3fcf-a5ed-9ea45aab3d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:26:6d:f0:83:b5:b3:82:08:b3:8c:a2:24:b9:1e:f0:b7:c4:
         12:45:a0:98:9d:94:43:d9:fc:6a:ea:7b:0a:9c:ad:54:9f:19:
         47:b0:a7:71:df:b5:ce:63:f5:e5:cc:98:42:86:14:79:7e:57:
         f7:c4:12:35:79:de:87:5f:37:a1:fb:17:a6:c8:b0:84:8a:a3:
         98:d4:5e:05:19:48:a3:8e:21:ea:09:4a:a4:d9:f4:0c:31:a2:
         81:73:ee:9d:6f:df:95:e2:2c:17:c6:21:23:cb:a5:29:bb:03:
         4f:d1:a1:41:a6:4b:05:93:ac:84:1f:26:c3:ae:67:e9:45:ca:
         e1:8d:7f:60:00:a3:74:4b:11:11:7e:85:75:74:b4:a0:59:56:
         20:e1:37:47:f2:48:64:88:f8:43:5a:83:af:05:a8:35:df:e4:
         13:8a:57:88:24:32:6e:31:e7:ef:6c:48:e6:1c:a8:bd:8a:e0:
         01:65:6b:fd:59:66:39:5b:f5:1d:8b:89:ea:32:3b:23:88:a2:
         ad:b3:8e:f7:50:b0:0d:e4:2f:e5:c7:d8:cf:ce:79:00:38:d0:
         7a:13:79:9c:42:23:bf:75:01:bd:24:05:0c:7a:56:b8:84:cd:
         d2:31:97:09:d6:6a:d7:47:7a:81:16:9c:69:e7:ec:91:7f:1b:
         7c:15:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:05:35 2025 by rpki-client