Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/0a4474d2-fcd1-3338-8cb9-4278aa4e8aca.roa
File:                     0a4474d2-fcd1-3338-8cb9-4278aa4e8aca.roa (raw, json)
Hash identifier:          N7cMBzfTUN1t9ilqmYIctVy0GZn9JDR2wqRZ/k34XPI=
Subject key identifier:   C4:4B:CA:EC:E6:B2:02:30:B4:F5:D5:1E:BA:22:50:CB:DA:63:C6:78
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F4328584B3821A2FAFE95212CCB715A00
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/0a4474d2-fcd1-3338-8cb9-4278aa4e8aca.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        168.203.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:a2:fa:fe:95:21:2c:cb:71:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=7d9f5c6a-c37a-4557-b7b4-36841a2854ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:f9:1b:83:d6:61:0d:46:40:38:43:a9:aa:
                    85:aa:2a:e5:e0:00:dc:5d:4b:cf:63:ac:99:80:5d:
                    64:2c:cb:99:39:7a:2d:4e:5b:1b:c8:e3:e4:eb:46:
                    9f:e9:da:b9:e1:42:19:6c:60:76:52:02:03:6f:d2:
                    f5:b9:02:c0:a9:95:35:b5:31:dd:67:29:02:9a:dc:
                    28:12:d4:73:cd:8a:f9:a7:3b:71:43:87:c1:5d:c6:
                    61:b2:50:c5:bc:ac:53:97:d4:bc:d2:ec:59:df:bb:
                    c3:fa:8a:14:97:37:a1:5d:f5:dd:00:61:48:28:cf:
                    9d:80:3f:49:ea:2d:93:2a:c6:d9:95:49:07:20:6c:
                    72:aa:df:23:f5:b2:b7:6e:89:2e:ca:0a:b6:07:3e:
                    c4:c0:c4:ff:b6:6f:71:44:e6:b1:b1:7f:e3:67:40:
                    65:cd:29:fb:f8:7b:3a:85:e3:2a:49:27:40:70:32:
                    f1:1e:7c:57:5c:53:d7:5b:3a:18:0b:a2:0f:d5:7c:
                    df:0e:87:a8:95:d7:17:bc:0f:31:52:5f:9c:4d:21:
                    83:9e:b7:4e:54:01:7e:72:0a:b6:30:56:66:e3:bf:
                    e0:a7:78:e3:d7:b9:c5:58:b8:69:01:ad:dc:c2:1c:
                    a9:ae:9a:4d:23:ef:fa:5d:d3:da:1a:28:cb:c6:81:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4B:CA:EC:E6:B2:02:30:B4:F5:D5:1E:BA:22:50:CB:DA:63:C6:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/0a4474d2-fcd1-3338-8cb9-4278aa4e8aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:46:a2:8a:46:dc:0a:9e:c4:ca:6b:45:85:24:17:65:36:2c:
         3b:91:7f:9d:0b:04:b3:52:1f:a6:b0:3c:15:14:ef:d4:28:01:
         7c:36:45:2d:a9:2d:ad:56:d5:87:77:0a:18:d0:da:a5:29:0c:
         18:00:0e:91:83:c1:9b:2d:54:08:f6:d6:22:83:af:88:0c:18:
         b6:de:46:81:87:4d:58:f9:bf:43:9c:fb:27:3b:64:5b:09:22:
         a5:5a:c2:0d:eb:e9:8a:0a:53:e3:c9:a5:aa:33:b0:03:c4:84:
         7c:1c:dd:a6:56:50:51:96:f8:34:52:9d:67:ff:13:88:63:d9:
         6e:57:62:bf:99:2f:35:a0:80:a0:ec:fa:85:5c:c7:06:20:1b:
         93:07:11:b7:de:c5:95:9e:27:e8:2e:83:0c:99:7f:a2:97:28:
         96:9e:b5:87:2d:8e:ac:19:15:ff:9b:e6:49:b7:e0:62:73:4e:
         dd:f4:ea:e7:dc:56:ba:97:6d:de:d3:65:40:df:de:7d:3f:e3:
         d1:5b:29:c5:92:5d:e3:36:bf:61:59:d1:b1:7c:3f:6f:61:21:
         2f:da:f3:7f:84:ba:89:e5:0d:a5:22:2c:db:57:10:43:9a:5e:
         4c:01:b5:28:17:a2:68:8e:74:01:a7:35:79:5a:b0:93:57:fd:
         21:4f:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:19 2025 by rpki-client